Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333030303a3a2f34342d3434203d3e20313939363931.roa
File: 326130373a353463373a333030303a3a2f34342d3434203d3e20313939363931.roa (raw, json)
Hash identifier: dB/bugTqcE7J+BykWwA1NBNiCj8uYdLODJc2MBuoioc=
Subject key identifier: 91:F3:43:AA:AC:1D:A5:7A:95:D3:3C:1E:AD:F9:AC:7F:B9:86:E7:50
Certificate issuer: /CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Certificate serial: 7797141658632CE1E4386E9B0E69FDABE65C09D2
Authority key identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333030303a3a2f34342d3434203d3e20313939363931.roa
Signing time: Sat 14 Oct 2023 04:43:58 +0000
ROA not before: Sat 14 Oct 2023 04:38:58 +0000
ROA not after: Sat 12 Oct 2024 04:43:58 +0000
asID: 199691
IP address blocks: 2a07:54c7:3000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:97:14:16:58:63:2c:e1:e4:38:6e:9b:0e:69:fd:ab:e6:5c:09:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Validity
Not Before: Oct 14 04:38:58 2023 GMT
Not After : Oct 12 04:43:58 2024 GMT
Subject: CN=91F343AAAC1DA57A95D33C1EADF9AC7FB986E750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:f2:60:32:a1:67:c2:1e:88:2d:8c:ce:3f:
c1:f0:dd:d1:a1:e1:17:32:50:cc:52:e5:58:84:7c:
21:a9:03:c1:cb:56:89:1d:57:20:12:27:b4:22:2a:
ef:bd:86:65:1d:a9:2e:dd:49:d7:07:73:65:1c:16:
48:de:7b:0b:83:d0:d0:49:d1:53:d3:73:e4:25:e7:
83:bf:98:9c:a2:9a:b6:90:35:10:d5:89:4e:79:55:
27:58:1d:b2:aa:62:a6:16:90:d8:e5:48:d0:53:07:
de:37:ee:ed:15:1b:02:65:aa:4d:33:eb:72:df:53:
5f:7e:7f:ac:c3:c8:c7:b8:74:49:0b:d1:22:a4:6b:
82:66:dc:60:4e:4a:b5:bf:36:0a:ef:0e:61:c4:45:
7d:96:ad:2b:dd:8d:49:72:82:b0:9c:f7:ef:54:3b:
1d:23:90:e7:cf:e1:b4:46:8f:b9:dd:ad:dd:2e:4a:
67:4d:8d:71:42:45:90:3a:ea:d0:52:b3:a3:f5:44:
f5:eb:5f:02:c6:2c:55:02:30:88:93:fc:f1:2a:4d:
9e:bc:d4:a9:52:af:34:98:74:54:14:e4:34:59:c6:
d7:54:2a:1d:99:e2:87:61:c1:83:e8:e0:e4:62:5b:
32:24:7f:08:f0:8f:e7:7d:53:e4:34:8a:3d:b5:39:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:43:AA:AC:1D:A5:7A:95:D3:3C:1E:AD:F9:AC:7F:B9:86:E7:50
X509v3 Authority Key Identifier:
keyid:ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333030303a3a2f34342d3434203d3e20313939363931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:3000::/44
Signature Algorithm: sha256WithRSAEncryption
91:6b:4a:74:4d:4c:f6:43:79:4a:b0:02:a2:f7:82:69:fd:cb:
81:db:58:9e:23:50:1e:c9:f9:40:f0:66:1b:86:8e:cb:fc:11:
53:2b:b0:c9:c7:93:37:30:6e:cb:c9:0a:a3:75:10:37:b7:60:
99:99:b0:f6:8d:ca:67:65:c5:32:22:13:b3:dd:b7:1c:f9:4d:
63:08:08:32:bd:97:e5:4c:b5:76:90:80:6d:1c:1b:0f:0c:e0:
5b:db:01:30:61:1e:30:9d:94:31:b9:f3:10:5d:43:53:df:ea:
ef:89:70:17:24:90:d5:10:bd:6b:cf:01:17:88:a4:6f:c9:66:
c3:89:c9:9a:5f:30:e3:fd:24:1d:f0:c7:82:38:af:55:7f:5e:
ae:a4:fd:05:d2:b0:d5:45:d7:9a:40:d7:62:b1:99:86:4d:14:
b9:8a:af:ce:30:a6:d8:f5:f8:9d:a8:4e:ba:39:a6:ac:00:d9:
59:0f:e0:22:01:1f:3c:c0:b2:1d:2a:b9:e6:e1:32:48:7b:93:
a9:ba:f4:7a:2a:87:7a:cb:84:3b:b6:6d:2e:78:17:ce:f6:87:
08:91:3f:ac:fb:1a:19:34:ec:54:55:d5:b9:d9:70:6f:2c:ec:
87:72:a9:81:b1:e1:ca:07:c6:ed:66:dc:37:81:f1:cf:50:7d:
ad:98:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:01 2025 by rpki-client