Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130363a396638313a313030303a3a2f34302d3430203d3e203437323732.roa
File: 326130363a396638313a313030303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: 9a2dxVD/j3UoOFOqKlX6jfX3ZhCYeBBPXg29bI9Gfek=
Subject key identifier: 2E:3E:1B:B1:82:A6:64:1A:89:A4:72:96:71:3F:06:95:2F:92:CE:40
Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial: 4EBE6D9F6927EFF582301BE98FF40A16D032A19E
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130363a396638313a313030303a3a2f34302d3430203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 11:08:44 +0000
ROA not before: Sun 26 Nov 2023 11:03:44 +0000
ROA not after: Sun 24 Nov 2024 11:08:44 +0000
asID: 47272
IP address blocks: 2a06:9f81:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:be:6d:9f:69:27:ef:f5:82:30:1b:e9:8f:f4:0a:16:d0:32:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Validity
Not Before: Nov 26 11:03:44 2023 GMT
Not After : Nov 24 11:08:44 2024 GMT
Subject: CN=2E3E1BB182A6641A89A47296713F06952F92CE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:93:9d:92:f4:63:32:22:93:84:71:13:4c:
55:3e:3d:21:a7:a7:22:75:b2:8a:02:84:d0:92:4b:
93:63:90:9d:4d:be:bc:9e:a5:a1:a0:2b:aa:9c:ef:
a0:11:9a:9f:6a:21:76:29:d3:2a:b8:e0:42:cf:42:
88:42:e3:9b:c0:b0:ac:f9:ac:72:3e:04:20:e2:ca:
2b:da:7a:88:51:86:9f:87:90:97:c7:62:66:cd:b8:
93:b1:7c:73:23:1b:58:09:e4:af:8a:9b:fd:4f:03:
a4:b3:8a:2b:53:f4:5b:e8:5d:ae:a3:68:2d:ca:e7:
4e:ef:02:11:3a:45:9e:57:28:79:38:1e:ab:1f:de:
29:a2:b2:0c:e5:a6:58:10:ce:1b:52:5e:6f:11:ab:
5c:b7:17:ea:fc:23:7f:0e:0f:20:7b:fd:82:be:66:
08:ec:1f:4f:c6:f3:59:b9:dc:47:10:0b:e9:04:70:
d8:2b:38:77:a9:30:0c:d1:9b:e4:c2:47:51:86:f0:
13:38:55:fa:50:71:68:01:69:78:f7:c2:4e:b9:35:
8d:bb:84:cb:db:e6:34:21:b9:d6:6a:e8:f7:0d:a4:
ae:32:8a:8f:07:3a:2b:db:33:f7:1a:b4:34:df:3c:
83:07:29:53:93:2c:29:be:ca:9d:50:4e:55:61:19:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:1B:B1:82:A6:64:1A:89:A4:72:96:71:3F:06:95:2F:92:CE:40
X509v3 Authority Key Identifier:
keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130363a396638313a313030303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:1000::/40
Signature Algorithm: sha256WithRSAEncryption
88:72:7b:6b:f2:ad:68:f2:cf:87:9e:02:2b:8a:31:39:8e:25:
f2:96:56:54:c6:b5:6b:57:c0:fa:59:99:10:29:1e:4b:0d:1b:
eb:b6:39:db:22:9b:65:85:c5:fd:ec:98:fa:5f:0c:b8:e3:ba:
6e:6d:2d:05:0a:e1:d3:68:36:ea:c6:0f:74:70:4b:64:c1:2d:
25:5f:1e:8e:18:d8:9a:db:da:7e:94:5a:6b:bf:c4:5f:d1:a3:
b6:d9:43:20:a4:dc:64:73:55:ef:be:6f:57:04:82:08:9a:ad:
61:56:96:e9:38:b6:d9:b4:d6:fe:9b:37:65:d9:2c:30:19:13:
56:14:9f:45:f2:98:ff:81:27:76:1a:ca:37:f8:54:a0:e6:db:
65:16:9c:37:90:17:20:44:e9:39:09:1c:18:3b:6e:6b:39:ab:
c6:10:9b:cf:f7:e6:8d:5f:f5:d3:ad:43:d0:2b:2b:f1:3e:73:
31:4d:6a:fe:75:04:8f:a2:cb:e1:76:66:58:f8:4d:e1:d7:15:
22:c0:46:5e:87:4c:5c:c2:8c:3c:a1:7a:b3:c8:c8:c2:e8:52:
e3:e9:c5:2b:3a:a6:cb:60:6a:03:b7:72:10:80:77:c3:c9:f6:
f4:fb:30:29:81:53:1c:db:e5:20:a7:68:73:29:79:6c:eb:9f:
e4:27:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:24 2025 by rpki-client