Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa
File: 326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa (raw, json)
Hash identifier: BOkwDEB+/CjY9VI/QCGY1vzOEJalQzjdnoEW+e8/BM4=
Subject key identifier: 37:F2:90:6E:67:4F:36:30:51:6D:90:CA:0A:67:E0:8E:AC:FE:D8:90
Certificate issuer: /CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Certificate serial: 6665E1A4CC9DB6F9161B919C52646A14B6875BDD
Authority key identifier: 2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa
Signing time: Thu 23 Nov 2023 05:56:56 +0000
ROA not before: Thu 23 Nov 2023 05:51:56 +0000
ROA not after: Thu 21 Nov 2024 05:56:56 +0000
asID: 14618
IP address blocks: 2a11:29c0:9ebe::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:e1:a4:cc:9d:b6:f9:16:1b:91:9c:52:64:6a:14:b6:87:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C68D9AD77CBE389FA0C83BF07FB699791262CCA
Validity
Not Before: Nov 23 05:51:56 2023 GMT
Not After : Nov 21 05:56:56 2024 GMT
Subject: CN=37F2906E674F3630516D90CA0A67E08EACFED890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:b9:3e:08:6a:0c:e9:b0:10:8b:c7:f8:30:
93:b1:ae:e8:44:0c:fa:76:84:fb:ed:79:ac:cf:82:
7b:c1:be:69:f7:45:7c:85:f2:91:eb:66:ae:a5:8a:
65:03:ac:db:52:99:2a:6a:2d:07:a7:1d:26:32:e9:
62:1e:89:15:af:a6:b8:b1:04:24:45:7f:0a:0e:99:
28:86:5e:59:78:06:63:70:df:a0:3f:3d:0f:0c:cc:
8e:86:44:ea:f1:d4:db:40:ee:5a:b1:66:90:e7:99:
cd:cf:5a:3b:4a:68:7b:58:22:fc:12:69:3a:f6:e2:
cd:5a:b6:30:ff:b6:af:df:97:f0:db:7c:ab:c4:5a:
f7:66:fb:fb:d6:ec:ab:f7:7f:49:1d:ef:62:04:c7:
64:61:d0:94:d2:0f:40:25:cf:d8:45:bc:9a:5d:b6:
b4:3d:14:b0:89:3a:15:dd:48:24:8a:9e:37:df:2a:
30:86:16:e3:7c:9f:31:8e:ce:7e:f1:13:b9:b8:c4:
c6:0a:f8:5e:c2:c5:b8:38:38:ad:00:ca:1c:b6:78:
8f:5d:60:c5:8d:75:1a:74:d0:d5:73:e7:6d:3f:e2:
24:ec:d0:a4:b1:ea:eb:89:b2:c7:11:81:1a:af:a8:
03:76:92:65:fd:e3:fe:4e:d4:ba:95:44:79:9c:7c:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:90:6E:67:4F:36:30:51:6D:90:CA:0A:67:E0:8E:AC:FE:D8:90
X509v3 Authority Key Identifier:
keyid:2C:68:D9:AD:77:CB:E3:89:FA:0C:83:BF:07:FB:69:97:91:26:2C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/2C68D9AD77CBE389FA0C83BF07FB699791262CCA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/7/326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9ebe::/47
Signature Algorithm: sha256WithRSAEncryption
1e:79:80:61:09:30:42:82:ef:b7:d0:14:b6:6c:59:ba:5d:a4:
47:d7:c7:23:99:10:31:b9:2c:5f:b0:e0:01:5b:11:c1:aa:cf:
a7:1b:4f:8e:f7:30:cd:51:7c:7a:5d:7f:35:8c:05:e2:2f:7e:
cf:27:79:b7:1c:74:0c:ad:e5:00:a2:35:2e:3b:a4:05:79:37:
07:5b:5e:6d:2b:d5:fc:83:46:b5:74:85:e5:45:70:cf:47:6d:
12:20:13:ed:95:fa:97:a3:0f:0c:d5:fc:8e:d5:80:32:68:f6:
83:5a:19:dc:92:ba:55:e7:86:8a:6c:53:c0:f4:9a:fd:88:35:
70:96:c9:b9:36:f6:74:e4:80:33:d8:77:8d:f3:a4:49:42:27:
f2:d6:40:2b:5b:9a:94:dd:14:ce:83:95:86:28:d3:f8:6a:f0:
8d:6f:76:8d:eb:0d:ac:bc:24:9d:1f:6a:bc:44:09:c2:c5:20:
27:ef:a7:35:8d:f5:49:3b:7e:38:4b:b6:35:52:06:34:d9:17:
ac:c4:6b:2b:7f:bb:3d:45:6e:8c:e7:16:82:72:9b:52:d9:4c:
6a:7c:ab:78:67:ba:a1:49:e0:44:1c:ef:e3:33:6f:34:c4:4d:
75:fb:12:9d:b1:a8:ce:0d:61:56:27:66:32:74:03:6a:63:a4:
dd:dd:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:25 2025 by rpki-client