Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa
File: 326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier: Em9Z3b2i8AJ14Osmjop4LDPb/kVDmnbuAGa9T0fREbA=
Subject key identifier: 1C:16:CC:FE:29:2D:08:99:34:EF:65:AA:3E:D4:8D:33:F9:73:5B:74
Certificate issuer: /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial: 28820B4AA1134F6D08A2A4F79D4055822B63626E
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa
Signing time: Sat 16 Mar 2024 13:35:40 +0000
ROA not before: Sat 16 Mar 2024 13:30:40 +0000
ROA not after: Sat 15 Mar 2025 13:35:40 +0000
asID: 216324
IP address blocks: 2a13:df85:b103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:82:0b:4a:a1:13:4f:6d:08:a2:a4:f7:9d:40:55:82:2b:63:62:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Validity
Not Before: Mar 16 13:30:40 2024 GMT
Not After : Mar 15 13:35:40 2025 GMT
Subject: CN=1C16CCFE292D089934EF65AA3ED48D33F9735B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:b6:54:46:c1:41:05:b8:14:31:d4:cb:dd:
fa:da:1d:be:7c:92:f7:2b:ec:71:63:12:56:03:ca:
5b:4c:26:25:5e:48:13:5c:cc:14:d7:81:3c:9f:42:
85:ca:07:54:03:3b:be:9d:0e:c1:af:f4:f1:4e:bf:
46:3b:4c:5f:f6:05:c5:2a:3f:a7:93:40:4d:5a:2a:
0e:42:27:8f:68:45:3e:5e:7e:58:b2:52:3a:ba:de:
11:c2:c6:de:52:9e:05:b6:fc:9c:77:71:d9:73:0e:
d5:f1:67:b5:1c:25:3d:5a:15:75:63:9c:1d:15:4c:
89:83:da:f7:19:d9:b4:35:5f:15:99:ad:55:ba:6a:
9a:57:d3:dd:12:8b:8c:d6:15:37:d2:c5:ab:c0:16:
6a:ad:31:ea:5d:3c:cb:ba:65:6b:73:d9:ef:2e:32:
a3:3b:f4:4c:e2:3f:60:98:6a:9b:a4:ca:83:9b:00:
d7:3b:2d:11:3b:cf:62:c8:f2:a1:39:8d:0a:e1:77:
cd:7f:00:39:47:72:68:3e:78:3d:ad:2a:fd:5a:b3:
38:a1:8f:e5:6d:4f:c4:1b:b7:12:93:2d:67:0c:06:
cc:9d:7a:cd:47:ce:e2:08:1c:93:ae:71:7a:b7:75:
53:c6:2a:18:4a:35:96:1e:11:ca:16:05:7b:3b:7f:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:CC:FE:29:2D:08:99:34:EF:65:AA:3E:D4:8D:33:F9:73:5B:74
X509v3 Authority Key Identifier:
keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130333a3a2f34382d3438203d3e20323136333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df85:b103::/48
Signature Algorithm: sha256WithRSAEncryption
51:70:60:aa:7b:e3:88:b4:23:07:f5:16:86:2b:bf:04:bf:71:
60:a2:fe:72:88:20:db:0c:1c:c6:98:d6:6f:0a:73:20:ca:bf:
ce:c9:ed:72:4d:e4:29:a1:45:0b:e3:69:07:e2:40:9f:96:34:
fe:01:90:59:f5:0e:07:14:24:49:72:3a:3d:ae:35:87:a0:15:
42:bc:74:52:05:28:d1:cc:13:03:30:f2:e3:15:c6:d7:4e:1e:
de:9b:0a:6b:1d:5e:0e:04:0d:b3:95:9b:20:75:5c:e5:b9:45:
d3:a3:68:49:1a:68:b4:00:2d:e6:c8:02:d9:81:ee:7c:dd:7b:
48:1b:00:68:95:54:a3:83:80:d7:b8:71:a5:d4:04:a9:8c:13:
d6:b3:df:7c:5e:89:87:78:0d:dd:b4:8e:4a:e2:64:a9:7e:a4:
56:51:12:02:e7:ba:ba:95:62:4a:ba:5d:78:3e:1f:2a:51:91:
e7:06:fd:29:54:74:e3:ab:1c:73:2c:8c:af:6e:83:bc:dc:f2:
02:bc:6f:cd:77:bf:89:38:23:75:aa:27:cc:21:27:7c:f1:b8:
54:30:0c:ce:cc:8a:67:84:39:01:f2:2a:16:ee:02:1b:a9:18:
da:10:e2:6a:3e:1a:b5:a3:bf:9b:3d:f6:a5:92:4e:be:ce:0c:
a0:ea:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:52 2025 by rpki-client