Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa
File: 326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa (raw, json)
Hash identifier: OM3I4+7m1lrtVLrhAh+Cp6v81atfdsP2LnPnNe7cHK8=
Subject key identifier: 95:2C:16:35:30:89:D4:7C:E2:1F:8D:98:2D:36:38:84:EE:E5:E4:9C
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 7C379B7CDE9252C0E82FBB162E959EC3EF92FECA
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa
Signing time: Thu 05 Oct 2023 16:17:18 +0000
ROA not before: Thu 05 Oct 2023 16:12:18 +0000
ROA not after: Thu 03 Oct 2024 16:17:18 +0000
asID: 3209
IP address blocks: 2a13:df80:1196::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:37:9b:7c:de:92:52:c0:e8:2f:bb:16:2e:95:9e:c3:ef:92:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Oct 5 16:12:18 2023 GMT
Not After : Oct 3 16:17:18 2024 GMT
Subject: CN=952C16353089D47CE21F8D982D363884EEE5E49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:4a:e7:0d:30:2c:ad:ba:fc:94:ec:e6:d0:
26:95:07:ca:59:f8:5b:6b:4e:2f:97:dc:84:3a:53:
ea:31:65:34:ee:7a:82:c5:be:7d:a1:ad:fc:f3:4b:
de:cc:8f:85:22:11:19:ad:4f:6c:45:9c:47:75:50:
fc:80:60:0f:11:a6:99:f6:5f:b6:7a:0d:75:cf:bb:
50:40:18:62:d8:4a:c6:84:6d:45:89:4d:58:d7:14:
e4:dc:54:1b:77:17:17:aa:90:2b:fd:6e:a4:02:55:
02:44:f6:34:ac:1c:e0:09:b8:22:ed:a8:76:bc:b9:
5e:b5:ea:c0:b3:14:e5:88:51:43:b7:79:b9:d6:c5:
54:33:07:b4:93:a3:de:94:b3:21:f7:b7:8f:40:49:
fe:bf:95:e9:f5:f2:e0:18:fa:2a:de:9c:b5:aa:83:
4e:56:f4:e6:5b:69:83:0a:d0:30:94:a2:b0:08:b6:
0a:57:14:9b:a9:bf:7f:4f:04:b3:fa:8e:42:b6:39:
e6:12:e8:80:97:e1:81:17:8b:47:1f:51:64:00:2f:
2f:d7:79:1b:c4:78:a2:74:51:de:b7:28:2a:f5:87:
b7:15:35:af:6d:80:83:cf:a1:e9:40:05:7f:40:c5:
0f:ba:b6:0a:38:d2:3f:62:ca:28:5b:5e:3c:47:6d:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:16:35:30:89:D4:7C:E2:1F:8D:98:2D:36:38:84:EE:E5:E4:9C
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313139363a3a2f34382d3438203d3e2033323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1196::/48
Signature Algorithm: sha256WithRSAEncryption
7e:ca:46:60:3b:4b:8e:c6:c3:49:92:cf:47:28:28:6b:07:85:
61:4e:15:af:db:eb:3a:e1:7e:27:6c:9a:c1:01:ee:cd:bb:50:
bd:58:23:86:24:98:81:2c:09:a5:1d:94:93:b9:15:38:3e:a1:
24:14:65:97:9a:0d:8e:6e:73:e4:32:fc:35:f0:ca:ad:e9:90:
48:71:f7:c6:aa:27:02:77:59:49:75:c2:fa:6c:ab:e1:3a:3c:
b3:14:92:8e:8f:b2:66:4f:a6:80:66:d9:66:a7:7b:45:b4:17:
75:16:63:db:ec:49:e2:a2:92:a8:10:f1:79:32:31:2b:31:ac:
f8:05:0a:58:81:bf:15:57:4f:c7:bf:64:f4:cd:a2:9f:af:10:
33:21:8c:97:3e:d0:7f:6d:69:e3:cf:f0:4b:37:12:6f:65:62:
ce:4e:f0:f5:6a:87:5e:ce:ff:75:2a:8f:1d:53:83:ec:f5:e6:
23:d9:dc:ce:b9:21:11:07:54:38:34:7a:b4:7c:21:22:72:c6:
16:a9:0f:93:4c:d4:84:02:79:32:9f:03:10:99:05:5e:d9:a8:
fc:70:a1:18:66:ca:cd:b3:7c:c2:3e:c3:e7:67:89:08:ed:81:
29:f0:98:24:36:47:8a:8f:a0:7b:af:04:4c:c2:3e:52:f4:d3:
1b:49:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:03:26 2025 by rpki-client