Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa
File: 326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa (raw, json)
Hash identifier: X1RV9Yhom+5i/9gvjLrbP/PJ4EgfsV8GQWKyc1KOTf8=
Subject key identifier: BA:08:70:0C:F5:6A:19:57:6C:20:7F:0E:E8:7F:CE:BA:82:9C:67:F2
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 4594990EAF3285ABF47AA6E535900CB96177233A
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa
Signing time: Tue 12 Sep 2023 16:04:06 +0000
ROA not before: Tue 12 Sep 2023 15:59:06 +0000
ROA not after: Tue 10 Sep 2024 16:04:06 +0000
asID: 216320
IP address blocks: 2a13:df80:3815::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:94:99:0e:af:32:85:ab:f4:7a:a6:e5:35:90:0c:b9:61:77:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 12 15:59:06 2023 GMT
Not After : Sep 10 16:04:06 2024 GMT
Subject: CN=BA08700CF56A19576C207F0EE87FCEBA829C67F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:21:e6:5a:75:d3:5a:4f:75:41:ec:f2:d3:
d6:5a:ee:db:fd:c2:2c:fe:4c:f0:85:02:13:31:1c:
54:e2:a8:c5:91:4a:19:c1:8f:1e:ea:8d:b5:1a:cf:
75:55:01:82:95:a0:32:f9:6c:74:31:76:27:2d:e1:
79:9a:56:b0:42:62:8e:f7:b0:d4:1a:66:04:2f:97:
ef:cc:d1:5f:8a:a1:12:c8:52:1c:ee:0c:96:1a:d0:
38:a2:23:2f:7d:ae:62:86:d4:d6:24:79:4f:1b:e6:
23:a9:20:02:07:5b:24:a7:a1:6d:fd:da:27:c3:d6:
0a:98:54:e9:e5:82:4c:19:a4:a5:38:5b:40:b3:c6:
cb:23:a7:62:8e:df:fd:dc:b8:ab:f9:86:e0:20:d4:
c5:37:0b:03:8e:02:ac:1e:44:3c:ae:69:99:6c:fd:
e4:ec:00:55:72:f9:cb:31:5a:37:ab:29:a0:11:05:
10:cb:77:e7:43:dd:71:db:01:f2:da:e0:1b:7b:70:
69:e7:d8:73:3a:b9:22:e3:5c:aa:72:a5:f4:46:71:
43:77:3c:11:f2:52:68:c8:ba:05:3b:c7:c7:6b:4b:
f5:a6:11:c0:35:da:67:c1:04:2b:a0:87:a5:cc:86:
37:b1:f6:80:bd:cb:54:73:f7:5a:e6:6b:70:09:bc:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:70:0C:F5:6A:19:57:6C:20:7F:0E:E8:7F:CE:BA:82:9C:67:F2
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831353a3a2f34382d3438203d3e20323136333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3815::/48
Signature Algorithm: sha256WithRSAEncryption
c0:02:d8:f6:ca:a2:b4:bf:e6:3a:ea:07:4c:e1:86:df:39:e0:
13:79:83:01:75:64:25:f8:28:e0:9d:9f:44:b6:5b:00:36:65:
4e:fe:f5:54:d9:17:87:47:33:95:74:71:fa:46:b7:f0:5a:60:
53:65:a4:d1:b5:15:83:04:31:07:2b:15:f2:5e:2b:92:3a:a3:
0d:f4:0a:8a:3a:63:c2:5c:f8:6f:2d:5f:3f:8e:71:11:dd:a4:
40:8a:d0:1c:90:fa:51:72:a2:34:34:d9:61:6d:c6:5b:00:f0:
0b:cf:58:98:37:47:6b:86:1a:a2:3c:91:d3:ab:c8:c4:d4:d2:
b4:ba:81:08:90:5a:d3:57:ca:6d:f0:33:1f:35:96:f1:78:49:
29:d8:94:0b:af:77:c9:db:fb:f2:d4:f0:cb:cd:93:2f:55:49:
e0:96:bd:53:c0:86:5f:ba:a4:fa:de:9b:2d:c6:d5:16:0c:d4:
9c:57:a7:f5:8c:06:42:db:f0:bc:07:38:5e:23:58:70:c4:0e:
93:53:d6:9a:18:25:d8:82:67:26:98:46:4c:58:c5:12:a8:e0:
fb:e3:a7:2a:a3:1b:52:61:b3:50:d3:26:32:5f:62:93:b5:e7:
01:fa:af:57:ba:3e:a9:eb:49:99:b8:02:4b:9f:84:5d:39:35:
be:1d:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:33 2025 by rpki-client