Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa
File: 326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa (raw, json)
Hash identifier: o8BOkO5Ejyep0vQR0/GOU3Gw5YWDuTORm9xmbGWZMMk=
Subject key identifier: A1:76:75:54:BF:DA:C4:A3:10:32:D2:C8:4B:8E:2A:30:EC:A9:27:BE
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 7562D81ECB2BB251936096FB48C82407B0CD8080
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa
Signing time: Wed 26 Jul 2023 10:48:23 +0000
ROA not before: Wed 26 Jul 2023 10:43:23 +0000
ROA not after: Wed 24 Jul 2024 10:48:23 +0000
asID: 48717
IP address blocks: 2a07:54c5:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:62:d8:1e:cb:2b:b2:51:93:60:96:fb:48:c8:24:07:b0:cd:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Jul 26 10:43:23 2023 GMT
Not After : Jul 24 10:48:23 2024 GMT
Subject: CN=A1767554BFDAC4A31032D2C84B8E2A30ECA927BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:e5:71:09:89:88:d0:45:b1:30:5a:68:66:
c7:1f:85:dc:f6:55:81:bf:65:6a:05:69:a0:55:d1:
75:f8:c2:98:2e:a7:31:ea:e8:6d:c9:fc:f7:74:c1:
88:d3:2d:dc:4f:1e:a6:4b:ad:69:21:f7:62:b2:c0:
90:20:d5:7d:53:71:4f:52:92:2c:c5:d8:1c:c2:37:
ab:3c:c6:6a:e3:13:39:e4:17:92:42:6d:2d:5d:f9:
f5:a8:02:ac:ef:ee:53:be:ed:18:c1:4f:3a:80:ac:
37:45:c3:a9:a0:37:6d:b4:85:e1:ba:c6:44:55:84:
da:ee:fd:a0:36:0f:be:bb:3d:78:d6:0f:b8:5c:f9:
a4:47:cd:41:6e:79:43:be:5c:28:9a:f4:2d:0b:15:
91:89:72:12:48:6d:ad:15:ba:a6:e9:b5:39:80:e2:
fd:3d:a2:46:a6:2e:3f:d0:eb:79:e5:29:8d:7c:4b:
2c:a5:5d:85:36:fa:6f:f2:b9:01:ab:85:8d:1b:82:
7e:10:0a:fc:d5:35:77:e6:db:ba:9d:d8:28:85:90:
4f:86:08:a4:b5:d5:09:9b:3a:37:6d:d6:ab:0e:79:
0e:72:3b:c3:c2:15:e8:e7:83:0b:7b:d0:85:8f:43:
01:1a:21:e6:13:be:8f:16:4b:7d:01:0d:9b:3e:10:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:75:54:BF:DA:C4:A3:10:32:D2:C8:4B:8E:2A:30:EC:A9:27:BE
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:beef::/48
Signature Algorithm: sha256WithRSAEncryption
9b:0a:8f:19:18:2e:c5:6f:f0:ea:78:6e:dd:ab:eb:11:58:f9:
af:d9:c4:9a:2d:32:d1:9e:0d:da:fc:7d:a5:93:f8:25:d0:c3:
3a:bd:df:31:e5:c6:39:b7:5f:19:d7:0f:18:85:e8:c6:16:0a:
0e:41:91:04:55:3c:c3:be:85:f2:2e:5e:ad:77:0b:34:ec:cd:
40:89:23:38:fe:f9:68:45:dc:69:b7:3e:59:93:03:10:5c:75:
f3:83:6c:66:6c:c4:e0:d2:93:00:4a:b2:2e:2d:28:08:f2:83:
09:96:4d:5c:40:36:59:21:de:5f:08:24:6a:28:c8:96:b4:76:
14:5d:ff:e9:06:2c:68:f9:2f:3d:21:55:13:3f:50:d2:d3:1f:
20:4f:d2:1a:09:fe:b3:e4:58:75:fd:61:dc:21:c5:bf:43:28:
12:e0:b5:28:dd:0c:e0:28:51:b5:50:d6:97:6d:ac:fd:8d:b5:
b2:29:60:6a:22:54:54:3f:93:a6:0b:84:a0:ee:aa:ae:cd:3a:
27:d1:19:69:20:06:24:31:40:bb:7e:59:b0:e7:79:eb:fc:d6:
64:81:1f:0c:41:51:6f:e5:15:7c:bb:ca:15:d0:ba:95:f0:71:
a6:97:14:fb:0f:92:d5:a8:7b:6e:df:a5:06:30:6e:ae:f1:d9:
49:4e:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org