Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638303a3a2f32392d3438203d3e203537383730.roa
File: 326130363a396638303a3a2f32392d3438203d3e203537383730.roa (raw, json)
Hash identifier: T7L+toZYQZS1SF/QXIvjuEZpG5qF16eO75uJaFC/XFI=
Subject key identifier: 65:D3:FD:5B:07:8A:CD:64:4B:24:0D:25:A2:41:04:31:99:3E:9B:7F
Certificate issuer: /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial: 1810EC810305E67014C23DA034482A02E2278318
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638303a3a2f32392d3438203d3e203537383730.roa
Signing time: Sat 06 May 2023 13:51:06 +0000
ROA not before: Sat 06 May 2023 13:46:06 +0000
ROA not after: Sat 04 May 2024 13:51:06 +0000
asID: 57870
IP address blocks: 2a06:9f80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:10:ec:81:03:05:e6:70:14:c2:3d:a0:34:48:2a:02:e2:27:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Validity
Not Before: May 6 13:46:06 2023 GMT
Not After : May 4 13:51:06 2024 GMT
Subject: CN=65D3FD5B078ACD644B240D25A2410431993E9B7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:58:7c:98:62:09:a7:23:22:eb:f0:81:eb:5c:
1e:3f:5a:2d:b3:c1:ef:b6:d2:33:2f:d1:09:5f:b6:
d3:65:d5:22:7c:ec:bc:73:04:b6:fa:2b:6f:e3:7c:
28:ec:2b:27:1a:bf:8a:cc:7e:39:46:87:b4:13:b9:
17:20:cd:65:28:7a:3d:5a:df:2e:c0:10:38:22:25:
25:63:12:a3:aa:36:45:6c:d6:2f:7a:1f:a4:e6:42:
85:7e:ea:7a:ff:64:fb:3c:83:7f:6a:ec:ad:e3:60:
82:31:84:2b:5b:72:9f:67:f7:b8:6e:ed:1a:60:24:
a1:26:ad:a9:b3:a4:5f:0f:bf:83:23:f4:79:d1:61:
78:1a:9b:cb:a2:7c:c4:96:df:a4:0c:e2:b6:6e:f5:
ea:5c:68:be:19:2d:f2:c6:bc:fd:f9:5b:5f:1b:d0:
41:4f:22:03:40:15:ba:66:7b:c5:90:7c:8e:93:93:
7f:c0:26:39:d8:a5:a4:01:82:5d:fc:40:6a:0b:b6:
57:c4:49:b5:74:eb:5d:62:39:e2:8c:34:9b:27:90:
ff:60:da:d9:6d:9f:5e:86:35:7c:e5:f0:e8:07:e2:
58:90:78:e6:30:e9:6a:51:23:6d:ae:8c:81:33:e8:
47:96:51:f9:18:07:13:8c:51:d0:a7:96:c9:36:2a:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:FD:5B:07:8A:CD:64:4B:24:0D:25:A2:41:04:31:99:3E:9B:7F
X509v3 Authority Key Identifier:
keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638303a3a2f32392d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
9d:63:19:59:66:54:c3:72:fe:fe:c7:66:b1:1b:b0:d8:54:c7:
f7:57:74:b3:71:7f:19:f1:4c:88:09:5b:32:bd:c3:4d:a0:a1:
08:f5:08:d1:aa:1c:e9:54:23:3e:3f:d0:fa:c6:ef:4f:b5:3a:
e7:21:0e:4e:8b:bc:a2:2c:a0:2c:6f:a2:63:f7:12:5c:03:3d:
77:ac:bb:91:a7:b8:ab:ee:b6:9d:bb:a5:a6:7c:53:f0:ad:3c:
35:e2:3e:af:d5:bc:54:09:a3:5e:d5:64:b7:8a:0c:26:86:9e:
d7:f0:1f:0e:9f:8d:44:07:96:eb:b0:40:46:af:90:eb:e3:68:
34:5d:95:21:92:9f:26:65:5e:57:bf:be:a6:5c:d9:c9:aa:74:
82:bf:4a:10:bc:39:83:7c:c2:a1:df:6b:a3:77:04:4b:5b:08:
f3:9a:44:05:be:47:94:8c:6d:6c:20:fa:3c:a6:13:e0:a7:49:
9f:58:99:a4:89:01:09:41:b5:7c:43:ac:b4:db:92:af:8a:a6:
7d:09:e8:19:ba:9a:b1:78:bd:be:af:91:31:04:c3:75:d6:d6:
17:fc:43:85:b6:c0:33:d6:79:a4:37:70:fc:96:c3:ce:d3:f5:
65:44:19:aa:5e:42:64:c2:35:d9:a9:14:b7:51:c9:db:2b:5c:
c6:b0:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:07 2025 by rpki-client