Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa
File: 326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier: aI+a8KzyTshLwhW4aOZd8kWBpXb349vRriMcyqWfEZQ=
Subject key identifier: AE:C9:FD:07:3C:5E:1A:77:09:86:9A:06:44:E9:2F:A6:1A:B8:2E:53
Certificate issuer: /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial: 644547151B983E0A72767CED78AACBCD7426CDBF
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa
Signing time: Sun 17 Mar 2024 12:20:42 +0000
ROA not before: Sun 17 Mar 2024 12:15:42 +0000
ROA not after: Sun 16 Mar 2025 12:20:42 +0000
asID: 51692
IP address blocks: 2a13:df80:1f15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:45:47:15:1b:98:3e:0a:72:76:7c:ed:78:aa:cb:cd:74:26:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Validity
Not Before: Mar 17 12:15:42 2024 GMT
Not After : Mar 16 12:20:42 2025 GMT
Subject: CN=AEC9FD073C5E1A7709869A0644E92FA61AB82E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:10:1d:f0:2d:7e:4f:d6:a4:fa:e4:d9:ef:
23:fb:b4:6b:80:5a:c2:50:cd:c6:fe:a8:f3:c3:ad:
17:bf:ae:d4:48:cf:f8:be:17:37:de:63:4f:fa:23:
b8:1d:2f:97:cb:65:59:fc:f5:6f:1d:5a:c9:14:82:
4b:58:80:88:ba:eb:3c:b4:72:4e:66:ff:93:86:73:
d4:a0:a4:09:aa:e6:dd:1b:83:02:85:bb:c0:03:6f:
28:48:f5:7b:91:9e:87:05:d8:f1:c4:c8:12:e4:3e:
1c:45:16:47:35:1a:36:b7:f4:8f:90:87:b6:45:bc:
62:88:8f:ee:c9:5b:fa:f5:5b:af:da:d1:bc:69:71:
76:2e:1c:8e:ae:27:f3:0e:03:90:6b:9e:29:e9:49:
49:16:a1:0d:a3:07:24:c1:94:02:bf:da:4d:b0:65:
7f:54:7e:22:e2:f8:d8:17:0e:87:dd:4d:44:6c:ed:
06:4c:12:6b:b7:af:4f:cd:da:26:8b:80:5f:9e:29:
7e:bc:1a:f1:aa:69:8d:39:66:c9:f0:01:ea:1f:69:
63:a8:6c:eb:c7:8a:14:9d:c0:c4:5f:34:07:79:48:
b0:c8:1c:7d:91:79:17:8f:33:12:32:0f:6d:a0:2b:
4c:6d:c0:f6:68:8a:2d:4d:8c:fe:55:dd:ba:72:0a:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:FD:07:3C:5E:1A:77:09:86:9A:06:44:E9:2F:A6:1A:B8:2E:53
X509v3 Authority Key Identifier:
keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631353a3a2f34382d3438203d3e203531363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1f15::/48
Signature Algorithm: sha256WithRSAEncryption
4e:2d:b0:23:5a:fb:1b:fb:24:55:c8:82:ff:b1:d3:71:e4:56:
99:73:0f:4d:55:9d:6a:60:0c:db:a8:73:33:9b:62:a6:e4:88:
fb:b0:e4:8a:97:ab:08:4a:41:e2:d9:15:c4:ca:76:78:9e:c8:
4b:27:fc:dd:d3:c4:87:bb:66:85:5e:ef:d0:85:01:09:11:c6:
97:86:0c:3c:00:8a:11:ba:87:06:4e:4f:30:4d:6a:cb:22:4b:
92:d9:9f:df:cc:4f:7a:4f:e4:a6:4b:bb:27:f1:44:2c:b3:f7:
32:99:a5:b1:f5:70:45:cd:96:8b:fc:eb:e7:b1:7e:f7:e0:42:
4e:8f:63:18:8e:6c:30:bc:d5:5b:62:0b:da:8e:76:a5:c6:6a:
75:32:f9:fe:bf:7b:5e:43:df:f8:09:44:d7:d9:09:d3:aa:e2:
ea:de:a7:86:fb:70:ee:c7:6b:21:7f:cb:a1:9a:a4:57:d1:eb:
ec:23:f3:54:20:1b:c9:72:74:04:fa:f2:f6:23:c2:92:7d:aa:
2c:b3:dd:a1:0e:17:06:f8:bc:54:fd:d3:ca:29:e7:fa:7b:28:
46:9c:b0:ac:a1:4c:2f:b6:59:26:e6:32:0d:24:68:b1:12:a0:
b6:0e:54:07:48:68:0a:e5:d8:29:71:57:5b:f1:f3:c5:41:47:
88:77:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:43 2025 by rpki-client