Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa
File: 326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa (raw, json)
Hash identifier: ooA5H0AHj634S4JL6RMWTjbq+J2z9KXq9zx0wiTQLgk=
Subject key identifier: 82:22:5B:60:CC:EC:9D:F0:BC:6C:8A:2B:EA:2C:35:15:8E:31:47:A9
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 49B5D312993EE22EF927566CD922E3E036CDA8BF
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa
Signing time: Thu 13 Jul 2023 20:51:13 +0000
ROA not before: Thu 13 Jul 2023 20:46:13 +0000
ROA not after: Thu 11 Jul 2024 20:51:13 +0000
asID: 48454
IP address blocks: 2a13:df80:1400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b5:d3:12:99:3e:e2:2e:f9:27:56:6c:d9:22:e3:e0:36:cd:a8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Jul 13 20:46:13 2023 GMT
Not After : Jul 11 20:51:13 2024 GMT
Subject: CN=82225B60CCEC9DF0BC6C8A2BEA2C35158E3147A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c4:56:0f:19:93:5a:6c:e7:0e:63:ff:52:3e:
d7:63:c8:0b:9f:2b:03:e4:bc:8e:9e:24:6d:4d:a5:
f8:1b:5f:e4:1f:46:52:04:2d:00:4b:30:f5:4b:e2:
26:45:ba:6f:d9:d2:65:b6:e5:d2:fe:77:95:bf:6f:
ab:c9:67:a1:c3:71:e9:fa:fd:f9:e1:f6:4e:23:3d:
13:91:3d:62:a6:02:cf:f6:a8:e9:41:00:79:29:e1:
cd:e5:62:c4:01:0e:3d:4b:d2:15:6d:99:c8:e6:4d:
1c:78:9c:b5:38:08:89:12:41:d9:63:ab:b5:50:68:
7a:93:ec:87:e1:45:0f:1e:8e:97:45:40:56:d1:c1:
db:ba:9b:c2:b5:a6:f3:ef:1e:6f:e2:09:b9:b4:b9:
69:c6:6b:60:e3:ea:15:45:ee:82:0a:4b:68:56:45:
01:63:8b:a4:78:62:55:5c:a4:8e:41:21:0e:51:a1:
9d:40:e2:fe:48:b1:a7:b1:89:e8:74:ff:04:dc:ae:
de:8e:c5:b3:47:4b:4e:98:aa:21:10:f8:7f:b2:f0:
75:f0:f5:de:8d:12:64:be:8e:23:38:3e:e6:3e:4d:
ca:5e:88:d3:0a:2e:c6:15:9f:f2:81:b1:77:25:87:
de:25:b9:f6:3e:30:11:e1:a0:4f:22:2a:8f:aa:da:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:5B:60:CC:EC:9D:F0:BC:6C:8A:2B:EA:2C:35:15:8E:31:47:A9
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313430303a3a2f33382d3438203d3e203438343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1400::/38
Signature Algorithm: sha256WithRSAEncryption
5c:c2:9d:a7:a1:69:02:a0:0a:23:6c:91:b4:8e:d6:4d:eb:80:
80:ec:15:10:e0:dc:ee:89:05:a0:a4:c7:08:29:e1:5d:f4:21:
ae:fe:6e:55:89:31:69:21:35:64:e5:53:47:28:1a:92:78:86:
18:cd:61:41:65:7d:87:1f:8b:e5:be:d2:e6:8d:53:f4:54:95:
97:d3:e4:3f:49:ae:0a:1f:c6:42:5e:30:79:52:94:df:6d:60:
9a:ab:37:41:32:ab:05:66:12:60:09:27:af:6c:d1:f4:f2:0b:
47:c5:d2:55:a9:f3:5f:c8:9d:c6:0f:7b:39:f7:d4:3a:6f:97:
5e:25:d6:f3:c6:2f:91:18:fb:72:a2:45:54:00:b0:0d:89:13:
07:d1:c0:7c:ae:b8:fb:f2:6d:a5:73:ef:35:f5:27:5b:19:90:
1d:10:ab:93:b9:0b:3c:b5:8b:d1:e1:a1:c4:4c:44:69:07:9f:
d8:f6:ca:cf:c5:a2:4a:01:94:6b:84:9e:28:6a:b0:da:f2:a6:
6e:b3:af:f4:54:10:2e:6d:d6:e2:18:e9:87:c1:d2:df:b8:db:
ce:53:a5:4c:06:f1:cc:ba:51:8a:92:64:fa:18:fc:d4:8b:5c:
91:4f:80:0c:8e:12:17:73:ae:7f:b8:f5:3a:57:9e:26:ff:29:
16:77:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:37 2025 by rpki-client