Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031303a3a2f34382d3438203d3e20313939363931.roa
File: 326130373a353463373a333031303a3a2f34382d3438203d3e20313939363931.roa (raw, json)
Hash identifier: jOTX6bUIaeMtR7M5TBLHmb7tb1mXguusE5YCUq8HzN8=
Subject key identifier: 5B:6B:E9:88:E5:DD:89:C9:07:94:F9:31:F3:E2:20:78:79:C0:D7:85
Certificate issuer: /CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Certificate serial: 123361ED5B5D73246EA85B49081BDB203BF51554
Authority key identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031303a3a2f34382d3438203d3e20313939363931.roa
Signing time: Sat 14 Oct 2023 04:44:38 +0000
ROA not before: Sat 14 Oct 2023 04:39:38 +0000
ROA not after: Sat 12 Oct 2024 04:44:38 +0000
asID: 199691
IP address blocks: 2a07:54c7:3010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:61:ed:5b:5d:73:24:6e:a8:5b:49:08:1b:db:20:3b:f5:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Validity
Not Before: Oct 14 04:39:38 2023 GMT
Not After : Oct 12 04:44:38 2024 GMT
Subject: CN=5B6BE988E5DD89C90794F931F3E2207879C0D785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:b5:26:58:cd:13:e7:24:27:10:34:cb:8d:
39:fe:b5:df:81:36:36:d6:d2:c8:75:71:b7:c8:14:
60:79:90:39:e5:c3:23:7c:75:3c:44:30:e9:7e:ac:
86:9b:e6:10:36:01:6e:7a:3b:5a:fd:58:53:99:3b:
94:b2:8e:8f:b3:8b:41:d5:30:71:9e:c1:a4:aa:82:
4a:95:00:5b:10:61:b4:b1:0d:a8:8c:ce:33:2c:2e:
dd:06:5e:88:c0:07:38:bb:77:3e:9c:c5:7f:85:fa:
fc:93:51:ef:c7:5d:bd:39:a0:fc:bd:87:57:3a:3e:
2e:1c:02:16:7a:03:1f:7b:42:d4:d2:b1:f0:57:ba:
1b:27:ac:11:85:4f:46:b6:4d:13:28:21:71:86:7b:
4d:3d:e7:a5:ee:c4:28:aa:aa:91:7f:e4:b9:0a:d0:
1a:0b:52:8e:bb:37:5d:08:48:90:88:40:a9:5e:f4:
79:4b:08:f7:e7:17:f1:85:2b:f0:27:f5:39:b5:16:
b5:75:59:e6:8e:d1:77:b7:ef:b9:06:d5:28:94:b7:
33:79:0c:eb:2f:db:eb:f5:c5:55:3c:f3:56:8d:e2:
9e:3d:82:8c:ec:7f:49:21:a2:2a:92:4d:15:58:1b:
e9:1a:09:71:95:48:44:3d:07:18:0b:13:f1:09:7a:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:E9:88:E5:DD:89:C9:07:94:F9:31:F3:E2:20:78:79:C0:D7:85
X509v3 Authority Key Identifier:
keyid:ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/326130373a353463373a333031303a3a2f34382d3438203d3e20313939363931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:3010::/48
Signature Algorithm: sha256WithRSAEncryption
eb:2c:08:51:be:de:d5:10:c8:db:73:65:a9:ab:41:e7:48:8d:
2d:29:3a:a2:4f:26:eb:95:21:40:59:89:a6:82:fe:72:ce:c4:
17:31:b1:be:51:63:32:15:f5:c1:57:13:48:9d:80:50:f6:a0:
9e:74:6a:8e:d9:23:82:5e:e1:08:7c:9c:63:b5:5f:59:8a:87:
82:4f:d5:ff:b8:77:d4:39:de:67:f7:a2:31:df:01:62:f1:e1:
54:56:8e:1a:03:eb:c8:48:8d:28:bf:c0:84:e4:ae:33:4a:be:
cd:65:18:5a:47:31:52:9a:cd:26:34:07:57:32:52:ea:27:30:
04:04:0a:ef:cd:a7:39:1a:ac:1b:4a:a0:2d:a6:a7:3d:29:c1:
1a:3f:6a:2f:c0:3c:d0:7f:5b:c2:e1:be:f1:34:36:57:d3:64:
f9:40:e3:88:ae:17:70:13:4e:8d:f3:75:a4:36:88:6a:ee:53:
9e:e7:e8:88:c3:c5:46:6e:17:04:a6:4b:f7:d2:7e:f2:36:72:
a0:de:c7:b8:00:1b:bc:63:f1:f6:d8:55:72:0a:5b:36:15:7b:
0a:0f:a2:5e:5b:6d:d4:63:80:04:ce:af:5d:a2:8a:f3:15:2a:
14:77:fd:d0:ea:03:a2:a3:8e:19:c8:6a:45:d3:ec:e2:9d:89:
e5:c6:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:30 2025 by rpki-client