Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
File: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: uiMG+NX/xrnBkE4kchcYxnVMlyFtgDX+0xdvrOoTW2Q=
Subject key identifier: BF:08:7D:44:34:FD:61:10:EB:E7:5F:12:4C:C8:C2:46:8B:53:6C:13
Certificate issuer: /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial: 3C814C0D030CD7FECAD8A806385364304BB0DA57
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
Signing time: Thu 26 Oct 2023 12:02:11 +0000
ROA not before: Thu 26 Oct 2023 11:57:11 +0000
ROA not after: Thu 24 Oct 2024 12:02:11 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c420::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:81:4c:0d:03:0c:d7:fe:ca:d8:a8:06:38:53:64:30:4b:b0:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
Validity
Not Before: Oct 26 11:57:11 2023 GMT
Not After : Oct 24 12:02:11 2024 GMT
Subject: CN=BF087D4434FD6110EBE75F124CC8C2468B536C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:0e:a9:1f:d9:62:81:51:2b:9f:22:f5:69:
6e:3f:eb:06:3c:77:d7:00:51:60:d7:58:05:75:ec:
2a:e1:fd:5a:d7:c3:8b:ca:91:01:b3:dd:51:ce:18:
f5:cf:4e:9b:bb:3d:98:c3:5d:98:ef:f5:b2:d0:cb:
fe:84:7a:51:7b:8e:26:07:44:60:6d:9c:cf:c8:52:
dd:29:4e:76:80:2d:cb:75:78:a6:3e:f0:1d:f5:2e:
b1:28:25:12:81:64:34:22:92:e5:5f:4f:71:26:83:
92:d9:76:da:7b:ca:2c:c9:28:13:69:4b:28:14:4c:
4f:94:b8:65:e5:57:a4:77:ee:4e:96:08:a5:e0:6c:
11:df:cf:8a:c0:2e:3e:98:c0:2c:bd:f1:c5:c5:4f:
b5:c2:67:98:36:99:1c:66:f9:d7:d6:97:33:9c:9a:
dc:a5:56:7d:7c:28:39:f0:60:f6:95:92:6a:74:6a:
13:58:63:47:74:7b:88:b9:97:47:d2:be:2c:31:70:
4f:b1:96:55:98:5d:f0:b7:2f:53:15:6a:17:71:bf:
b1:40:31:8e:16:2e:c8:b6:d7:db:d9:60:71:dc:79:
59:7d:4e:58:d9:a5:0b:fa:ae:fa:c3:87:2c:12:23:
8b:3f:06:70:bf:cd:05:03:20:a3:fb:8d:03:7b:95:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:7D:44:34:FD:61:10:EB:E7:5F:12:4C:C8:C2:46:8B:53:6C:13
X509v3 Authority Key Identifier:
keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c420::/48
Signature Algorithm: sha256WithRSAEncryption
ba:72:cd:8c:26:90:66:ce:73:b4:c1:92:80:8d:92:6e:c0:25:
b5:33:4a:12:55:72:85:4b:e3:bd:72:31:6c:fc:18:99:3a:d0:
e4:b8:6a:b9:76:de:cb:24:68:8d:1a:78:d1:d9:5a:dc:6b:b5:
0f:35:3e:8e:41:04:89:5c:c7:cf:46:7a:d5:cc:6c:4e:a7:04:
e7:f5:59:da:07:76:e9:0a:ce:08:64:53:60:3d:21:9b:b3:88:
cc:5c:08:48:bd:40:82:6f:9c:d4:e9:60:8a:43:bb:c1:86:03:
f1:4a:e6:a4:36:29:78:5b:e1:9c:e9:f8:64:d7:3a:df:4f:b2:
28:f1:61:f7:1b:d2:3b:15:f5:31:ce:8d:3e:eb:78:9d:ea:d5:
cc:19:92:8e:ea:28:f6:a7:a1:10:b0:61:87:cc:36:12:b9:2d:
00:13:13:1d:0d:e5:15:9d:59:db:d7:f9:46:82:55:7c:a4:e8:
33:6c:12:1b:01:49:4b:8b:15:93:3a:ce:ca:29:e9:41:0f:23:
17:d9:a3:00:46:00:d1:8c:09:f0:df:ce:1c:b7:b5:a8:1c:d4:
3d:31:da:08:72:22:12:6a:08:30:53:e1:eb:6d:61:c4:9b:0e:
12:58:f5:f8:6b:80:68:7f:49:e6:fb:1e:de:a1:a8:f9:7b:c2:
6a:53:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org