Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa
File: 326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa (raw, json)
Hash identifier: LU6+stN3hqA3oV0RNviT7XFxUc2za9ohYQTGYrXnMb0=
Subject key identifier: 7D:20:64:F4:30:AF:26:39:6C:AA:86:61:73:83:01:26:09:77:93:DA
Certificate issuer: /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial: 7971A0E9D13FDC2A64B4497E4D2EEE7D47F49FDB
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa
Signing time: Thu 30 Nov 2023 14:13:07 +0000
ROA not before: Thu 30 Nov 2023 14:08:07 +0000
ROA not after: Thu 28 Nov 2024 14:13:07 +0000
asID: 216367
IP address blocks: 2a06:9f44:f110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:71:a0:e9:d1:3f:dc:2a:64:b4:49:7e:4d:2e:ee:7d:47:f4:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Validity
Not Before: Nov 30 14:08:07 2023 GMT
Not After : Nov 28 14:13:07 2024 GMT
Subject: CN=7D2064F430AF26396CAA866173830126097793DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:c5:6f:34:23:aa:76:ab:21:f0:b8:4d:b9:
79:0f:1a:65:4e:85:ce:33:d1:39:d0:6c:58:cb:97:
73:0d:95:ad:db:3f:ca:e0:25:0a:fe:db:f4:b2:a7:
dc:ce:91:d5:4e:bb:c0:df:c4:6a:c3:42:21:fd:39:
63:a8:6a:70:28:8e:3b:36:a1:51:e2:cc:39:ce:34:
c6:ef:29:70:10:fe:c9:47:7f:3b:f1:c9:21:24:d8:
a2:b5:a9:b5:15:b6:d8:cb:5d:39:a7:4a:c5:0b:0d:
34:9a:17:90:2b:55:6c:3b:1f:d4:87:79:7e:94:83:
7b:38:18:97:94:17:e1:26:08:ad:50:74:a3:9b:f7:
0c:60:69:0e:50:a5:cb:9f:22:1f:51:46:c7:03:b0:
28:dc:24:0f:54:40:25:b7:15:dc:ab:c5:a4:da:8f:
99:8d:b2:1c:98:b1:f1:de:93:6f:59:4d:3a:d3:78:
aa:20:01:40:f4:1a:53:42:ac:28:5a:1b:71:fa:ab:
f6:f2:c5:a4:d4:98:d4:ea:6e:84:6b:04:f0:12:f3:
a5:ad:9e:df:a9:15:f0:49:eb:9a:3e:24:37:4b:80:
65:5a:68:5b:d7:fc:ff:33:3f:c1:57:1d:c6:38:93:
45:99:5b:0f:70:74:2b:f3:ef:56:97:17:44:27:e4:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:64:F4:30:AF:26:39:6C:AA:86:61:73:83:01:26:09:77:93:DA
X509v3 Authority Key Identifier:
keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44:f110::/44
Signature Algorithm: sha256WithRSAEncryption
85:b3:3e:2d:94:30:c6:8b:84:f9:63:4a:53:fa:8a:91:df:d3:
f9:2e:4c:7e:1f:21:36:cc:bb:02:0a:e9:38:0d:67:36:11:4a:
bd:ec:ca:b3:a9:90:e8:64:94:45:d2:d0:67:c2:ac:14:5a:e3:
a3:97:85:7e:df:5f:d2:9e:15:f8:42:96:c1:36:8b:6f:c5:75:
1c:45:3d:28:7b:ad:21:9b:74:97:36:ea:64:77:17:da:7e:00:
6d:d7:88:f1:bc:46:7f:aa:3f:a6:2a:3a:7f:37:92:2b:d3:a1:
f7:02:8a:ec:6b:79:72:1d:67:c6:53:2a:9a:3d:3d:49:58:81:
ad:72:40:fb:3c:55:a3:b0:e0:7a:e6:27:f1:ef:ba:e8:59:48:
79:d3:8d:12:f5:6f:cc:27:91:35:fd:18:91:22:3f:20:b6:d7:
17:63:35:7e:c9:0f:5e:c3:06:45:48:02:12:36:b6:11:7e:d6:
dd:00:cb:b8:f3:a0:ba:7f:0c:ff:8c:70:93:d7:96:a5:15:e1:
1c:d0:8e:ea:e5:c0:b2:93:b3:0a:65:19:91:e5:ce:6a:8f:83:
9a:4c:e8:36:19:22:ff:93:63:bf:f2:ae:a6:d2:50:05:67:57:
2e:0e:6f:8f:70:8b:67:98:5b:98:af:a3:e7:d4:70:44:c4:44:
c7:70:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:56 2025 by rpki-client