Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
File: 323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier: +x76BVaxnvS58YUNhnc2ba4qVUjOrp5KQWvj+XuK+do=
Subject key identifier: 6C:BE:84:78:EA:8A:69:F7:A5:54:87:B9:98:76:F6:7C:37:7E:CF:F5
Certificate issuer: /CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
Certificate serial: 492836B285E3F5E4156ABC730DE7755EA45856FF
Authority key identifier: 7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
Signing time: Sat 23 Sep 2023 19:01:41 +0000
ROA not before: Sat 23 Sep 2023 18:56:41 +0000
ROA not after: Sat 21 Sep 2024 19:01:41 +0000
asID: 205848
IP address blocks: 2001:67c:129c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:28:36:b2:85:e3:f5:e4:15:6a:bc:73:0d:e7:75:5e:a4:58:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf58a51fb1af5af7586050df9a4d20deed5e258
Validity
Not Before: Sep 23 18:56:41 2023 GMT
Not After : Sep 21 19:01:41 2024 GMT
Subject: CN=6CBE8478EA8A69F7A55487B99876F67C377ECFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:81:9e:09:81:59:56:d0:5c:a0:f2:e0:dd:
96:8f:70:90:e6:87:a9:fb:f2:62:8f:7f:39:44:02:
82:63:60:28:11:6a:de:a8:47:7a:e3:2b:b0:c8:a8:
cd:a4:6d:c3:16:2f:72:f2:18:d6:fd:99:80:fc:09:
30:3b:05:da:77:4d:3f:eb:3a:89:90:12:6e:6d:9b:
cc:57:31:43:75:c3:0b:77:00:f4:51:c3:94:d9:46:
1d:d8:ba:56:e6:19:c5:dd:bf:6b:61:6a:f5:1c:a7:
27:5c:f2:cf:bb:61:26:bb:20:cb:bf:b7:14:42:e1:
b6:71:34:4e:32:55:4a:50:0f:bd:fd:19:01:c5:34:
5f:cf:84:1e:63:f9:ce:28:15:0c:e0:ed:db:9e:3d:
f1:5b:f2:b0:b9:3d:09:18:0c:8c:ed:db:b7:ec:fe:
4e:fa:ea:8a:2f:0c:a0:29:9f:da:46:ec:b2:14:58:
af:98:63:d9:ff:9d:c7:8a:44:06:64:56:f5:7d:c6:
a1:75:14:22:c9:98:16:0e:34:eb:5b:8b:59:41:7b:
65:ef:07:7f:48:5b:1c:ff:92:cb:50:c5:b4:8b:ba:
0a:be:e7:2d:8e:51:ad:c5:4d:98:1c:c8:67:47:26:
54:06:3d:62:69:39:f4:6f:f0:ea:f0:1e:34:36:f9:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:84:78:EA:8A:69:F7:A5:54:87:B9:98:76:F6:7C:37:7E:CF:F5
X509v3 Authority Key Identifier:
keyid:7C:F5:8A:51:FB:1A:F5:AF:75:86:05:0D:F9:A4:D2:0D:EE:D5:E2:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/7CF58A51FB1AF5AF7586050DF9A4D20DEED5E258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPWKUfsa9a91hgUN-aTSDe7V4lg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de6eee2-7e59-4b38-b0b0-c931d6a7af38/0/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d7:aa:75:34:90:6d:a6:0e:b5:57:26:9a:09:2f:f8:04:53:
d4:96:11:00:d3:33:de:a9:e5:73:cc:cd:67:2c:48:e2:bc:c0:
30:40:a1:31:50:2c:40:22:5d:cc:9c:aa:5e:9c:e9:d6:9e:bc:
a8:fe:16:13:0d:1e:e2:6d:0c:ad:0a:7e:13:3b:59:b2:da:2a:
85:c9:0e:39:ad:5c:96:2a:87:8d:c1:32:98:94:f8:46:b9:46:
60:ab:ba:a7:7e:a5:ca:d0:74:9a:fd:f7:2e:12:46:e7:50:87:
50:34:9d:31:a4:c4:d0:70:b8:fe:45:64:b5:2f:64:03:0e:4f:
bf:2c:ac:41:e9:97:70:e4:39:ab:26:78:5b:54:ff:4b:a5:2f:
9c:1b:6b:94:f0:cc:b0:3d:9e:8d:ac:d4:c1:ec:9e:34:b0:69:
d4:b9:39:f1:5c:3e:8e:23:9c:28:23:50:ec:be:42:d8:98:a1:
48:3c:bf:11:ca:db:14:16:98:b3:8f:14:f1:c6:65:43:82:f9:
1b:76:d0:52:27:61:3f:a7:c7:99:41:2a:f6:86:09:f5:0c:ee:
46:71:3f:41:33:ab:b7:df:a6:b8:05:1c:03:9c:71:6e:c8:94:
a0:25:40:58:91:1b:71:c7:64:05:3a:60:ec:33:8e:49:5b:f0:
94:61:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:31 2025 by rpki-client