Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa
File: 326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier: hEv57XtRNQQedJ4BQU30kQ0YPV4LodI1XABHiJLhXzc=
Subject key identifier: 9A:DB:E2:F5:0A:7D:A0:26:7F:41:23:42:1E:E5:EA:7B:BE:3B:F2:D2
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 2AE709BE257E7F757B5181CBD382A16F010BB768
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa
Signing time: Mon 24 Apr 2023 15:45:27 +0000
ROA not before: Mon 24 Apr 2023 15:40:27 +0000
ROA not after: Mon 22 Apr 2024 15:45:27 +0000
asID: 60900
IP address blocks: 2a07:54c5:1900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e7:09:be:25:7e:7f:75:7b:51:81:cb:d3:82:a1:6f:01:0b:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Apr 24 15:40:27 2023 GMT
Not After : Apr 22 15:45:27 2024 GMT
Subject: CN=9ADBE2F50A7DA0267F4123421EE5EA7BBE3BF2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:b5:aa:5e:4a:19:b3:1f:2b:59:c9:6a:22:
18:ab:d0:3d:5d:87:18:00:fe:d8:36:8d:b8:91:37:
6a:1b:ef:43:f7:b6:1a:c8:1c:b1:63:3d:ef:ce:ab:
04:19:fc:a8:1e:c3:34:b5:f8:7b:f2:79:23:82:0d:
cc:a0:8e:ed:8e:35:08:e8:63:c2:41:c8:99:7d:b0:
12:50:a2:d0:d1:5d:9c:3b:34:a7:08:13:71:7a:6c:
a0:f1:53:2e:78:15:f2:17:14:4a:0d:27:55:3e:6f:
4f:f2:8a:7f:d3:f1:ed:5b:8f:8f:e0:51:75:92:a1:
c3:6d:fe:6e:4e:4c:16:f8:79:3c:91:7d:fd:2d:d3:
86:f7:24:61:38:5f:b0:ec:86:c2:06:5b:74:56:e1:
b9:9a:84:24:08:d4:d3:2a:b9:d8:63:7d:e9:1c:aa:
f3:2e:d2:59:fa:c0:d8:82:68:9b:b3:07:d9:47:13:
cf:e6:ad:ad:af:9b:fa:7e:e0:a7:c0:8a:73:b2:e4:
84:5d:2b:35:9a:ae:2a:fa:91:6b:47:b5:4b:2e:4c:
02:9c:a3:0e:79:b0:36:e4:51:c5:f5:13:fc:7c:42:
dc:66:0e:24:ac:3f:80:91:97:20:84:2b:0c:b1:0e:
2e:9e:69:da:2b:25:d3:e8:c7:df:96:e4:4f:09:75:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:E2:F5:0A:7D:A0:26:7F:41:23:42:1E:E5:EA:7B:BE:3B:F2:D2
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1900::/40
Signature Algorithm: sha256WithRSAEncryption
bf:d8:94:01:69:40:00:d2:45:5b:c3:4d:f5:a0:a6:7e:ac:e2:
cd:8c:98:34:19:9f:43:1e:fe:0a:86:d0:6c:a8:7e:a1:0e:06:
c2:00:52:15:0e:14:dd:38:93:2a:e0:78:57:70:73:40:a5:df:
22:c2:f2:8d:0b:38:27:0c:a8:23:1c:c2:26:c4:b8:ac:28:a5:
ce:df:a5:83:1c:67:3a:de:74:b5:d6:b6:c9:a2:67:3f:a4:d8:
58:94:5a:c3:d2:79:32:73:da:95:e5:e7:29:ff:2e:be:71:29:
30:04:5a:78:e9:d6:24:cb:d4:61:9a:d2:d2:7f:67:95:d3:d6:
42:25:c1:c6:ad:08:37:c0:69:55:27:90:ca:4c:3e:00:38:ed:
a8:34:f6:b9:05:67:2b:11:36:b1:67:2d:15:0b:2d:b6:64:0f:
6e:09:38:f2:47:73:72:9c:40:c4:03:a8:48:09:fb:8d:f2:60:
f2:16:48:ea:1a:26:44:f7:b2:ea:22:05:ef:98:40:d9:c7:26:
d1:3d:c7:5d:83:20:48:3c:34:fa:84:0c:1f:f5:62:b6:54:90:
1b:6d:cc:99:88:1e:f5:27:fb:34:65:d6:05:cd:fc:45:8b:5c:
da:62:dc:93:31:bd:51:21:e7:f2:b7:04:20:ac:65:21:c6:65:
78:f7:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org