Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: L81ATxv53FMpuI1E1aL89ZZdpyMoi5XkSyIYCXnfBr4=
Subject key identifier: 49:23:87:01:93:A6:AA:43:AB:45:8F:38:AD:B1:16:7B:29:B0:CB:10
Certificate issuer: /CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Certificate serial: 63987D946E5F36EA22B82A5A9901A0A5E12DB544
Authority key identifier: 29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
Signing time: Mon 22 Jul 2024 11:04:56 +0000
ROA not before: Mon 22 Jul 2024 10:59:56 +0000
ROA not after: Mon 21 Jul 2025 11:04:56 +0000
asID: 215751
IP address blocks: 2a0b:4e04:f00d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:98:7d:94:6e:5f:36:ea:22:b8:2a:5a:99:01:a0:a5:e1:2d:b5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29635ae28cc2e6acda15b1fe03c401f79bbe33a3
Validity
Not Before: Jul 22 10:59:56 2024 GMT
Not After : Jul 21 11:04:56 2025 GMT
Subject: CN=4923870193A6AA43AB458F38ADB1167B29B0CB10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:2a:b1:90:a7:04:c2:d0:9f:09:b2:d6:b8:
1e:07:1c:33:62:f4:97:bb:0d:d9:82:f0:63:e3:e2:
58:18:ba:34:b9:8b:3d:6f:cc:38:17:b8:f4:f0:6a:
0d:42:18:3f:4f:bb:76:96:77:ba:76:0b:2a:3e:5f:
4c:41:c0:cc:df:fd:40:46:18:78:43:b0:98:db:bc:
15:02:f0:02:2a:e3:8b:33:80:16:37:0b:86:95:b8:
30:34:14:c3:8a:20:46:82:ad:3b:ff:22:2f:fd:4b:
83:aa:06:20:df:2f:8f:2d:95:12:be:7d:53:55:9f:
ab:c9:32:e2:5f:cf:b6:0a:5c:ab:1d:6f:3d:9d:b1:
d9:8b:90:6b:69:aa:ae:25:99:8a:be:78:70:00:59:
3c:88:71:e5:6d:b1:f2:5a:34:22:dc:56:25:e8:b8:
0b:02:6d:ae:7b:a2:82:b9:11:c5:1d:fb:ab:2c:07:
f7:83:7b:2f:2c:85:58:cf:f6:40:af:e0:4e:bf:85:
50:cc:81:4d:ff:04:db:fb:31:28:10:11:dc:85:8d:
61:da:19:d5:5f:25:57:e9:4d:be:a0:41:6b:2e:f2:
2c:92:33:05:d7:7a:ab:49:51:cd:1e:c1:6b:92:e2:
08:c9:15:e6:0c:73:37:b8:3e:e5:59:2d:5b:6e:95:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:87:01:93:A6:AA:43:AB:45:8F:38:AD:B1:16:7B:29:B0:CB:10
X509v3 Authority Key Identifier:
keyid:29:63:5A:E2:8C:C2:E6:AC:DA:15:B1:FE:03:C4:01:F7:9B:BE:33:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/29635AE28CC2E6ACDA15B1FE03C401F79BBE33A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWNa4ozC5qzaFbH-A8QB95u-M6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0872dcd4-849f-4d27-8196-de0f58f5fd4b/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
09:d6:4b:fb:e0:90:f4:60:58:b5:9e:92:2e:01:b8:df:73:f2:
c7:f8:85:1b:53:30:7a:b8:2d:99:55:3f:49:3f:0a:ff:89:83:
77:38:2e:77:19:7d:55:18:b1:47:b1:ad:c3:f1:aa:12:11:32:
45:ae:b5:b1:8e:a1:0b:cf:10:92:d4:e0:72:c8:c5:6a:cb:2d:
c7:11:14:80:0d:e5:ad:76:00:38:fb:e6:aa:60:2e:8b:e6:01:
dc:a9:77:dd:d1:49:50:4c:36:d4:39:79:e8:85:d6:34:6e:c3:
83:7b:c2:5d:02:8a:6a:34:88:b1:20:9c:f9:0f:1e:a1:da:ad:
61:0e:fa:60:fb:4e:42:ee:1e:97:97:68:a4:8b:cf:38:d7:61:
1b:f9:24:19:aa:18:1d:79:08:40:0e:08:d2:a1:2e:dc:6d:96:
ae:9b:31:85:17:44:d6:d3:47:36:a5:74:d7:4e:8a:20:24:f5:
8a:f7:d0:75:db:80:83:32:ed:61:14:3b:af:d6:4c:d6:fc:83:
1f:32:70:08:bf:2c:7d:7e:ee:00:59:bc:03:a5:7b:a4:3b:35:
09:a1:37:41:95:44:f8:87:f9:3f:0c:3f:ef:8c:54:f8:15:ac:
e5:24:f5:34:56:79:ac:3f:96:57:7b:68:eb:6d:aa:c9:80:1d:
e1:13:19:6f
-----BEGIN CERTIFICATE-----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Generated at Tue Jul 23 04:36:20 2024 by rpki-client on console-fra.rpki-client.org