Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa
File: 326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa (raw, json)
Hash identifier: fYkC3lHCOq6cQx3NpgJrrk+GVXkYfLPInrlbcOJFuCw=
Subject key identifier: C8:AA:74:E1:0A:DC:5B:E9:5C:1E:BD:E7:D6:50:9B:0C:D0:9D:04:A6
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 4F727B43951DACAEE0E08A5F5656664BF6D5F533
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:04 +0000
ROA not before: Fri 13 Oct 2023 19:50:04 +0000
ROA not after: Fri 11 Oct 2024 19:55:04 +0000
asID: 205329
IP address blocks: 2a12:dd47:8240::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:72:7b:43:95:1d:ac:ae:e0:e0:8a:5f:56:56:66:4b:f6:d5:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:04 2023 GMT
Not After : Oct 11 19:55:04 2024 GMT
Subject: CN=C8AA74E10ADC5BE95C1EBDE7D6509B0CD09D04A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:5e:68:24:84:95:b4:61:46:2a:80:78:d2:
3a:5f:34:7d:4f:0a:7e:2c:4b:99:f1:7f:46:ea:a6:
2f:24:bf:c9:3c:58:ac:ba:99:af:79:2e:3e:f6:78:
fa:8a:da:3b:87:fa:48:b9:f8:f3:c6:04:62:08:a3:
e0:cf:15:1e:03:cd:6f:e4:6a:ab:70:f5:f4:c5:2f:
3b:69:8f:8e:05:82:8b:ce:6c:6b:07:ad:50:45:33:
f0:35:05:a9:e8:8c:b4:5b:ac:c8:55:e4:cf:4e:41:
60:96:52:07:05:b6:79:84:74:ba:5f:17:bf:ca:07:
45:00:8e:6c:b3:4d:5b:95:c4:58:e5:3f:35:b8:b4:
74:eb:b8:ee:9a:44:b3:00:d5:e1:08:34:b5:e8:bd:
08:4c:1f:28:14:5e:1c:d1:db:2c:8c:2a:b8:9d:bf:
c6:20:79:3d:a5:82:6a:c9:0e:40:b1:aa:33:ab:c4:
04:73:87:48:53:32:a5:c5:90:23:83:09:1b:9d:b5:
87:50:5a:6b:e4:d9:41:93:d4:57:1b:58:86:7c:ba:
fd:95:d6:e6:ac:8d:b8:d4:cd:1c:0f:0d:36:f4:00:
8e:32:d1:a3:37:6a:1c:8d:17:94:e3:a0:0f:d5:5a:
17:44:c0:5e:dd:74:36:c9:75:c9:97:1a:87:46:10:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:74:E1:0A:DC:5B:E9:5C:1E:BD:E7:D6:50:9B:0C:D0:9D:04:A6
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234303a3a2f34342d3434203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8240::/44
Signature Algorithm: sha256WithRSAEncryption
ee:2d:0b:c1:2b:ae:93:54:69:c6:a9:d3:e8:97:fd:8a:ff:c0:
4c:1e:f8:ff:e1:bb:d2:c2:82:87:38:6d:a0:e8:4f:8d:3a:16:
a9:63:9d:d4:1c:f5:af:b8:cf:28:4b:e6:81:24:4c:0f:9d:65:
a8:a5:9c:6f:a4:43:c2:54:e2:1d:c6:19:27:53:52:1b:e8:f6:
fa:16:01:26:f4:8b:ab:95:4c:96:4a:e8:88:03:88:8a:36:24:
99:cd:b8:e7:28:c8:a7:7f:4c:7b:12:cd:85:6f:22:b2:a0:27:
49:7c:d9:31:75:20:e9:88:30:04:a7:85:1a:a4:bb:c4:0a:4f:
99:2f:12:46:76:4f:41:98:d1:06:07:12:ad:3d:ba:59:e5:4c:
2f:35:8a:0d:72:b5:52:90:84:f4:a6:00:c3:81:1a:5b:7a:88:
70:f3:70:68:da:46:02:ff:8b:cc:1a:d1:44:75:b7:94:4a:e8:
fb:5f:68:c2:b5:9d:13:d2:0f:2c:62:a6:0b:a1:57:93:79:92:
41:d4:c8:32:0f:07:62:a9:c7:47:14:68:2d:f8:e9:7e:85:f5:
fe:85:4e:bf:07:c4:88:a5:28:bb:d7:a1:3f:03:7e:90:9e:c9:
7b:93:69:71:73:56:9f:eb:94:19:e5:ab:ed:ca:b9:ec:b8:e3:
33:0f:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:12:40 2024 by rpki-client on console-fra.rpki-client.org