Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
File: 326131333a646638373a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier: 209wrJQ6zKjk/N8n+nHABVFB7nHl9tgHUzJ2/ibpnmY=
Subject key identifier: 01:04:09:3E:DC:3C:EA:A6:32:67:86:D7:B7:CF:F1:E6:75:4D:E1:D1
Certificate issuer: /CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Certificate serial: 20E26ADDFBD041118FFE436CDBB2FF57B66AAB22
Authority key identifier: D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
Signing time: Wed 19 Apr 2023 00:19:22 +0000
ROA not before: Wed 19 Apr 2023 00:14:22 +0000
ROA not after: Wed 17 Apr 2024 00:19:22 +0000
asID: 57870
IP address blocks: 2a13:df87::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e2:6a:dd:fb:d0:41:11:8f:fe:43:6c:db:b2:ff:57:b6:6a:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7FA5C40F42A93673A8BDE69A056365EA657104F
Validity
Not Before: Apr 19 00:14:22 2023 GMT
Not After : Apr 17 00:19:22 2024 GMT
Subject: CN=0104093EDC3CEAA6326786D7B7CFF1E6754DE1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:6f:dc:81:e1:46:ef:fe:39:db:57:13:55:
e4:2a:30:b6:a2:ee:67:ca:cc:5c:83:2e:2d:55:85:
c0:4d:d7:a8:92:7e:3f:ef:05:b0:7c:8a:dd:e0:eb:
8b:f5:d3:e2:d4:96:c9:be:c3:9f:89:ac:0b:fa:2c:
9c:5a:69:10:db:b5:26:b9:3a:a0:67:31:32:b8:29:
0b:bc:f6:3e:5d:86:51:50:88:59:5f:b3:e2:4f:0d:
4f:41:fd:f6:82:e3:66:0a:cd:d6:b5:f2:c8:51:10:
9a:3f:71:4b:a0:fa:c3:93:55:af:c4:07:e2:6f:50:
d7:75:8b:84:4a:70:ca:b4:00:6d:26:c8:92:0a:5a:
36:51:17:cf:99:c0:b9:93:be:09:82:1b:29:ba:2a:
0c:20:b1:3d:ed:e6:c8:1b:05:bd:9b:05:ba:d2:95:
86:58:6c:bd:51:fb:f5:6b:02:ee:0e:f6:7f:be:f6:
0e:fa:69:36:af:4b:a4:24:3b:8f:07:7e:9f:fe:e4:
f8:af:51:08:79:9d:b1:d4:36:e5:44:79:d8:36:77:
b9:f5:77:76:1e:21:18:e9:35:aa:62:a0:a7:dd:cf:
6b:d5:0c:38:07:eb:52:39:fc:a8:51:10:ab:76:0b:
b5:fd:32:a3:a9:55:b2:59:f9:05:7d:57:a2:1a:73:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:09:3E:DC:3C:EA:A6:32:67:86:D7:B7:CF:F1:E6:75:4D:E1:D1
X509v3 Authority Key Identifier:
keyid:D7:FA:5C:40:F4:2A:93:67:3A:8B:DE:69:A0:56:36:5E:A6:57:10:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/D7FA5C40F42A93673A8BDE69A056365EA657104F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/D7FA5C40F42A93673A8BDE69A056365EA657104F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87::/32
Signature Algorithm: sha256WithRSAEncryption
37:21:b6:72:52:28:69:96:c6:63:72:1f:13:65:11:f1:0c:93:
c1:fe:39:d0:08:25:7f:91:af:16:c6:2c:5e:3d:5e:7b:12:22:
60:97:34:c5:d6:34:57:1e:eb:e0:42:78:bf:ef:db:67:12:4d:
8d:18:6f:aa:b4:3e:b8:6f:3a:0a:8b:13:91:04:03:45:df:db:
bd:b1:b5:e6:0e:71:ec:1e:9d:92:34:e8:04:ce:e8:a0:d6:b3:
24:75:68:2e:73:d9:45:9d:df:2f:d1:3c:dc:e8:71:59:28:d8:
38:48:44:51:cf:d1:07:0e:26:23:9d:75:31:2c:a1:88:91:e2:
f2:90:39:2a:e5:b3:80:e6:67:f8:f1:ef:e9:c9:fa:61:40:e1:
6c:25:31:72:95:30:e1:45:2a:7e:3b:9e:db:7e:22:48:07:e1:
1a:73:67:35:2b:41:40:b8:5b:02:e6:3c:7d:e2:e4:bc:f5:06:
64:1a:9b:19:29:6e:36:ab:b4:13:74:05:51:e0:66:1b:5f:60:
9c:29:f1:fe:1a:cb:ca:7c:2c:9e:22:e7:66:cd:20:b8:f1:4e:
6b:17:73:90:75:cb:67:e2:cc:34:b9:8b:76:f2:6e:59:33:a1:
66:c6:a9:cc:6b:3c:b0:75:da:ab:9a:da:19:2c:23:d3:6c:a4:
37:ad:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:20 2025 by rpki-client