Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3438203d3e20313937343338.roa
File: 326131333a646638303a623430303a3a2f33382d3438203d3e20313937343338.roa (raw, json)
Hash identifier: 9/eeytHOmHNlJHo4XCA1HYVb3mXEFhPd37TXwvNfKMU=
Subject key identifier: 56:2E:9C:EF:7B:14:36:8F:2D:E0:ED:B4:A1:51:4F:08:E0:C2:CC:86
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 4684FB5152AD988C18095868A062EEA077E7AC59
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3438203d3e20313937343338.roa
Signing time: Sun 03 Dec 2023 21:47:10 +0000
ROA not before: Sun 03 Dec 2023 21:42:10 +0000
ROA not after: Sun 01 Dec 2024 21:47:10 +0000
asID: 197438
IP address blocks: 2a13:df80:b400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:fb:51:52:ad:98:8c:18:09:58:68:a0:62:ee:a0:77:e7:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 3 21:42:10 2023 GMT
Not After : Dec 1 21:47:10 2024 GMT
Subject: CN=562E9CEF7B14368F2DE0EDB4A1514F08E0C2CC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:a3:67:20:e1:9f:0e:26:ca:f3:1c:c3:d6:
cd:3e:e7:3d:cf:45:a5:a2:45:36:03:5f:20:67:9a:
bf:0f:bd:3a:31:65:51:d7:38:a3:58:89:1f:81:54:
e7:cc:79:bd:90:56:0c:d1:c6:3b:86:11:64:7c:b7:
9c:19:7e:0e:5e:dd:b1:6b:a7:88:43:64:df:73:f6:
f5:41:ab:74:f1:43:d6:78:8d:6c:8f:32:6d:fa:67:
96:a1:ae:2f:26:85:94:07:cc:51:fc:c5:42:59:87:
95:93:84:bd:a3:c7:56:62:1e:49:ea:8a:cd:9d:c8:
f3:b6:e7:85:a5:59:ab:1a:5a:2e:b8:a5:08:ee:58:
cd:fd:b1:63:89:b9:1a:f2:89:ae:af:41:49:b7:cf:
88:f7:f3:cc:24:c4:7d:85:b9:23:a2:a6:0d:67:dd:
1a:79:09:ba:97:71:e7:49:f3:f7:dd:e3:a4:aa:59:
47:d2:6d:cc:0e:63:fc:7a:6f:ec:c4:68:c7:8d:bb:
6b:3c:44:5c:e2:17:d4:74:9b:31:7d:4d:18:0d:70:
0a:69:7c:5f:8d:4a:c7:84:8d:a8:c2:f1:fc:85:0d:
51:d7:6b:c8:66:77:3b:a4:63:fa:ba:94:80:9d:51:
cb:64:c5:86:d3:50:df:dc:3d:aa:49:16:ee:a0:59:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:9C:EF:7B:14:36:8F:2D:E0:ED:B4:A1:51:4F:08:E0:C2:CC:86
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623430303a3a2f33382d3438203d3e20313937343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:b400::/38
Signature Algorithm: sha256WithRSAEncryption
45:10:57:ad:49:ff:04:72:b9:b6:31:ac:3c:86:a8:9f:62:e9:
75:2b:31:1b:95:ca:17:e4:29:72:9f:97:3a:67:0e:07:89:46:
ad:c8:b1:28:91:0a:d2:83:6c:17:56:ca:36:50:27:e8:27:5a:
b3:f6:4c:b1:3b:52:1b:e1:d5:b6:2b:dc:6f:92:c3:c7:19:ca:
ec:4f:53:27:01:00:15:35:cd:68:34:a3:2a:f1:e4:3e:b3:be:
07:1d:71:a5:65:92:54:29:fa:28:c3:3f:06:e3:6c:a1:23:28:
fa:03:31:00:3a:40:40:97:9e:2f:53:b6:d1:68:64:2f:8d:a7:
1c:b5:c7:3c:30:cb:59:da:cc:0b:f6:f0:74:42:49:01:d6:bd:
e1:cf:a4:2d:18:61:7a:18:d3:21:c6:c7:9a:93:78:b7:a2:7e:
52:f8:b6:9e:ac:a1:eb:c6:72:70:1e:19:68:1f:8d:76:d6:76:
b7:00:27:a1:42:fc:9c:74:fa:60:f8:20:a5:aa:99:4e:53:34:
20:4a:f8:a0:6e:4c:e1:0e:23:50:ef:75:70:d0:51:ec:fc:0b:
25:1f:45:ef:dc:51:9b:11:75:19:fa:68:b3:3a:0c:83:26:70:
de:eb:c1:48:61:db:2b:42:c3:45:66:60:60:56:7d:91:9e:d5:
e5:81:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:36 2025 by rpki-client