Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa
File: 326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa (raw, json)
Hash identifier: VdQ8Nm2j19ldJwyTKBIEG8kz10OZKTtuxguLTCSJLXY=
Subject key identifier: B9:50:03:5A:97:25:61:EA:BC:76:50:D9:F9:B6:23:C1:1D:B5:80:35
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 0B38B942D87FA907991C88BC8355E4DAB0F80AC9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa
Signing time: Tue 19 Sep 2023 14:17:22 +0000
ROA not before: Tue 19 Sep 2023 14:12:22 +0000
ROA not after: Tue 17 Sep 2024 14:17:22 +0000
asID: 198016
IP address blocks: 2a13:df87:fc00::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:b9:42:d8:7f:a9:07:99:1c:88:bc:83:55:e4:da:b0:f8:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Sep 19 14:12:22 2023 GMT
Not After : Sep 17 14:17:22 2024 GMT
Subject: CN=B950035A972561EABC7650D9F9B623C11DB58035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:ea:9d:f5:9d:1d:65:28:48:cf:84:79:17:
0d:2b:5c:8f:7e:83:de:b8:d7:40:9c:cc:50:16:0f:
57:31:ca:9a:83:66:86:d7:f3:80:06:20:f7:4d:2a:
12:b7:28:9f:4f:65:ab:8c:fd:6d:a0:c8:0a:20:ed:
02:1d:07:55:a4:0f:55:1c:d2:34:c2:47:e3:07:23:
99:2c:40:e2:ec:1e:07:3e:f7:7c:97:93:9a:ff:b9:
a8:e4:58:65:57:2d:1a:6f:1c:5b:c9:53:cc:e2:58:
3a:3c:e2:84:79:84:a9:50:ab:bb:5f:23:4a:78:f6:
b5:3d:8c:20:2d:aa:61:0e:0a:6e:db:0a:d9:54:6a:
eb:eb:b8:cb:fb:ab:21:55:49:34:83:e3:c7:94:2f:
9e:f8:ed:a6:2d:4b:bc:22:2b:8a:8d:8f:f1:2a:b0:
45:d1:a7:6e:55:89:64:ba:66:56:7a:95:51:05:35:
40:0f:51:1d:a6:14:60:e7:3a:40:5e:65:a9:f4:8c:
b8:4f:59:73:b5:8d:74:ce:76:d2:b3:ca:64:1e:b6:
d3:3f:7e:fb:7e:3d:71:90:76:1e:80:92:7d:13:3c:
34:dc:b9:90:69:3b:aa:36:6b:d1:52:89:48:a7:5a:
19:df:fa:3f:e8:d0:63:b7:33:f1:8e:f3:64:a4:18:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:03:5A:97:25:61:EA:BC:76:50:D9:F9:B6:23:C1:1D:B5:80:35
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
05:b8:34:7c:be:11:ce:65:eb:9a:c9:fb:f2:de:94:56:9f:67:
43:91:d1:7c:a9:b6:b3:be:4c:8f:8d:be:6f:8d:4e:17:5c:d6:
7d:99:f4:28:85:8d:e9:f2:82:c2:5c:1b:25:46:f8:66:f2:b7:
91:f7:55:61:ce:5f:2f:1f:2f:da:25:9e:0f:77:0a:59:30:09:
a7:aa:64:b2:f5:41:52:58:1f:5b:ed:83:0b:41:c1:b6:de:c0:
41:49:fb:b8:ef:db:2f:1f:d7:7d:48:0f:07:22:35:e2:44:fc:
8e:2a:89:92:30:a2:ec:c5:0b:ee:0f:44:ec:d5:a7:71:de:d1:
be:c1:78:d8:95:2e:0b:55:24:cb:70:b1:2a:41:40:09:33:39:
6d:16:52:39:8f:7a:dd:69:09:18:3c:f5:f5:17:a8:ad:39:27:
a8:16:dd:60:6e:95:62:49:03:53:5f:4f:02:73:d8:43:44:2a:
12:43:b7:1b:83:1b:75:dc:fc:a9:35:7b:5b:f8:a4:d1:4c:3b:
e8:05:42:4d:16:1d:90:e1:2e:0f:5b:bd:2c:25:ac:69:d7:3e:
3c:3a:ba:4c:c5:a3:3b:64:ec:9b:59:a6:0a:f3:fa:66:47:ce:
08:d6:16:25:43:2d:9e:a8:84:d3:34:33:4d:dd:97:27:12:85:
b2:83:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:52 2025 by rpki-client