Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa
File: 326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa (raw, json)
Hash identifier: GnmJFg8T5YeVvkF83LkcvneoqcRFNGIt3mf/l0HXd60=
Subject key identifier: E9:44:54:FB:E1:17:3D:72:69:25:4B:61:D4:C6:D5:07:DC:41:35:10
Certificate issuer: /CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Certificate serial: 283EB972E16EEDA233BCCC7389D326B46B40917F
Authority key identifier: 2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa
Signing time: Thu 23 Nov 2023 05:57:29 +0000
ROA not before: Thu 23 Nov 2023 05:52:29 +0000
ROA not after: Thu 21 Nov 2024 05:57:29 +0000
asID: 16509
IP address blocks: 2a11:29c0:9eb8::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:b9:72:e1:6e:ed:a2:33:bc:cc:73:89:d3:26:b4:6b:40:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Validity
Not Before: Nov 23 05:52:29 2023 GMT
Not After : Nov 21 05:57:29 2024 GMT
Subject: CN=E94454FBE1173D7269254B61D4C6D507DC413510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:64:0f:7c:9f:09:3d:b2:9b:61:d8:c4:fc:
98:47:68:d4:d6:56:6d:00:6c:42:c4:57:77:18:53:
50:66:26:d1:e1:cf:04:1a:58:93:89:ec:2c:38:4d:
ed:ec:4d:4a:65:17:64:96:d4:8a:07:b3:43:92:65:
9d:ba:d1:a4:da:19:db:a2:d4:be:29:a7:1c:d5:12:
59:8b:46:f4:7d:ba:e5:23:a2:19:ea:70:8b:92:e1:
db:e2:95:29:23:91:50:f7:c1:ae:00:7b:7c:60:31:
eb:5a:4e:0b:51:23:f0:64:68:0e:b0:35:28:0c:b6:
80:31:d4:c8:ba:7d:ea:1c:26:67:8f:91:f8:f4:1e:
7e:ba:36:b8:94:16:cc:03:05:69:dc:ad:d4:c1:cb:
ff:b0:7e:17:3a:9a:3c:23:fd:50:5e:cd:d2:aa:61:
65:81:7c:e2:2d:e0:48:ab:c3:4b:66:d4:f7:5f:6c:
c0:52:36:41:8b:ae:1c:ac:79:6f:59:23:5c:ea:5f:
2d:cf:63:7f:56:a9:43:a2:95:d1:ee:30:8a:e2:6f:
5c:7c:aa:6d:be:6f:d1:35:64:e6:8d:d0:6b:88:09:
e5:c7:0f:e8:3e:93:79:56:07:bf:e0:c3:9f:54:28:
ff:d8:bb:30:9a:a5:6d:37:33:c9:7f:cf:62:38:5c:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:54:FB:E1:17:3D:72:69:25:4B:61:D4:C6:D5:07:DC:41:35:10
X509v3 Authority Key Identifier:
keyid:2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9eb8::/46
Signature Algorithm: sha256WithRSAEncryption
bb:80:36:73:42:5f:e0:7e:f2:f2:46:52:a8:be:a3:61:8f:ae:
b8:5e:4b:c4:df:6e:15:4a:44:63:c2:d2:40:70:74:45:bf:11:
92:e6:c7:70:94:65:41:6e:81:3f:65:39:cb:1b:ef:67:a8:7c:
ed:3f:bc:63:23:a5:eb:05:92:f1:18:90:f0:6d:e7:33:64:05:
5d:17:17:a3:69:56:83:58:1a:15:50:fa:63:2e:dc:9b:1e:73:
42:5c:7d:f3:7d:f0:40:86:9b:b2:39:1e:69:fa:08:0e:1c:2e:
b3:d0:98:6f:fd:f3:a4:c4:b1:94:8b:d0:11:ca:ef:d3:34:07:
90:5d:df:78:4d:10:2a:29:e3:93:c1:93:16:d5:99:d3:04:b1:
16:6d:b0:52:2d:1c:56:d8:45:04:3c:e8:2d:9f:dc:51:b8:ac:
a6:fd:b6:6f:fd:76:65:1c:72:ec:f7:58:fd:f5:50:b3:45:18:
f3:04:09:eb:57:c1:5f:83:4b:88:c6:cb:3f:d1:55:f4:8d:61:
82:4f:9f:9b:69:a0:34:54:7b:e1:c9:c0:ba:e7:49:03:a2:3d:
a4:c8:72:c3:1f:97:36:57:10:9e:57:68:5c:ff:f4:f5:72:96:
c9:f0:77:82:24:a3:5f:99:9a:65:30:bf:74:29:61:85:95:32:
92:67:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:39 2025 by rpki-client