Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: WbiGyyflEUJJ5ElrJM2eZK1m+lXo+Ip27yggxuU+u24=
Subject key identifier: DE:B7:3C:3C:8C:E5:22:BA:94:F4:87:3B:69:FE:68:0A:3F:15:72:53
Certificate issuer: /CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Certificate serial: 2F9235D29A525FE54F569FAA5D90AF6ECE1AF24D
Authority key identifier: 29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
Signing time: Mon 22 Jul 2024 11:04:49 +0000
ROA not before: Mon 22 Jul 2024 10:59:49 +0000
ROA not after: Mon 21 Jul 2025 11:04:49 +0000
asID: 215751
IP address blocks: 2a0b:4e04:42::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:92:35:d2:9a:52:5f:e5:4f:56:9f:aa:5d:90:af:6e:ce:1a:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Validity
Not Before: Jul 22 10:59:49 2024 GMT
Not After : Jul 21 11:04:49 2025 GMT
Subject: CN=DEB73C3C8CE522BA94F4873B69FE680A3F157253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:18:e4:0d:a6:59:ff:be:32:35:a0:96:ea:
d6:90:02:7f:76:f7:af:75:5a:0a:af:46:7b:61:e6:
6e:36:ae:f2:d5:b7:57:10:4f:9f:91:12:0c:29:95:
45:89:c5:d3:60:79:d5:67:32:6b:85:07:40:8c:82:
43:94:44:ac:8a:4b:d7:be:b6:7d:cf:62:8f:2e:9d:
b4:f5:9b:0d:30:b4:aa:4a:ed:16:dc:93:df:85:5f:
88:9b:a0:ba:62:a9:4b:23:fd:6e:72:74:cb:28:35:
a6:c5:6d:a3:e2:6e:5d:93:96:d7:d9:9f:69:ea:3b:
09:95:a4:68:cd:8d:3d:cc:b3:1b:0a:8c:44:e8:21:
e5:30:bb:54:9d:47:19:e9:c6:70:df:11:21:94:d8:
92:a4:96:9c:e9:9c:30:b2:b5:2f:25:2d:8d:ff:01:
f4:28:ac:12:5c:b2:bf:ad:d9:e0:c8:e3:6a:21:88:
20:dd:de:13:be:7e:2e:2a:cc:e2:3f:89:a8:68:e5:
df:45:1e:df:ee:0e:76:ac:eb:09:2b:90:97:67:6d:
64:2d:9a:87:42:0b:67:f1:95:58:96:3e:dc:cc:bc:
13:a8:e6:84:f2:ba:d1:0f:81:02:ce:ae:e8:b1:48:
60:b3:7b:9e:21:dd:51:58:1b:f9:c4:2b:ab:23:64:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:3C:3C:8C:E5:22:BA:94:F4:87:3B:69:FE:68:0A:3F:15:72:53
X509v3 Authority Key Identifier:
keyid:29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/29635AE28CC2E6ACDA15B1FE03C401F79BBE33A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:42::/48
Signature Algorithm: sha256WithRSAEncryption
46:6f:fc:62:78:1d:05:7b:f8:5c:d4:90:f5:1e:ab:71:2e:a6:
1b:59:46:b1:1f:ff:59:97:0a:1a:32:57:c2:94:3f:dd:16:20:
ad:09:6a:93:d5:c6:84:06:20:82:3c:77:a9:ff:dd:a2:2e:c4:
f5:09:0d:3b:94:24:23:d4:c2:0b:04:eb:67:9d:e2:42:db:ac:
d2:18:e6:ec:14:cd:4c:ef:b4:fd:54:f8:b0:e9:6e:ba:f3:09:
a0:b0:b7:65:08:ad:89:3c:28:56:26:c5:ca:06:df:8f:77:3a:
93:7e:52:55:34:01:85:01:a8:df:96:e5:e6:1f:37:32:f9:a8:
90:a3:1b:cf:09:d3:33:03:14:06:17:ca:60:0b:61:27:58:25:
3b:d1:82:ea:80:86:8e:19:a6:1c:02:fa:5b:fa:33:ce:fa:ad:
a7:84:ac:24:34:b6:bb:11:ac:9a:ec:70:2b:ff:24:87:d4:3d:
09:94:d9:07:37:12:0c:e1:06:51:7e:99:63:ef:41:b3:62:68:
11:f2:f0:fa:e2:c3:83:4a:f9:ee:6e:97:a7:30:ea:20:40:e3:
2e:91:72:9e:dd:dc:71:d7:e2:7b:99:21:a5:c3:c7:29:03:13:
f4:a6:8d:11:2e:21:45:cf:f3:9d:c4:57:75:94:e7:66:7c:41:
eb:84:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 04:36:20 2024 by rpki-client on console-fra.rpki-client.org