Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/326131333a3830303a3a2f32392d3239203d3e203531303838.roa
File: 326131333a3830303a3a2f32392d3239203d3e203531303838.roa (raw, json)
Hash identifier: +g/aPpBttd+i4e+JBXY9u8IKwosWzJhVLzATyDGsg+s=
Subject key identifier: 56:FA:A3:55:69:4C:EC:27:BE:F3:87:E2:CE:8B:50:89:BC:87:6D:50
Certificate issuer: /CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Certificate serial: 4B5FB8AC2141D25BC85379937428FEA5EB9F4F06
Authority key identifier: EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/326131333a3830303a3a2f32392d3239203d3e203531303838.roa
Signing time: Wed 07 Dec 2022 08:00:21 +0000
ROA not before: Wed 07 Dec 2022 07:55:21 +0000
ROA not after: Wed 06 Dec 2023 08:00:21 +0000
asID: 51088
IP address blocks: 2a13:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5f:b8:ac:21:41:d2:5b:c8:53:79:93:74:28:fe:a5:eb:9f:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Validity
Not Before: Dec 7 07:55:21 2022 GMT
Not After : Dec 6 08:00:21 2023 GMT
Subject: CN=56FAA355694CEC27BEF387E2CE8B5089BC876D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:1e:38:83:c6:58:c7:41:88:58:92:4e:25:
21:4b:1f:cc:3b:16:49:f3:93:cc:56:76:fa:87:7e:
4d:2c:71:85:4b:ca:a7:33:c9:78:50:5a:d6:38:8b:
4e:ca:90:b9:1a:51:8e:bb:fa:ee:71:a2:05:ff:98:
e5:8c:ff:ee:f9:7d:9f:68:09:db:d4:e7:95:4d:2f:
f9:e8:a7:c4:da:3b:93:ce:41:4e:32:7b:52:87:e0:
c2:ac:74:ba:f0:4d:8f:da:d3:06:29:5b:1d:77:f7:
ae:df:86:52:a8:ad:89:0b:cf:72:52:b3:53:23:a5:
d1:e2:3e:19:6c:e3:32:d2:47:1d:21:5e:8d:67:9b:
b6:93:66:60:d9:a7:ca:7b:b3:eb:c7:db:63:44:d2:
80:95:bc:cb:fa:75:5f:42:59:d5:af:bd:0a:31:30:
c1:a5:81:02:79:65:6c:ad:6b:67:63:53:f1:9c:a3:
28:73:9c:0c:bc:85:17:98:74:3f:f0:4d:d9:ce:7b:
84:56:63:c5:a4:96:5c:02:f5:f5:e1:42:84:3b:21:
df:1f:4e:61:d3:23:af:df:0b:bf:fa:43:e2:e8:bd:
76:e3:24:ab:8d:84:70:30:dc:b2:47:f9:cf:ea:ef:
84:d6:cc:c2:70:1d:d4:98:1d:e5:33:de:8d:3c:59:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:A3:55:69:4C:EC:27:BE:F3:87:E2:CE:8B:50:89:BC:87:6D:50
X509v3 Authority Key Identifier:
keyid:EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/326131333a3830303a3a2f32392d3239203d3e203531303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
5e:53:54:56:9f:1a:3e:60:86:1b:5e:86:82:82:ae:84:1e:9e:
9e:a6:4b:6d:af:16:92:df:f1:9f:95:d1:0d:b8:55:90:a4:c4:
23:65:3b:1d:b5:36:ad:2f:c4:ab:d1:75:4f:a7:81:25:a3:59:
4f:4a:60:02:4a:20:fb:06:b8:dc:5c:23:83:38:38:22:e8:b0:
38:c8:e4:5c:59:37:cc:c3:78:40:ed:cf:85:73:10:d6:07:ae:
e9:e8:01:f7:a2:49:9c:ef:71:58:5a:5b:62:c9:28:10:6a:e1:
69:c1:65:a4:94:13:00:21:bf:f2:18:4b:97:5d:49:5c:d6:75:
05:06:fa:df:c4:c0:5d:3c:cc:73:d6:47:c5:a2:05:8d:f3:7c:
5d:0e:3c:0a:6e:fb:f9:7b:cc:73:51:c3:29:76:19:50:5e:a2:
c5:ec:32:64:31:08:0a:7b:0a:ba:89:02:89:22:11:2c:f3:92:
09:99:3d:44:f4:ea:aa:c8:a9:c8:70:03:2f:0d:b8:b3:97:ae:
a5:40:ab:8a:15:3f:dd:45:7a:94:fc:f2:15:f7:60:b6:df:70:
5f:6d:39:89:63:f4:29:17:e6:2d:c5:09:da:54:8c:56:76:f4:
d1:3f:df:d6:96:7a:82:74:80:45:e6:f1:d6:b3:24:56:6f:9f:
07:26:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org