Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230303a3a2f34382d3438203d3e20333937373330.roa
File: 326130613a363034343a376230303a3a2f34382d3438203d3e20333937373330.roa (raw, json)
Hash identifier: O/Rw+p7pMmcos47GNrfLCXGpbO1Uaqdyp+oyvcrREg8=
Subject key identifier: 0A:B0:45:D7:27:83:B2:AD:19:A3:4C:B9:50:E9:D3:DB:2F:F3:0D:3D
Certificate issuer: /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Certificate serial: 612FF786297EDF91D15200867B745C239893673C
Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230303a3a2f34382d3438203d3e20333937373330.roa
Signing time: Mon 30 Dec 2024 16:45:17 +0000
ROA not before: Mon 30 Dec 2024 16:40:17 +0000
ROA not after: Mon 29 Dec 2025 16:45:17 +0000
asID: 397730
IP address blocks: 2a0a:6044:7b00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2f:f7:86:29:7e:df:91:d1:52:00:86:7b:74:5c:23:98:93:67:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Validity
Not Before: Dec 30 16:40:17 2024 GMT
Not After : Dec 29 16:45:17 2025 GMT
Subject: CN=0AB045D72783B2AD19A34CB950E9D3DB2FF30D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:61:d2:f7:b6:4c:46:6f:23:a5:ba:4a:36:
d4:be:da:eb:fb:69:b8:b4:eb:d1:f9:93:7e:0b:4a:
76:8f:57:80:b4:40:7e:c3:28:bb:b2:81:98:21:b9:
8a:21:11:b8:8c:89:19:5b:32:ab:30:4f:c1:e5:1e:
8e:97:db:8c:30:49:1a:b9:cd:85:e8:66:da:f6:ce:
fd:57:fb:e8:31:d0:1b:6c:08:60:79:61:d5:65:4b:
26:e0:37:84:b5:a1:89:91:be:a3:ac:f9:c3:a8:df:
27:5f:f8:77:32:e5:8f:70:05:b0:8b:21:54:84:66:
42:32:9e:ba:65:3d:24:a5:75:42:bc:57:bf:e1:56:
a7:ca:f0:13:c3:a0:ef:c6:ba:5d:7f:66:37:e5:f6:
76:e8:0b:38:b7:b7:53:98:fb:0a:a2:96:8b:34:49:
8d:60:70:16:97:82:bc:aa:17:85:b1:b6:7c:25:12:
47:52:b0:5e:a9:ce:2d:ce:00:32:ed:db:ba:fc:7a:
3e:50:5a:cb:b1:58:4d:c1:94:9b:cb:a6:be:cc:b8:
7e:e0:53:b7:e8:5e:0b:91:22:a9:69:7c:ce:75:76:
9b:2d:ab:12:f7:a1:ab:82:9c:c6:03:04:8f:e7:47:
30:de:3d:5f:e2:3c:a1:c4:f2:60:61:96:ae:14:9e:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:45:D7:27:83:B2:AD:19:A3:4C:B9:50:E9:D3:DB:2F:F3:0D:3D
X509v3 Authority Key Identifier:
keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230303a3a2f34382d3438203d3e20333937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
a9:98:b9:73:d4:32:3f:f5:5b:a5:2b:9e:2c:e0:47:d4:72:ea:
f9:6b:c8:c4:a4:fb:7e:40:a1:de:79:78:bd:70:97:8b:e4:49:
0c:8b:b5:11:2b:66:2c:4e:e6:a3:a4:74:5a:31:c2:98:64:f8:
ae:4a:bb:b3:2a:ad:ef:d2:e9:84:46:73:c4:59:cc:55:a6:33:
5f:e5:ad:9e:08:56:67:10:f9:d6:b1:31:a3:ad:52:1b:82:81:
c8:6d:04:32:f7:41:75:47:07:a7:ae:84:8b:c1:ca:bb:4b:73:
38:ba:3c:68:5d:d2:5d:bf:ab:f2:66:24:5a:5d:20:e1:47:70:
3b:ef:32:a3:c1:9c:dc:7c:9a:1e:5c:d7:fa:de:c3:33:cf:1c:
ac:1b:c8:6a:32:d5:a4:0c:6e:c1:a1:b2:85:f3:d4:a3:15:e6:
9b:83:31:80:bf:f4:17:93:25:95:20:0e:89:b0:de:70:70:72:
44:5e:cb:ef:e0:08:dc:e4:d4:f8:f5:4d:c1:e8:57:94:c6:aa:
39:29:b6:82:eb:fd:27:37:83:a6:ee:45:6b:83:22:b0:20:ec:
8c:fd:a5:4d:3b:f9:e6:fc:b5:e3:e4:4d:b3:dc:a8:a3:e2:d7:
56:a8:0d:8c:c6:03:6d:ab:8b:c0:2a:59:5d:18:88:e1:86:c0:
e1:06:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:33 2025 by rpki-client