Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa
File: 326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa (raw, json)
Hash identifier: pkHxrCPhxTzTO41txcSg6Ay5+GVAHCLr1XEt+KvKUy0=
Subject key identifier: 15:F6:B7:25:BA:B6:CB:DC:5E:CC:E4:0B:61:48:50:8E:8B:15:6A:17
Certificate issuer: /CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Certificate serial: 696A193C64ADDC02DE61A53EC96E8A7CDA9808C7
Authority key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa
Signing time: Mon 30 Sep 2024 19:36:58 +0000
ROA not before: Mon 30 Sep 2024 19:31:58 +0000
ROA not after: Mon 29 Sep 2025 19:36:58 +0000
asID: 216075
IP address blocks: 2a06:1281:7040::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6a:19:3c:64:ad:dc:02:de:61:a5:3e:c9:6e:8a:7c:da:98:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Validity
Not Before: Sep 30 19:31:58 2024 GMT
Not After : Sep 29 19:36:58 2025 GMT
Subject: CN=15F6B725BAB6CBDC5ECCE40B6148508E8B156A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:37:e1:77:53:ec:87:3f:ae:ab:36:57:d7:
90:eb:e7:c0:6f:13:0d:b3:1e:03:6b:e8:c8:27:c7:
16:f7:66:b6:a2:79:0c:7a:c2:2c:e0:18:59:40:ea:
eb:23:26:5f:e7:31:ee:36:c5:35:0d:64:f5:d3:c0:
b1:63:d7:89:d8:5a:34:7a:4b:eb:9a:f1:50:85:1b:
69:86:bc:33:bd:82:78:97:c0:93:eb:fa:76:f4:9d:
13:cb:18:68:ec:f9:55:1c:83:9b:f5:69:66:41:12:
d5:c4:df:34:fd:67:48:89:07:aa:f1:6c:9f:ed:fa:
0a:90:b4:53:47:3d:a6:3b:32:52:74:4c:be:24:82:
36:1c:80:7f:06:6f:1d:38:20:f4:9c:5a:98:8d:cb:
e1:1a:c3:3b:ab:02:c1:5a:0b:1f:ea:ce:a9:4a:b1:
12:9f:43:ce:41:74:be:06:39:a6:2c:7b:7d:59:d1:
28:e0:47:7a:92:c3:c4:39:d4:71:f8:ce:6c:22:a1:
42:e9:25:a1:1e:53:e9:d9:18:a5:ff:7a:7f:c6:b8:
7b:2c:20:06:a6:bc:ee:30:42:8e:ed:af:0e:a3:1f:
92:d1:2c:78:b1:c9:46:c3:a7:ca:8f:05:33:45:43:
a8:77:00:a5:e1:34:39:04:00:21:83:22:39:ac:69:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:B7:25:BA:B6:CB:DC:5E:CC:E4:0B:61:48:50:8E:8B:15:6A:17
X509v3 Authority Key Identifier:
keyid:E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/326130363a313238313a373034303a3a2f34342d3434203d3e20323136303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:7040::/44
Signature Algorithm: sha256WithRSAEncryption
1f:7c:4e:ec:0a:d2:08:e0:5e:2b:a1:30:9a:6a:8d:cc:3e:45:
2f:3c:6b:2e:de:92:6d:d2:6b:87:a0:63:a0:e8:44:9b:66:36:
bb:b6:9e:83:10:64:02:04:5b:55:eb:d0:ba:be:af:f5:80:0e:
15:cd:5f:5c:9a:64:b2:4a:7f:ea:70:6a:e4:f5:da:16:3f:5a:
b4:65:58:8c:c1:59:c8:44:ec:3c:1a:f1:ef:b3:b0:b4:d4:e6:
a8:8b:d2:80:02:d6:92:26:ea:a2:1c:92:89:61:f2:1a:67:4f:
07:58:5c:c3:2c:15:18:89:ce:af:22:f4:64:bb:5c:dd:4e:22:
5e:be:d7:bd:c4:88:dd:7f:31:66:91:cf:a8:23:f3:f1:99:3e:
18:e4:be:9e:3e:cd:f8:29:fc:71:ff:63:9f:e2:07:65:4f:3f:
a7:f7:fa:10:2b:4c:68:3c:28:64:07:5d:93:a7:9c:4d:ce:df:
d4:dc:a2:91:b8:1e:2a:64:14:d5:9b:e9:5b:b8:8c:7d:70:f3:
ca:d8:c8:38:f4:46:81:b4:8a:7e:91:2b:89:c2:4c:36:0b:88:
3c:78:05:65:9f:94:49:a8:5d:88:a9:09:22:8b:c8:ff:06:60:
d2:a2:3e:6c:78:c8:d3:db:f1:24:95:aa:1a:0d:7c:33:37:e5:
5a:57:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:13 2025 by rpki-client