Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa
File: 326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa (raw, json)
Hash identifier: JuSo1DBt1ysBmjCBYR9rL5TjGzKPRzLHlO0o/qG6xX8=
Subject key identifier: CB:44:E9:97:4F:A3:ED:16:30:3E:5A:BA:0C:CA:9D:E4:B8:49:64:93
Certificate issuer: /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial: 3B102E5B87AFCFA079685B2675E4BB297CB8EAD7
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa
Signing time: Mon 30 Sep 2024 19:34:48 +0000
ROA not before: Mon 30 Sep 2024 19:29:48 +0000
ROA not after: Mon 29 Sep 2025 19:34:48 +0000
asID: 215144
IP address blocks: 2a06:1281:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:10:2e:5b:87:af:cf:a0:79:68:5b:26:75:e4:bb:29:7c:b8:ea:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Validity
Not Before: Sep 30 19:29:48 2024 GMT
Not After : Sep 29 19:34:48 2025 GMT
Subject: CN=CB44E9974FA3ED16303E5ABA0CCA9DE4B8496493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:fc:dc:60:68:e5:a6:61:35:78:3b:00:da:
f5:0d:6c:ea:01:b9:fe:38:8e:e3:6f:07:58:da:c6:
05:23:7b:ee:96:72:28:ae:f0:6c:75:4e:dd:24:15:
e0:4d:18:65:b4:d1:69:82:3a:ae:cc:ee:6b:6e:2a:
73:0a:31:98:c2:46:fb:ab:35:ad:f9:47:04:08:73:
f7:14:a6:c4:48:c4:e5:34:09:3d:a7:64:07:20:45:
eb:c8:f7:0e:09:60:db:63:c0:67:09:1f:65:c6:67:
27:42:e3:c0:81:42:12:c2:69:d5:c4:4f:46:ae:cc:
5a:61:be:0c:d1:94:03:ff:e1:b0:33:17:c2:92:99:
9e:a1:73:6b:8c:60:48:6c:c5:cf:3c:04:95:c3:cf:
7e:f4:f2:8a:1e:6e:82:b7:0c:89:62:44:ac:d0:8f:
df:00:7f:7a:d6:4a:b4:a9:33:91:13:d0:06:9c:2c:
e7:b1:2f:ec:3c:57:e2:98:2d:1a:fe:a0:bb:32:aa:
ee:63:c2:07:ec:a3:9f:cd:7a:c5:7b:fd:4f:2a:bd:
2d:50:49:7c:90:db:b4:19:53:2f:b9:e7:c0:e6:d3:
0d:a5:6b:44:93:95:87:74:28:d2:69:38:39:9a:6b:
a4:3c:42:a6:2b:a9:a5:aa:fa:e2:5a:f0:fc:25:5c:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:E9:97:4F:A3:ED:16:30:3E:5A:BA:0C:CA:9D:E4:B8:49:64:93
X509v3 Authority Key Identifier:
keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373030303a3a2f33362d3336203d3e20323135313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:7000::/36
Signature Algorithm: sha256WithRSAEncryption
99:1a:00:53:3e:8c:ef:09:2f:12:dc:41:2a:9e:1b:fa:36:5b:
44:fc:59:aa:3d:1e:dd:8b:07:cf:98:2b:30:3b:ea:14:c1:85:
61:17:4c:04:70:6b:0a:77:2c:0f:b9:79:cb:66:ef:c0:7d:fe:
63:80:15:7c:0c:5d:29:79:bc:e5:d4:69:06:d6:f4:95:24:f3:
be:05:a5:c5:15:79:03:1f:3e:dd:80:0d:04:e4:89:08:66:ba:
f9:6c:20:11:fd:cd:52:c1:ab:a1:e4:34:ff:6d:7e:dd:20:65:
c7:d6:15:0e:af:bb:21:6d:89:b3:73:37:70:7d:a0:3a:cb:a4:
e9:f0:c4:2a:22:95:5c:a1:5a:6c:8c:57:b3:c4:2d:94:0a:34:
a7:e9:ce:99:53:9f:56:3e:52:d7:a0:00:49:eb:d3:4d:2f:9e:
b5:27:b4:3f:1f:1e:0b:d4:11:df:7c:0c:51:43:47:ce:b7:e9:
99:48:d4:6e:52:4e:61:69:d8:4c:b4:ec:b0:7e:82:9a:22:85:
b9:b9:e9:67:58:66:41:17:51:88:da:8a:9d:44:fa:75:a5:39:
94:6f:31:51:4b:21:c0:04:f0:b1:37:ea:95:2f:9c:0b:12:67:
c7:a6:77:4b:0a:6a:c2:1b:37:70:5c:19:71:26:73:d5:ee:0b:
44:bc:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:45 2025 by rpki-client