Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
File: 326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa (raw, json)
Hash identifier: xHvS7crXK/uCdPxRlMIjanb+1wARBWbx49OHi4hcRVs=
Subject key identifier: 82:3A:E8:B7:3C:E2:B6:D9:76:AE:A0:6D:42:EB:2A:E2:5F:DC:23:6D
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 07F15511AADA0E8F747493D144CD52B16041E284
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:8240::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f1:55:11:aa:da:0e:8f:74:74:93:d1:44:cd:52:b1:60:41:e2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=823AE8B73CE2B6D976AEA06D42EB2AE25FDC236D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:17:12:e5:e7:f6:05:4c:27:c8:96:85:01:
87:25:ac:4c:8a:07:e9:54:6d:2c:b7:a6:cd:88:bc:
62:04:c6:f4:86:ca:30:61:95:ee:25:32:6b:bf:27:
7a:56:59:b4:01:71:2a:3e:76:df:2a:da:7e:f7:5e:
74:b6:8f:63:0f:9b:35:ec:8f:e6:97:4b:99:e3:28:
e8:4b:1d:c2:c6:09:c6:53:5a:fe:85:a5:6d:6c:74:
d0:39:07:2e:cf:77:59:6b:12:41:cf:e0:9b:1b:3b:
cc:95:69:90:da:99:93:9c:2d:8c:b7:50:8b:78:cb:
7b:0d:ff:12:bb:8d:e1:30:6b:fd:84:98:19:af:06:
8f:74:80:4e:0d:08:37:55:7d:5e:a1:a7:ea:3f:4f:
ab:e1:16:d2:a1:14:d6:1e:f2:7e:ea:99:7e:83:da:
60:5d:ca:c3:ce:ac:08:fb:61:73:73:a1:ec:1b:12:
d3:1d:09:30:77:09:79:8b:67:e5:ff:33:b0:1d:dc:
61:14:02:c1:80:bd:05:a7:c5:5d:56:6e:3a:59:c7:
41:24:40:69:7c:11:b5:be:a5:74:2e:64:af:ac:0e:
97:31:56:9b:5b:eb:07:0c:a0:07:50:03:e6:01:86:
83:2c:37:42:20:1f:00:b8:7f:1f:28:e3:dd:88:21:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:E8:B7:3C:E2:B6:D9:76:AE:A0:6D:42:EB:2A:E2:5F:DC:23:6D
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34332d3433203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8240::/43
Signature Algorithm: sha256WithRSAEncryption
cd:85:f3:a7:c8:6c:ec:d2:15:d4:d8:73:06:06:58:4c:f0:7e:
a5:05:42:b9:95:b2:0e:84:e8:0e:33:1c:49:f2:51:fd:92:22:
7c:dc:2a:a9:bd:35:e7:f8:02:9e:a4:50:31:f7:dd:de:69:ed:
57:bd:e5:41:ad:c1:66:44:7e:86:03:07:f4:3f:03:26:c4:b2:
fe:19:d5:5f:6e:c1:cf:29:f1:ff:99:d2:2e:f5:09:5b:91:87:
21:7b:c2:05:c1:51:0e:fb:4e:8d:95:f0:40:55:d1:4f:50:8c:
be:e9:e0:b5:89:5d:d4:88:54:4a:8e:99:8c:b6:3f:4f:fe:53:
13:ba:f3:66:20:34:36:18:62:24:46:b2:41:d9:32:95:76:73:
62:32:1e:cd:bc:6a:f1:f9:5d:3a:8c:86:ca:84:3b:57:2f:b2:
90:e5:11:77:42:b9:b5:62:1b:0d:61:c8:f8:44:1f:b9:0d:c3:
57:2a:61:c0:97:63:cf:19:c8:70:6e:59:ad:6c:cf:f7:8a:90:
16:37:a9:d6:de:e6:e1:ac:bb:d5:8d:f3:8f:bf:a2:a3:4b:75:
33:18:6b:a8:f8:f2:33:2f:e6:06:d5:e5:e6:6d:e1:06:40:3e:
32:64:fd:f0:17:ef:24:bf:33:b3:64:bc:fc:04:3c:79:5d:1e:
6f:5a:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:13:25 2024 by rpki-client on console-ams.rpki-client.org