Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: E5QwVY3/hQMZj1uYTkVasC9Y6/ZOaSaoJYeV8hOoexc=
Subject key identifier: 6E:96:41:C9:A4:6A:35:A4:52:DD:C4:28:EA:CF:78:BB:1C:D2:5D:5E
Certificate issuer: /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial: 5EFA36DFB57A01F6F3A514D7557EA81A6C49AB1B
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 10:57:29 +0000
ROA not before: Sun 26 Nov 2023 10:52:29 +0000
ROA not after: Sun 24 Nov 2024 10:57:29 +0000
asID: 47272
IP address blocks: 2a11:29c0:9001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:36:df:b5:7a:01:f6:f3:a5:14:d7:55:7e:a8:1a:6c:49:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Validity
Not Before: Nov 26 10:52:29 2023 GMT
Not After : Nov 24 10:57:29 2024 GMT
Subject: CN=6E9641C9A46A35A452DDC428EACF78BB1CD25D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:ff:3c:43:ae:9b:c5:5d:39:5c:e2:a3:52:
29:99:c9:03:42:8a:5a:d1:dd:c5:01:ea:1c:cf:8f:
f5:cc:4a:ab:e7:aa:80:b5:e9:76:75:7e:84:05:2d:
40:1e:26:1b:b3:c9:76:26:7a:fd:5c:a0:5b:e4:ff:
91:89:5b:c0:f2:16:10:6f:59:1b:3d:3d:c3:6a:d3:
cc:cb:15:b4:f9:9a:9a:3e:b8:a5:bd:6e:3b:83:9a:
32:59:3b:f5:99:ed:29:aa:ec:ab:38:fc:f6:7b:25:
e4:20:c4:57:e9:4e:a8:1f:a0:43:f9:6e:f5:c0:1a:
2b:9d:dd:ca:86:b2:d4:19:bc:80:94:ba:ea:5d:17:
c5:e1:80:12:f6:cc:1e:cf:10:07:c8:e6:ae:cd:df:
ab:64:d9:63:98:14:f4:9d:8a:6e:58:6f:d3:a8:80:
7c:ac:87:13:46:b3:6d:bc:04:ca:b0:10:fb:75:20:
2e:e9:c3:83:77:a9:0c:eb:ad:e8:e4:8d:78:4c:08:
47:de:91:12:cd:d0:e1:ec:f9:b7:5f:32:1a:1c:34:
ee:24:4a:52:5b:d5:5d:ab:df:7d:70:4c:0e:7d:15:
55:05:83:dd:cd:00:ab:55:da:5c:35:5e:08:12:25:
e3:6d:b3:72:7f:5f:67:84:f9:7b:6b:bf:99:51:55:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:41:C9:A4:6A:35:A4:52:DD:C4:28:EA:CF:78:BB:1C:D2:5D:5E
X509v3 Authority Key Identifier:
keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9001::/48
Signature Algorithm: sha256WithRSAEncryption
21:48:3c:47:41:ce:ac:bc:90:67:b4:70:89:13:ef:85:5c:21:
37:19:93:39:f2:c2:cc:56:6c:38:90:9b:5c:aa:81:82:24:7f:
76:c3:ac:46:42:45:28:14:4e:cf:32:6e:ed:5a:5b:aa:82:10:
2d:aa:43:aa:05:ef:c4:c1:c0:f6:b8:e7:07:63:8b:06:17:46:
5f:c4:a3:83:1c:72:ce:3c:d7:29:5c:0e:a0:5d:25:6b:d2:5e:
fd:90:7e:ed:a8:d4:47:ef:4d:af:5c:d9:b7:c5:50:33:61:97:
8c:cf:9e:50:f4:b8:ee:25:d0:c0:4d:a3:f0:34:c1:3a:7e:3e:
11:f2:72:af:8c:17:33:f9:8a:c7:e8:e3:79:06:4e:10:a4:c0:
ff:b4:cc:f2:cb:0f:a8:14:75:bc:43:b4:16:ce:ef:09:21:fa:
f9:ca:b1:d2:2b:4a:3d:33:be:26:7c:88:ed:2d:72:b4:ee:23:
c4:40:2c:a7:10:c8:fa:63:b5:d1:32:e3:56:43:6a:1e:82:59:
97:6c:ac:40:d0:84:2c:40:02:0f:6b:fc:75:e2:80:10:07:64:
28:66:ba:05:91:6f:d0:0e:7c:2d:4d:48:5a:41:64:1a:0e:6d:
a7:89:c6:cc:ee:0e:7d:41:89:a3:d3:6c:1d:77:5a:5c:d2:30:
d3:09:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:09:20 2025 by rpki-client