Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
File: 326130363a396634343a3a2f33362d3438203d3e20313939343539.roa (raw, json)
Hash identifier: qLjlYMi1+VezHDJfp0s9u7klZ/sjKmimihiPhdrg+XM=
Subject key identifier: BA:8E:3D:5D:AB:18:97:2E:64:42:52:4B:A6:25:ED:7C:F0:4E:1A:0A
Certificate issuer: /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial: 0F2D98F9BCB22342DAEA164F58FB08A1B29252ED
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
Signing time: Wed 29 Nov 2023 01:40:35 +0000
ROA not before: Wed 29 Nov 2023 01:35:35 +0000
ROA not after: Wed 27 Nov 2024 01:40:35 +0000
asID: 199459
IP address blocks: 2a06:9f44::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2d:98:f9:bc:b2:23:42:da:ea:16:4f:58:fb:08:a1:b2:92:52:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Validity
Not Before: Nov 29 01:35:35 2023 GMT
Not After : Nov 27 01:40:35 2024 GMT
Subject: CN=BA8E3D5DAB18972E6442524BA625ED7CF04E1A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:0b:51:96:5e:dc:d5:85:78:d2:ae:53:96:
cf:dc:59:b6:91:96:72:d1:76:e0:e5:f8:f8:ea:5f:
8e:25:83:f8:c8:b4:e7:8a:63:6f:79:7c:85:96:e9:
11:35:2d:0d:c0:0f:a5:10:e1:a6:b9:61:88:04:3d:
81:68:37:b3:3b:10:c7:49:ad:a9:c7:5a:2c:b0:f4:
f8:1b:b9:45:af:19:15:4c:48:37:09:b0:33:bc:bb:
75:c8:da:49:98:77:4a:14:50:e5:8f:b6:88:9f:cf:
2a:f6:e7:0a:46:62:30:23:64:91:83:87:75:0e:21:
a5:76:86:11:d9:96:73:6c:d9:0b:10:71:a3:38:a0:
d5:05:17:1b:4e:e6:5c:3b:af:2d:a5:5c:0d:3e:52:
57:6d:b4:e0:87:13:aa:2c:18:78:71:56:7e:5c:52:
c1:35:b2:e0:f7:91:4d:78:7b:53:00:d3:ce:d6:cc:
a5:45:06:6d:c5:87:c3:17:a4:95:21:21:96:20:01:
b2:f3:44:8b:24:93:02:de:ec:cd:18:03:26:50:7f:
72:56:f4:66:28:5e:a6:20:a9:ac:50:67:cd:39:06:
6e:7c:30:f5:73:30:08:8c:14:de:b0:6d:9b:01:80:
69:55:9b:e3:83:65:a8:c8:53:2c:a0:7a:03:cd:8a:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:3D:5D:AB:18:97:2E:64:42:52:4B:A6:25:ED:7C:F0:4E:1A:0A
X509v3 Authority Key Identifier:
keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33362d3438203d3e20313939343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44::/36
Signature Algorithm: sha256WithRSAEncryption
0d:3c:33:84:ba:c9:8c:5d:56:2e:36:d8:a2:f0:0e:ed:de:42:
3a:7f:e5:4e:82:32:dc:0a:27:2b:64:88:43:f7:40:9a:3c:c4:
3a:50:66:15:ae:22:e5:18:e3:88:81:13:99:1b:1f:21:98:f9:
2b:62:c8:11:3b:db:23:29:9a:b1:b0:69:f1:ee:d9:fe:63:d2:
af:6d:53:d3:f9:b2:8e:0d:bd:b1:b5:30:57:52:d8:b1:75:8b:
1a:07:2e:7f:94:35:7c:ed:f2:91:14:e1:36:4f:c6:d2:3d:ac:
15:34:18:fa:0a:23:1a:ea:49:98:92:5f:51:f3:fd:8b:7f:05:
c9:c1:7f:79:cc:60:21:ec:fd:0a:0b:8d:c9:10:ba:05:ee:ed:
5c:cf:f0:d0:19:6f:e4:dc:01:a6:63:b1:6b:d4:ad:0d:cd:62:
67:18:ab:78:0d:f9:cb:6f:c5:89:3c:b3:98:50:68:b0:e3:79:
b6:98:97:1b:b8:6f:9c:a9:13:e6:d8:4d:92:f1:ae:cb:fd:26:
a3:ad:f7:b1:e1:00:3b:2a:7d:7c:be:53:a6:52:54:61:24:9e:
35:c1:6d:ea:48:b7:6c:53:cf:40:15:a4:de:37:71:15:53:24:
63:70:b1:f9:45:01:c0:86:19:60:05:ff:ef:41:ce:89:cd:7a:
1e:6c:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:48 2025 by rpki-client