Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3130303a3a2f34302d3430203d3e203233323230.roa
File: 326131343a343438373a3130303a3a2f34302d3430203d3e203233323230.roa (raw, json)
Hash identifier: ajy0xpL4Sj1/hoiixRRus/RWJ2t/Qa+25oTtRCrLZRc=
Subject key identifier: 09:A7:BD:C3:8D:86:BF:A4:B7:D6:01:13:55:6B:5D:7C:A4:55:EE:15
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 5B434A554AF25087C74DBE66FCC1277C014FAC85
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3130303a3a2f34302d3430203d3e203233323230.roa
Signing time: Thu 11 Jan 2024 08:46:00 +0000
ROA not before: Thu 11 Jan 2024 08:41:00 +0000
ROA not after: Thu 09 Jan 2025 08:46:00 +0000
asID: 23220
IP address blocks: 2a14:4487:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:43:4a:55:4a:f2:50:87:c7:4d:be:66:fc:c1:27:7c:01:4f:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:41:00 2024 GMT
Not After : Jan 9 08:46:00 2025 GMT
Subject: CN=09A7BDC38D86BFA4B7D60113556B5D7CA455EE15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:6d:f0:c7:67:d0:78:39:44:4b:ae:5e:8d:
ff:a7:89:b5:66:41:b8:13:6c:80:af:6b:3f:4e:93:
b7:f9:36:6d:57:dc:73:e5:ea:52:62:e3:d1:87:66:
19:30:eb:31:14:ce:3c:08:ec:c3:ad:97:04:8f:e3:
7c:48:21:18:27:59:e0:ea:74:19:87:61:d1:1b:6c:
e3:11:ff:3d:5c:8a:b1:e8:c1:c1:a7:7b:3a:e2:22:
f0:da:89:df:45:fb:cf:44:4d:a6:1b:6e:89:bb:f4:
a8:f3:1e:a3:7e:70:8e:18:c4:6b:a3:66:74:cc:6b:
b4:c9:d0:16:48:d6:f2:06:4a:0f:53:ee:3a:e1:4e:
1f:11:c3:f3:7f:89:08:21:bf:c4:49:6c:4b:16:1f:
a2:cf:87:27:b3:a7:45:27:5b:98:d7:10:c5:2c:4a:
87:7f:b3:f9:f7:99:5d:c4:0e:c6:bf:77:24:15:0b:
4c:7f:a6:3e:da:e8:e2:ec:8e:ce:c5:88:2a:5c:4d:
9a:49:97:4d:98:e6:31:c7:bf:d3:4e:df:31:19:99:
b4:28:d6:7f:cd:dc:70:a8:1a:d6:a3:63:de:2c:1b:
e7:d0:2b:d1:6b:3f:46:51:85:51:f4:52:23:6f:16:
62:d1:70:91:35:6d:ca:9d:be:df:5b:14:a0:95:99:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:BD:C3:8D:86:BF:A4:B7:D6:01:13:55:6B:5D:7C:A4:55:EE:15
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3130303a3a2f34302d3430203d3e203233323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:100::/40
Signature Algorithm: sha256WithRSAEncryption
61:30:19:b1:ed:4c:d4:59:52:13:1d:4a:0f:09:75:72:ee:e6:
35:d6:ae:59:af:e2:fa:d3:17:06:ec:24:9f:c5:c2:50:a8:36:
82:70:86:d2:1d:b4:1b:43:9b:c0:66:9c:bc:f4:c2:3a:3f:a1:
61:f5:63:98:e5:e5:c5:4e:84:ed:01:e9:c6:17:88:60:99:bc:
28:cf:fb:97:78:76:a5:76:ad:f6:f7:3f:c4:a9:f3:7c:3b:5f:
f7:15:ca:55:33:2c:58:93:e0:c7:b3:f9:66:61:74:bf:36:98:
3c:0f:08:3e:08:85:46:a0:a3:9d:47:70:bd:37:3d:08:87:62:
50:7d:3a:a4:4d:36:a4:7f:9b:4e:27:ce:27:e8:1a:b3:12:bf:
b9:0d:b1:7f:22:87:4f:5f:85:97:22:3d:a9:ea:34:ff:05:87:
f5:c5:fb:60:3f:ca:19:4a:32:96:5f:7a:fb:dc:0a:42:2b:2a:
8b:46:ad:77:7a:48:18:0d:ce:15:a2:25:68:ce:3c:1d:cc:19:
ad:5a:e2:9f:3c:7f:45:e8:b2:55:5c:0a:53:e9:14:ea:b2:f4:
c0:28:e0:c5:f0:d2:ed:2a:e0:f5:c0:51:a5:4e:db:c0:c1:0e:
e9:24:76:b1:61:34:a8:a1:7a:93:3b:00:4e:78:4c:87:e9:69:
fc:b6:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:33:24 2024 by rpki-client on console-fra.rpki-client.org