Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
File: 326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa (raw, json)
Hash identifier: 1cAwkJuiU5GKLbRZxWvRh4rpV/XlkX375IHR1NbBazY=
Subject key identifier: B9:A3:8F:9A:23:03:A2:D9:79:46:3E:29:D1:CF:C2:D0:E5:D0:47:6A
Certificate issuer: /CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Certificate serial: 1E66413314F188FE9300A9EFA24D9DDDE3D2E917
Authority key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
Authority info access: rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
Signing time: Thu 18 Apr 2024 23:17:35 +0000
ROA not before: Thu 18 Apr 2024 23:12:35 +0000
ROA not after: Thu 17 Apr 2025 23:17:35 +0000
asID: 199518
IP address blocks: 2a12:dd47:3800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:66:41:33:14:f1:88:fe:93:00:a9:ef:a2:4d:9d:dd:e3:d2:e9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Validity
Not Before: Apr 18 23:12:35 2024 GMT
Not After : Apr 17 23:17:35 2025 GMT
Subject: CN=B9A38F9A2303A2D979463E29D1CFC2D0E5D0476A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:e3:d5:5a:23:f2:be:e2:a5:91:10:10:0f:
c4:80:20:f0:06:ea:e1:95:53:7d:52:36:55:3e:37:
d1:4b:77:7d:d8:f8:f5:c7:a2:35:e9:b3:32:8d:51:
06:5f:44:8b:14:08:af:72:d7:8d:6a:73:5d:5e:1a:
ff:b0:52:ad:50:be:3e:a9:ea:d7:30:67:08:de:89:
3d:98:d6:ec:c1:bc:61:da:0b:5a:cf:ee:7d:52:eb:
21:62:09:34:ec:06:25:66:0c:f4:eb:44:ee:64:0c:
15:e4:86:7d:9a:ef:1d:68:8b:41:7c:55:7a:cb:48:
29:57:94:fe:e3:84:c0:a8:66:c8:3b:af:86:c3:13:
e8:88:ac:b0:60:0d:74:bc:07:3d:c6:81:d9:cc:73:
1c:5b:ee:d8:63:a3:91:4e:0b:02:05:c8:bd:d2:f3:
4a:e2:c7:83:15:90:61:6f:24:48:fb:5d:99:57:5a:
68:69:e9:b2:f0:59:fd:43:d9:ce:b2:36:9b:14:cf:
06:35:8c:43:53:30:72:2a:c5:d2:09:da:20:a0:a0:
42:a7:78:ce:b0:f5:f7:16:a4:86:f0:8e:21:59:7f:
f7:cc:dc:54:e4:ff:b1:6c:fb:a1:0e:4d:f5:78:e9:
4e:52:21:7e:23:ea:17:fe:5b:4d:c0:aa:07:bb:1c:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:8F:9A:23:03:A2:D9:79:46:3E:29:D1:CF:C2:D0:E5:D0:47:6A
X509v3 Authority Key Identifier:
keyid:10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3800::/40
Signature Algorithm: sha256WithRSAEncryption
c2:dc:67:c0:84:7a:77:07:d7:ee:d4:e7:eb:07:39:21:e2:93:
ab:45:9d:01:a6:da:1d:03:58:54:8f:1d:19:53:10:be:4d:83:
bb:48:cc:c2:1a:88:7e:18:19:4f:7d:c1:19:ad:f2:5d:6a:c9:
ab:0e:c6:35:ff:e9:49:5d:f2:c5:19:e0:75:da:fa:04:80:7b:
e5:75:36:5a:31:76:30:30:44:e4:99:ef:86:20:09:d3:21:8f:
c4:45:15:f0:08:34:e9:06:29:05:ea:1e:20:9d:68:97:1a:90:
ee:da:19:89:d9:22:bc:4b:75:92:f5:b2:cf:1f:b3:4f:c5:55:
a7:4f:be:b4:dd:19:69:2b:95:07:68:35:e1:1c:ce:fe:0a:bb:
ff:5e:42:9a:59:0e:18:fc:03:74:80:c3:9d:94:02:1c:0e:e0:
63:fe:e1:ed:86:03:e8:70:db:4d:02:af:67:be:62:23:0a:42:
20:a2:99:b5:66:53:a3:4c:76:86:c6:5b:30:38:d5:b4:d9:63:
88:5a:ca:9d:a5:cd:7c:07:2d:6d:45:4b:c2:c4:5b:72:f1:18:
a5:59:0d:91:4b:5f:89:91:ea:7a:f6:63:00:3d:62:fb:ce:4e:
81:ee:be:51:03:bf:5a:9a:e6:e9:d2:77:7c:c4:1c:80:da:9d:
24:ad:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:17:30 2024 by rpki-client on console-fra.rpki-client.org