Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3330303a3a2f34302d3430203d3e203438373137.roa
File: 326131343a343438373a3330303a3a2f34302d3430203d3e203438373137.roa (raw, json)
Hash identifier: dMT4dxHkQKnpIXLNNF+abkagUlDreKYOI1tLa6xDkBc=
Subject key identifier: F9:0F:27:0F:3B:AC:39:F3:C4:0F:BE:74:EC:8F:86:85:B6:68:BA:34
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 5543A43F1E58040CD985122DBA2E1BCB6E9CC37D
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3330303a3a2f34302d3430203d3e203438373137.roa
Signing time: Thu 11 Jan 2024 08:46:32 +0000
ROA not before: Thu 11 Jan 2024 08:41:32 +0000
ROA not after: Thu 09 Jan 2025 08:46:32 +0000
asID: 48717
IP address blocks: 2a14:4487:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:43:a4:3f:1e:58:04:0c:d9:85:12:2d:ba:2e:1b:cb:6e:9c:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:41:32 2024 GMT
Not After : Jan 9 08:46:32 2025 GMT
Subject: CN=F90F270F3BAC39F3C40FBE74EC8F8685B668BA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:2f:ab:87:91:a8:65:8e:0d:2b:04:8b:78:
82:3c:cf:73:c8:0b:f4:1b:f2:93:9b:4f:c8:ba:ea:
1d:c3:e2:e2:23:c8:2b:4b:61:43:99:61:83:a6:e1:
55:e3:d7:65:3b:9a:56:31:2a:2a:78:24:23:8b:21:
7d:7a:e0:00:1c:13:43:02:97:28:2a:da:d3:f1:53:
c1:a2:e8:64:fd:b0:93:d5:44:c7:9d:a3:14:b6:43:
08:5f:42:38:41:2b:12:db:cc:40:a6:28:79:62:2a:
a0:9f:38:49:74:6a:1e:85:65:ae:2c:37:c5:fb:7c:
23:a9:4a:83:dd:a9:6e:93:36:6c:9b:05:b2:8c:4b:
3f:02:a3:38:36:8d:da:a0:1d:01:4b:c0:7d:58:00:
d1:3e:82:11:16:c1:65:aa:cc:6a:8e:6e:65:36:a1:
38:ec:5f:a0:cd:73:03:05:6b:0e:e1:9d:8b:c4:c5:
52:7a:e5:88:c1:ef:f1:29:ea:f8:2f:32:a9:8a:cf:
ef:ed:4c:fa:b1:fb:5d:db:62:5f:55:07:3b:f9:7e:
c5:85:27:52:1f:9a:7e:4d:db:73:67:22:5b:67:dc:
6b:dd:fb:ad:90:8f:99:78:43:05:5e:fd:a1:7a:1b:
3f:5f:f2:63:d3:42:4c:d2:ae:69:9e:06:f9:78:80:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:27:0F:3B:AC:39:F3:C4:0F:BE:74:EC:8F:86:85:B6:68:BA:34
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3330303a3a2f34302d3430203d3e203438373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:300::/40
Signature Algorithm: sha256WithRSAEncryption
5c:92:90:bf:5d:5c:96:7d:8f:48:5c:05:6c:52:e9:a2:0f:42:
65:00:82:ed:fb:95:1b:f8:b3:6d:f0:dd:03:08:af:5e:47:8d:
e3:5a:59:2a:96:8e:4c:35:86:df:0b:d4:91:84:64:92:be:a5:
f5:57:f1:42:60:db:e3:46:2d:2a:9d:53:49:b7:55:3b:40:2b:
65:19:af:32:53:ea:db:b3:11:03:5a:e3:66:9f:ff:b7:8f:46:
7a:e0:3d:85:95:ce:7c:27:56:a3:a9:05:06:62:d8:dd:43:98:
94:86:0b:5d:8b:ac:5f:e6:a4:27:fd:97:13:26:fd:39:bb:f6:
50:c0:12:60:65:7b:71:fa:62:ca:db:68:15:32:b6:bc:b6:db:
83:3d:66:37:65:ad:94:b7:da:44:27:ed:94:92:dd:93:c2:4a:
4c:7e:36:01:74:34:e2:e5:db:5e:7a:c2:1a:9e:e9:b1:dd:54:
b4:19:08:5e:8f:dd:4e:95:cb:6c:a7:1c:5a:e0:dc:37:52:3a:
d4:78:39:cf:3e:34:27:89:95:57:2f:1a:98:cf:11:ed:65:03:
88:f0:e4:97:60:3b:a1:6c:56:6b:f9:01:6a:8e:2f:3d:da:19:
dc:12:19:c9:8b:2d:24:dd:cb:33:69:e9:79:cf:d4:56:ec:73:
80:5c:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org