Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062363a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393062363a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: 1wzxsnzin8IRwIhDFkZGR03n5Lig3bmUks+xnRl7JG0=
Subject key identifier: 3E:B4:A0:E0:1B:3B:7F:88:92:5D:A3:BE:B2:B9:CF:4C:00:05:28:42
Certificate issuer: /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial: 761A0A47801130636B3D07006340036DA803D485
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062363a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 11:08:45 +0000
ROA not before: Sun 26 Nov 2023 11:03:45 +0000
ROA not after: Sun 24 Nov 2024 11:08:45 +0000
asID: 47272
IP address blocks: 2a11:29c0:90b6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1a:0a:47:80:11:30:63:6b:3d:07:00:63:40:03:6d:a8:03:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
Validity
Not Before: Nov 26 11:03:45 2023 GMT
Not After : Nov 24 11:08:45 2024 GMT
Subject: CN=3EB4A0E01B3B7F88925DA3BEB2B9CF4C00052842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:0e:04:0e:3d:42:54:d2:cd:3b:c4:d9:45:
06:85:1c:8d:32:a4:0b:ef:b4:97:1c:35:57:4c:07:
3d:7b:5d:a1:10:af:37:b6:66:11:a4:f3:1d:18:66:
c0:23:f3:46:c9:23:7e:2c:1e:3e:83:f8:6d:85:a0:
fc:ec:af:07:2e:aa:cc:a6:e8:48:11:e8:94:7a:b7:
22:79:d4:3f:45:82:4e:bf:44:85:94:24:2a:0c:ee:
82:6a:24:e8:83:b5:21:eb:3a:38:e6:d8:e9:5e:98:
12:b5:d9:79:be:3b:be:8f:b3:a4:85:fd:71:74:1a:
03:6f:08:3d:00:58:af:14:2d:0b:a9:7c:60:0d:51:
93:53:e3:82:fe:0b:f4:3e:d7:5e:03:3b:29:0a:98:
38:36:7b:46:a8:fe:0e:11:f4:d4:c6:b1:9d:71:45:
e2:52:f9:34:6d:b3:0b:45:00:80:6d:44:8c:75:7c:
c2:39:67:02:3b:93:f5:56:7b:25:38:c7:ba:8f:fb:
bf:85:99:46:47:05:c1:00:4d:0c:d3:86:ef:76:57:
f1:55:4d:a3:5c:aa:61:57:7b:46:f2:86:44:3c:97:
fe:0b:9e:2b:8e:99:6a:07:c4:4f:66:26:d2:e6:87:
a2:9c:85:3c:93:e2:5c:72:6c:2b:af:82:c9:d2:54:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:A0:E0:1B:3B:7F:88:92:5D:A3:BE:B2:B9:CF:4C:00:05:28:42
X509v3 Authority Key Identifier:
keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393062363a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:90b6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:8e:56:ef:84:02:93:42:b1:fc:df:27:f9:c1:38:a1:a1:c5:
25:91:9c:0f:45:62:ee:f4:ed:76:3b:7a:80:16:55:85:3d:5e:
a1:1d:b0:2f:9a:19:fd:56:75:42:aa:7e:e1:ad:b1:f4:ba:85:
d8:ca:40:c6:0d:6d:92:f6:30:c2:f5:de:3f:32:f3:64:00:b8:
1b:e5:23:da:90:de:91:ff:19:84:67:6f:3f:c7:54:fc:69:c5:
2d:56:32:2c:a9:73:36:fd:fd:71:77:32:34:f0:98:1d:51:1e:
8e:14:a8:61:a6:ab:c8:65:c4:17:91:63:8a:70:68:58:8c:c7:
cf:e8:b5:d7:fc:d6:43:7c:0e:69:2a:eb:15:aa:f9:7b:e8:5a:
eb:d7:28:96:77:09:95:3f:04:6c:8c:55:0e:eb:28:95:43:f5:
44:48:0e:c7:c2:9f:a8:0b:ba:7c:69:17:7c:ec:fc:ed:b2:ab:
d0:12:28:7b:5a:2d:58:3f:41:77:e8:ce:11:c9:2c:5d:7c:8e:
cb:1b:55:55:14:16:ca:a9:80:f8:1c:08:f2:55:b7:f3:99:ed:
bf:70:9f:44:b4:82:e9:52:14:64:5e:c8:8f:6a:0e:18:a7:b9:
f5:13:1e:45:ea:34:85:48:e4:11:f3:99:af:1c:75:66:f6:9c:
a3:4a:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:25 2025 by rpki-client