Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3830303a3a2f34302d3430203d3e20323031333938.roa
File: 326131343a343438373a3830303a3a2f34302d3430203d3e20323031333938.roa (raw, json)
Hash identifier: smS4MMyqQ/ZTpVNreOreERaXsw/Zi1zmWM9bv5jgQLo=
Subject key identifier: CA:99:F4:3A:18:82:95:FB:BD:6C:8A:82:6D:A3:F6:FB:90:73:60:49
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 1DD7B172248B0AC8626AD07637008F24FD853608
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3830303a3a2f34302d3430203d3e20323031333938.roa
Signing time: Thu 11 Jan 2024 08:47:50 +0000
ROA not before: Thu 11 Jan 2024 08:42:50 +0000
ROA not after: Thu 09 Jan 2025 08:47:50 +0000
asID: 201398
IP address blocks: 2a14:4487:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d7:b1:72:24:8b:0a:c8:62:6a:d0:76:37:00:8f:24:fd:85:36:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:42:50 2024 GMT
Not After : Jan 9 08:47:50 2025 GMT
Subject: CN=CA99F43A188295FBBD6C8A826DA3F6FB90736049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:28:b6:31:0e:4d:75:1e:10:ce:bf:20:fa:
cf:13:bd:e0:80:88:d8:b6:d5:af:64:23:92:f4:f7:
21:bc:26:65:d5:95:4a:2c:d7:e6:80:53:ed:bc:68:
ae:69:bc:6e:db:4f:23:89:29:5d:56:39:af:eb:ed:
dd:bf:05:40:95:08:a2:2d:81:8c:bd:f3:3d:ab:ac:
64:f6:70:29:9d:c1:69:cb:15:9d:1b:5b:71:f2:b3:
c8:15:0d:41:3c:84:f3:73:cf:24:8e:ab:8f:29:e0:
9c:20:0a:46:e7:23:85:7f:0c:9f:7d:58:b4:38:0f:
4b:78:2e:17:4d:54:76:e9:ba:98:a9:3d:14:10:79:
c4:6c:a2:60:06:b9:27:d5:cd:86:43:24:a1:d7:62:
5f:be:c4:f6:e7:ca:63:72:74:19:6d:9f:18:8d:0d:
46:c1:fc:76:15:7c:83:f0:70:0f:37:b8:f9:90:65:
f6:5b:e4:6d:c2:7c:4e:8c:af:ba:21:60:60:dd:54:
33:60:70:f2:ce:98:21:ed:a1:56:67:a8:36:33:94:
1f:ac:b9:12:ea:20:2d:5e:8b:47:5b:eb:5c:72:d5:
49:2a:49:7c:73:ec:4a:c2:b3:b2:53:81:16:9b:01:
56:23:3d:1f:4c:8e:f7:58:e3:37:d3:49:8c:f3:a6:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:F4:3A:18:82:95:FB:BD:6C:8A:82:6D:A3:F6:FB:90:73:60:49
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3830303a3a2f34302d3430203d3e20323031333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:800::/40
Signature Algorithm: sha256WithRSAEncryption
01:46:a1:1f:d3:6e:aa:7d:38:3d:23:a0:b5:ea:f3:05:11:f9:
11:b1:7c:e1:91:d8:49:76:63:41:40:5b:b6:d8:1b:ec:cf:63:
97:99:17:d0:05:ca:32:fa:2b:3e:98:c9:3f:10:6c:6d:ba:8f:
d1:20:36:15:eb:0c:9c:81:17:c9:80:21:f0:a2:44:18:e1:e6:
ca:05:cc:f8:a0:b0:dc:58:5d:67:15:e6:20:eb:4a:d4:9f:6c:
c7:7f:ad:35:15:de:54:69:5a:70:54:77:22:8d:2d:06:49:8b:
4f:0f:9f:21:cf:9b:2f:10:bc:4d:e8:08:6c:40:c3:05:f6:aa:
d8:d5:96:bc:b7:4c:51:35:10:39:ae:52:32:92:1d:fd:58:34:
33:c9:d7:46:0e:37:e9:3f:d7:83:50:f1:1c:77:ae:7a:e7:aa:
fe:81:3a:74:4d:56:42:7e:e9:da:2d:94:f8:4d:53:06:69:cd:
55:8a:de:a5:82:48:d8:44:74:77:46:50:ac:1f:d4:f4:fe:11:
3b:c3:bb:6e:98:d2:d3:2c:52:a3:7e:99:e7:f9:40:4a:03:5d:
d4:95:9d:ca:df:d1:6e:71:e5:5a:0e:72:0c:80:27:65:b3:80:
96:ba:10:e6:45:08:42:4e:a4:29:f4:e1:40:70:ad:0e:9f:83:
e5:43:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:33:24 2024 by rpki-client on console-fra.rpki-client.org