Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: u7gkg0ioA1jBNqlBEo5W2D4JPvOjIz41yHhpEkdqJZM=
Subject key identifier: 87:B2:01:2A:88:28:61:1E:B8:93:00:DC:7F:B8:45:B2:19:6E:A7:EB
Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial: 1ED3F67B671B05DA276492277961A327AF0D4436
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
Signing time: Tue 24 Dec 2024 18:19:56 +0000
ROA not before: Tue 24 Dec 2024 18:14:56 +0000
ROA not after: Tue 23 Dec 2025 18:19:56 +0000
asID: 47272
IP address blocks: 2001:67c:d88::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d3:f6:7b:67:1b:05:da:27:64:92:27:79:61:a3:27:af:0d:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Validity
Not Before: Dec 24 18:14:56 2024 GMT
Not After : Dec 23 18:19:56 2025 GMT
Subject: CN=87B2012A8828611EB89300DC7FB845B2196EA7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0f:22:29:bd:f4:27:dc:52:53:54:2d:64:3f:
8c:15:d2:8b:f0:58:d4:9e:af:f1:36:db:5d:fb:30:
44:ae:5d:39:19:e5:de:bb:1e:24:27:9c:59:ee:29:
d6:37:48:4a:c4:68:69:31:7c:6a:79:9e:4d:bf:04:
6d:56:0a:f9:32:39:96:e6:fb:26:ee:80:89:69:63:
d9:fb:79:0e:c0:61:1a:20:94:45:99:07:3a:24:ec:
cd:09:2e:a4:78:a7:95:10:b1:4b:f5:23:7d:e5:97:
21:d6:d9:46:43:8b:1f:71:f3:28:3d:59:dc:0b:71:
26:5a:4f:16:e5:2c:52:a1:d2:4d:48:f0:eb:96:03:
cb:da:6a:60:f0:3c:0a:0d:b3:60:59:f2:e1:fe:f9:
66:32:2b:cc:d4:14:be:8c:cb:34:32:b1:53:c4:30:
08:4a:63:72:0a:f6:28:2b:69:06:05:46:07:ef:7f:
01:30:3c:e4:68:1c:98:5f:1a:0f:14:f5:cf:90:7a:
b1:76:ef:04:97:4a:48:32:13:36:08:b0:ab:9b:fa:
5e:50:a5:c7:32:00:75:c2:6f:a1:2f:65:ac:a1:46:
99:f6:9d:ea:0d:1c:29:54:95:ee:3a:9d:31:9c:ab:
4b:0f:a2:57:27:d4:8b:29:fc:12:70:ae:80:8b:8f:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:01:2A:88:28:61:1E:B8:93:00:DC:7F:B8:45:B2:19:6E:A7:EB
X509v3 Authority Key Identifier:
keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d88::/48
Signature Algorithm: sha256WithRSAEncryption
7f:62:63:86:b4:8a:10:d0:94:59:56:65:24:20:df:44:d6:7c:
3b:eb:00:b9:28:00:e5:76:1d:88:ba:c8:09:a6:5f:ac:2b:22:
48:7c:b3:cd:78:91:d4:c1:2c:9b:7c:97:fe:78:58:07:22:93:
a7:1d:67:7a:e6:95:d8:f9:f9:93:1b:96:ee:cd:b3:a7:eb:ef:
e7:27:45:30:26:c1:ca:e8:7e:d0:d1:e1:c4:9e:4a:28:20:e2:
06:b6:1f:8c:fe:33:87:b7:ac:87:dc:d7:cf:04:1c:06:21:a5:
c2:87:f2:3d:d9:80:ac:bc:2c:5c:02:16:5a:bc:0d:9a:27:3e:
52:83:fe:d9:b6:2c:e4:f9:31:37:2c:18:e7:d2:4a:0d:c6:32:
54:97:eb:4f:dc:69:55:a6:03:6c:68:83:57:71:31:65:10:6b:
3a:06:81:47:09:4e:fb:a2:df:17:4e:88:0d:c7:64:e9:79:f7:
9b:4e:9d:84:00:bc:02:93:f4:51:67:31:01:72:7f:d4:30:38:
40:ee:6b:d6:24:d8:41:3c:8c:7a:94:75:26:35:d5:00:fa:b2:
d2:98:a5:cc:74:1c:f7:8a:b3:3c:57:87:42:14:0a:28:2f:ba:
5a:87:77:d6:a9:31:21:45:81:b6:0f:e6:13:02:4d:ea:78:2e:
2a:d7:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:50 2025 by rpki-client