Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: Mk+kNFUgvSKxmKJfGvEcR5FfUvvZJ1hxooOwmpqfV14=
Subject key identifier: CD:B2:F7:82:A7:20:23:C8:39:3A:D4:C7:91:1C:95:60:37:4C:B3:F6
Certificate issuer: /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial: 34AA21A99F7756B051D402DA51F416A532D75776
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 10:57:30 +0000
ROA not before: Sun 26 Nov 2023 10:52:30 +0000
ROA not after: Sun 24 Nov 2024 10:57:30 +0000
asID: 47272
IP address blocks: 2a11:29c0:9003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:aa:21:a9:9f:77:56:b0:51:d4:02:da:51:f4:16:a5:32:d7:57:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Validity
Not Before: Nov 26 10:52:30 2023 GMT
Not After : Nov 24 10:57:30 2024 GMT
Subject: CN=CDB2F782A72023C8393AD4C7911C9560374CB3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:dd:3e:4b:d7:f6:36:17:b0:09:34:51:63:
e7:a7:37:ba:9d:3e:28:15:b7:74:61:0b:8b:35:27:
20:74:e2:58:34:7a:78:df:7f:06:a1:30:62:b3:3a:
de:07:18:b9:0f:51:f0:2d:e4:86:38:39:0f:06:4a:
cf:47:fc:c8:a7:e5:97:d1:3a:e3:c0:85:b0:c1:76:
fe:00:2b:af:b1:eb:6c:a9:63:e3:34:99:e6:70:f0:
14:c3:76:1b:25:2f:83:98:6a:f3:03:70:66:5c:62:
df:b3:49:58:25:53:6f:3c:28:2b:ab:5f:6d:a8:8e:
1a:cf:a4:52:fb:ad:52:7c:00:d3:2c:ed:0d:be:9b:
56:33:f4:54:df:18:ad:d0:dc:05:8a:ce:57:09:d4:
45:06:87:61:ef:c3:c9:ff:29:ca:58:95:bf:15:49:
b9:53:62:bc:6f:42:35:c3:87:64:a1:e7:d2:1f:95:
5e:17:a5:b2:e0:d0:3e:ce:ba:ff:0a:b6:0e:d3:8f:
f8:92:11:dc:92:62:50:e2:a4:77:33:88:25:a9:58:
82:87:93:14:74:46:0d:3a:6e:56:b6:46:71:3b:ed:
1d:e4:00:6a:17:29:98:d9:05:0a:55:4d:49:7c:78:
e8:5b:68:66:c4:af:90:19:3e:07:dc:b4:1b:45:f4:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:F7:82:A7:20:23:C8:39:3A:D4:C7:91:1C:95:60:37:4C:B3:F6
X509v3 Authority Key Identifier:
keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9003::/48
Signature Algorithm: sha256WithRSAEncryption
16:6c:7b:02:89:86:1b:17:27:8f:6c:b8:e6:a6:3f:47:3b:43:
29:b1:79:a2:f7:31:41:ef:d3:ea:93:1e:2d:56:66:47:e2:89:
3b:dc:7c:c1:68:9e:d0:e8:8c:e2:22:1e:04:ac:27:8d:ad:95:
10:3d:84:7a:b6:40:a7:32:60:6b:e6:3b:88:bf:49:3b:0b:8f:
e0:98:dc:aa:b8:c2:cc:4b:c2:76:28:24:da:9b:e5:36:5e:99:
4a:88:37:bb:ca:47:09:98:4e:ab:55:4f:45:14:93:dc:01:1f:
bd:7c:b5:fe:1e:24:85:c0:01:ff:56:50:26:22:2d:a2:ca:6f:
b8:75:e5:a3:2f:10:21:7d:75:05:3b:54:58:4d:b2:66:6a:13:
b1:ae:17:2f:3e:13:1c:1e:3e:67:35:2a:2d:e3:2c:f8:3f:59:
1c:1a:f6:90:f5:77:5f:07:f3:98:8e:79:a6:e3:95:8f:bb:5f:
84:7b:43:75:71:e6:1a:15:56:9b:22:ca:fd:27:d1:48:4d:eb:
6b:16:67:2b:f1:e4:1e:c2:8b:17:7a:41:ce:40:98:4d:9d:53:
a8:af:9d:ac:7a:fd:1b:77:75:a7:07:dc:de:1d:e6:5c:c6:d9:
90:ef:97:98:c1:a7:db:3d:e1:c7:43:2a:d0:c3:de:b8:5d:86:
e1:01:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:35 2025 by rpki-client