Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653865383a3a2f34382d3438203d3e20323033363836.roa
File: 326131333a646638303a653865383a3a2f34382d3438203d3e20323033363836.roa (raw, json)
Hash identifier: 9MbkFxL85A+qLJWCgT5i2eEn75ijQPE/pyj+azPHepI=
Subject key identifier: 1D:92:7C:8A:41:71:D2:58:F3:D8:96:F0:F0:A1:39:4A:E2:89:0E:A8
Certificate issuer: /CN=F42DD866D1ED93308763875100791B0AA79AA33E
Certificate serial: 36EC35904F2DF3A578A842AF1485676389BA5C38
Authority key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653865383a3a2f34382d3438203d3e20323033363836.roa
Signing time: Wed 27 Dec 2023 10:46:46 +0000
ROA not before: Wed 27 Dec 2023 10:41:46 +0000
ROA not after: Wed 25 Dec 2024 10:46:46 +0000
asID: 203686
IP address blocks: 2a13:df80:e8e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ec:35:90:4f:2d:f3:a5:78:a8:42:af:14:85:67:63:89:ba:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42DD866D1ED93308763875100791B0AA79AA33E
Validity
Not Before: Dec 27 10:41:46 2023 GMT
Not After : Dec 25 10:46:46 2024 GMT
Subject: CN=1D927C8A4171D258F3D896F0F0A1394AE2890EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:7d:3b:1d:2c:20:1b:cc:32:d5:64:58:ae:
34:68:ab:c0:9d:41:7e:aa:80:03:a9:8c:1f:a9:d2:
2e:d2:26:7a:03:9e:49:6e:ae:6b:08:41:2f:d5:16:
be:d9:ca:62:13:31:a4:65:ee:50:d6:99:56:f0:f5:
13:a4:7e:f8:ff:15:8a:08:a2:29:cf:17:c1:cc:43:
17:04:c7:b8:21:e0:79:42:e3:2e:65:21:6a:95:dc:
80:92:af:77:d3:ad:77:67:cd:72:72:97:e7:c7:3b:
fd:39:96:62:1a:4b:3d:d9:a4:95:33:d1:81:b5:43:
89:81:fe:24:65:4d:db:40:d5:63:28:6a:34:3d:02:
a3:ff:8e:6e:ad:63:9b:b1:db:64:1a:75:65:e9:57:
26:5b:af:86:2a:0f:38:da:fb:22:13:a7:f3:7b:27:
b2:a0:98:98:0b:74:4a:85:e2:b2:0c:64:9e:61:fe:
fc:e1:b6:d3:83:34:16:88:8e:4c:5d:a2:b5:b5:a1:
b8:4a:da:f4:2a:28:99:99:e7:56:5f:57:69:71:80:
a4:42:79:12:87:e2:59:fe:a8:51:92:ff:52:6f:0a:
17:01:91:98:0e:e0:79:63:be:e0:ef:7c:04:c1:12:
f9:75:0e:51:ee:35:b2:d9:8e:32:39:65:93:64:e7:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:7C:8A:41:71:D2:58:F3:D8:96:F0:F0:A1:39:4A:E2:89:0E:A8
X509v3 Authority Key Identifier:
keyid:F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/326131333a646638303a653865383a3a2f34382d3438203d3e20323033363836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:e8e8::/48
Signature Algorithm: sha256WithRSAEncryption
1d:4c:4e:bb:80:89:51:55:65:9f:fc:ad:f6:a4:bd:7b:eb:4c:
0b:8a:a7:16:cc:70:77:27:b4:10:2b:0b:c8:a5:68:4c:dd:38:
90:1b:01:68:c2:c5:c7:a0:38:8c:7c:59:6d:77:5f:a6:5d:3a:
4a:a8:dd:8e:8e:9d:73:5f:32:c4:29:17:7d:10:3b:d8:d3:f1:
50:63:1a:43:4f:38:7f:8a:bb:58:82:5d:2c:af:7f:59:88:20:
4d:f6:cb:72:19:49:69:b4:c9:40:a2:75:3c:63:14:88:be:12:
f0:be:65:b0:b4:8d:1e:aa:d0:c5:40:d2:74:d9:d6:d5:d9:d1:
c5:f9:d0:ae:bd:2e:53:de:82:35:b3:ef:47:4a:12:5e:02:3e:
5a:a0:fc:cf:fc:f2:27:20:61:31:60:07:6d:25:21:7e:34:eb:
48:ca:36:68:50:fa:23:be:a0:02:6d:81:4f:99:b9:43:58:7b:
ad:c6:bb:ee:94:18:71:4c:f4:49:15:f0:b0:d5:8e:31:12:c1:
42:21:c2:29:d4:1d:27:67:5c:d7:5b:e9:f8:c0:79:69:75:97:
49:40:6f:26:eb:20:f0:77:b9:a2:54:bc:ed:48:9f:18:43:99:
e7:a0:3a:5e:97:f5:77:eb:dc:a6:06:b3:25:f0:4e:79:bd:c7:
17:dd:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:18 2025 by rpki-client