Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20323134373638.roa
File: 326130613a363034343a376230343a3a2f34382d3438203d3e20323134373638.roa (raw, json)
Hash identifier: g7BoMok3CNGZyPeic31bo7AtqKRI5oXJE88WTCNOgTo=
Subject key identifier: EB:44:8C:98:C6:A6:C8:BF:3A:FB:F2:09:B1:73:29:41:4A:5B:8A:9D
Certificate issuer: /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Certificate serial: 0C16D278741EAEEB273656B3CA9212ED93734B61
Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20323134373638.roa
Signing time: Thu 19 Dec 2024 18:45:06 +0000
ROA not before: Thu 19 Dec 2024 18:40:06 +0000
ROA not after: Thu 18 Dec 2025 18:45:06 +0000
asID: 214768
IP address blocks: 2a0a:6044:7b04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:16:d2:78:74:1e:ae:eb:27:36:56:b3:ca:92:12:ed:93:73:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE
Validity
Not Before: Dec 19 18:40:06 2024 GMT
Not After : Dec 18 18:45:06 2025 GMT
Subject: CN=EB448C98C6A6C8BF3AFBF209B17329414A5B8A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:9a:ca:8c:5c:d6:47:03:b4:97:e6:84:29:
b2:32:fc:33:76:14:6c:9f:a3:7a:95:52:2a:ab:d3:
c3:56:d1:48:8c:de:3f:f2:1a:13:b1:2c:12:69:bf:
d0:66:9a:71:da:b8:ed:ed:10:29:d4:0b:8c:f7:f0:
08:a5:75:f5:b6:a6:bb:2f:bc:8e:be:36:0c:ad:b6:
57:c5:fe:3d:e1:78:3f:6d:89:fb:99:2d:08:94:a6:
c8:06:8f:da:b7:7c:72:87:4e:42:81:47:ad:d5:13:
79:22:10:41:5f:0b:5c:e6:d9:ce:d7:da:19:13:82:
6e:67:70:3c:e3:73:c9:a5:45:ec:60:d9:38:f9:5f:
e8:b0:ce:e4:eb:c8:ed:8d:f3:ed:45:4c:0c:09:10:
ad:cb:0c:8f:18:8e:44:fd:86:69:10:c5:24:20:2f:
4f:ce:0d:00:c8:e3:c5:1b:10:c3:2b:19:2e:ec:cc:
be:37:aa:3d:8d:f7:be:21:f4:0f:10:b0:5b:10:35:
c0:ad:78:7c:2c:85:a3:f1:c1:21:dd:2e:d7:c6:0a:
bb:ef:de:16:01:45:5a:b6:a7:d3:e8:53:7b:b1:38:
39:3d:5b:f1:fd:e6:e9:94:d6:73:d7:ff:a8:07:44:
b8:82:36:9d:7c:94:31:4a:bc:c2:14:29:af:df:e9:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:8C:98:C6:A6:C8:BF:3A:FB:F2:09:B1:73:29:41:4A:5B:8A:9D
X509v3 Authority Key Identifier:
keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/326130613a363034343a376230343a3a2f34382d3438203d3e20323134373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7b04::/48
Signature Algorithm: sha256WithRSAEncryption
46:2f:ee:ee:b8:e3:cf:8b:be:1f:fb:8f:85:bf:1a:dd:69:a5:
01:eb:75:0d:86:f6:c9:b2:3b:78:0e:bf:9f:13:ab:87:10:2f:
ad:79:28:93:49:fa:2b:e8:22:4a:5a:6b:f8:1f:80:f2:f2:bf:
37:15:5b:0f:fd:6e:a7:7c:57:65:e3:46:0f:62:af:ec:41:2c:
b6:71:c1:78:2f:e8:00:9b:1b:85:a2:5b:23:54:85:77:f3:35:
81:67:22:dd:28:c8:63:e1:aa:76:01:fb:e3:7d:d8:8b:a5:32:
f3:d2:f9:f9:eb:c7:85:4c:99:82:4f:eb:0c:0d:cf:5f:22:33:
bf:0a:17:6a:ab:0b:c6:be:41:d1:60:22:a4:fb:41:08:b5:42:
18:ec:c8:b0:d7:a8:99:53:bf:de:73:93:21:cb:2b:07:69:63:
5c:a3:75:6e:8f:28:87:40:e2:b5:86:fe:4a:de:83:c1:07:1c:
74:6f:8b:ff:ee:fb:dd:0f:02:20:ad:f3:8e:2b:5c:61:93:3b:
4b:3b:5b:62:d5:4f:09:09:9c:30:2f:d0:cc:1a:5f:a3:dc:3f:
b4:f4:86:84:bd:6c:99:b0:4b:ad:b1:2f:70:db:53:e4:ce:f0:
8e:84:4b:17:e7:71:85:f6:7f:cf:a0:a1:4d:f4:4c:0b:9b:2a:
ec:e0:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:32 2025 by rpki-client