Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313030303a3a2f34302d3430203d3e20323033353937.roa
File: 326131343a343438373a313030303a3a2f34302d3430203d3e20323033353937.roa (raw, json)
Hash identifier: UKas5kybt+GDZDky8zdAtsGi5hx/axaNRNrlvO9wkV8=
Subject key identifier: 34:08:D4:0A:4D:16:3A:BD:FE:80:4D:CC:81:E9:FA:72:4B:DD:F1:CF
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 79B9D4E2DA5FEA577D94281B454409073E507C98
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313030303a3a2f34302d3430203d3e20323033353937.roa
Signing time: Thu 11 Jan 2024 08:48:24 +0000
ROA not before: Thu 11 Jan 2024 08:43:24 +0000
ROA not after: Thu 09 Jan 2025 08:48:24 +0000
asID: 203597
IP address blocks: 2a14:4487:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b9:d4:e2:da:5f:ea:57:7d:94:28:1b:45:44:09:07:3e:50:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:43:24 2024 GMT
Not After : Jan 9 08:48:24 2025 GMT
Subject: CN=3408D40A4D163ABDFE804DCC81E9FA724BDDF1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:d5:48:ba:88:f4:a3:58:09:eb:6d:c4:fd:
30:c1:df:9e:66:94:c8:34:1a:1d:21:99:e0:c2:59:
e5:19:52:e9:04:00:d3:61:9c:c2:79:cf:b2:0b:59:
39:b6:94:20:75:af:98:3a:d6:03:a5:8e:19:de:c8:
97:80:99:a0:10:3f:84:16:f3:32:cf:27:f2:a1:8b:
52:b4:e7:a8:01:0c:8e:86:50:c2:62:98:6e:e4:2b:
3a:2e:a1:dc:3c:60:fc:e3:ca:93:c1:d7:96:4b:95:
f3:c1:73:da:1a:31:39:9f:47:27:94:bb:1f:60:81:
8b:92:bf:71:94:ce:85:85:80:05:d8:ce:59:dd:16:
97:bd:af:34:5f:23:5d:f6:8e:a4:1b:e9:33:83:36:
6a:3d:51:1b:8d:01:db:16:67:6c:19:b8:64:b3:d9:
8b:2c:dd:b9:bb:b3:d9:f9:30:16:76:c7:a5:17:ef:
1c:f7:b1:3a:cb:69:61:b2:4c:30:66:27:3a:e4:9f:
49:ad:2d:eb:55:69:f8:5c:ac:56:d1:09:84:7e:22:
c8:44:84:8c:9c:d6:c1:1e:b9:7d:8b:fe:d2:a4:16:
5e:9e:b9:fe:55:fb:4c:94:71:04:2f:4b:b0:31:59:
13:34:fd:e9:79:05:c5:84:6c:31:3c:eb:3e:af:00:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:D4:0A:4D:16:3A:BD:FE:80:4D:CC:81:E9:FA:72:4B:DD:F1:CF
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a313030303a3a2f34302d3430203d3e20323033353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:37:75:fd:8d:45:5c:d0:d5:3a:1a:0b:7d:30:16:01:3e:2d:
83:94:dc:b1:fc:a5:2b:d0:d3:b5:53:10:6a:1c:47:73:84:c8:
57:4f:d9:d0:87:6d:c0:29:45:64:06:fe:16:7c:0b:fa:b0:02:
ed:4a:db:c9:3b:9b:6a:7c:a3:c3:a5:2a:60:c9:fe:71:b2:fe:
0c:2a:4a:02:ea:85:90:b7:ea:b5:fb:19:44:71:8a:1a:22:3c:
8f:61:1a:70:0f:ef:f1:4d:fa:98:18:f1:92:22:b8:1a:99:a4:
88:a1:69:06:6d:1a:04:e3:59:ea:47:b9:cd:80:09:c6:5f:8a:
36:fe:09:c8:fe:51:62:ef:2d:b2:ad:d0:47:a0:dc:55:47:91:
b8:ce:ef:f9:4f:a0:51:95:d6:41:9d:41:cf:0c:71:f1:d1:ab:
72:69:5f:7c:d9:df:30:70:57:ba:73:f7:ab:da:1f:47:1c:98:
88:25:36:4a:d1:bc:36:27:bb:77:63:c3:2b:7e:19:d1:98:2a:
f4:ea:21:09:16:1d:e8:65:b2:c1:ba:aa:00:1e:dd:03:2a:9a:
f1:fb:62:6f:8f:3f:84:12:40:7b:31:4c:9d:d5:e7:4d:52:e0:
55:fc:0e:bd:b7:a7:b6:91:86:78:d9:12:6c:fe:d1:50:03:80:
83:01:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:33:24 2024 by rpki-client on console-fra.rpki-client.org