Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3438203d3e203237343938.roa
File: 326131333a646638303a316665663a3a2f34382d3438203d3e203237343938.roa (raw, json)
Hash identifier: h3aEjlmgHbjlrWtkcVqACc4jxDvNZqKieGeGpZ+E65c=
Subject key identifier: B8:5B:28:62:F9:21:C0:68:0A:A6:C0:B0:4A:B1:22:83:19:78:6A:71
Certificate issuer: /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial: 56F34FCB6F3F51B6B6DBA6CE1CD522AC43891C3D
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3438203d3e203237343938.roa
Signing time: Sun 17 Mar 2024 13:17:54 +0000
ROA not before: Sun 17 Mar 2024 13:12:54 +0000
ROA not after: Sun 16 Mar 2025 13:17:54 +0000
asID: 27498
IP address blocks: 2a13:df80:1fef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f3:4f:cb:6f:3f:51:b6:b6:db:a6:ce:1c:d5:22:ac:43:89:1c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Validity
Not Before: Mar 17 13:12:54 2024 GMT
Not After : Mar 16 13:17:54 2025 GMT
Subject: CN=B85B2862F921C0680AA6C0B04AB1228319786A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:74:dd:7b:84:88:37:3a:7b:b1:c4:09:52:
f3:bb:9f:c7:6a:57:25:b1:36:39:ca:47:86:04:c0:
ce:51:34:42:06:d7:31:19:e0:7b:b6:f8:4e:87:35:
18:f9:cf:12:6f:dc:d1:f4:f2:a8:ed:31:a9:3a:3d:
a1:f9:d6:3e:c6:c6:57:3d:70:04:4e:03:24:4f:f0:
b2:ba:aa:7d:e9:dc:0b:45:63:e0:f6:b9:2a:c6:8f:
9d:d6:74:c7:66:d4:01:1e:eb:aa:65:2b:d3:7a:ba:
16:16:3a:d2:1d:85:45:0e:84:6c:b4:06:ff:eb:2c:
5b:b6:02:1b:41:b0:9c:b2:87:6e:26:94:22:51:b5:
18:cb:34:73:16:24:ab:ee:71:0b:5f:cf:fb:29:79:
64:47:6a:b6:d9:08:13:d0:3f:0c:17:32:99:cb:0e:
d3:9e:e2:f4:e9:76:04:15:84:44:25:1f:c6:cf:af:
8b:dd:3c:57:c6:18:08:46:8d:34:0b:7e:49:54:58:
7f:bf:9a:b2:13:a7:48:d7:3e:2e:be:0d:48:f5:19:
b3:ea:21:d5:8b:0f:7c:44:17:cb:3e:d2:f2:8b:8d:
c9:64:0f:99:67:6d:a3:eb:65:9b:64:a7:22:3b:a4:
fd:59:b5:70:c1:8e:45:b8:7d:17:5a:fe:91:1a:e1:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:28:62:F9:21:C0:68:0A:A6:C0:B0:4A:B1:22:83:19:78:6A:71
X509v3 Authority Key Identifier:
keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316665663a3a2f34382d3438203d3e203237343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1fef::/48
Signature Algorithm: sha256WithRSAEncryption
41:92:ff:bd:a0:37:7d:ac:1a:f9:1b:4f:9b:c1:c9:a8:4b:6a:
3a:9b:36:eb:ec:77:58:2e:69:cf:12:5f:8c:9f:14:8f:0e:c2:
09:fe:12:cd:dc:23:18:d2:dd:d9:e0:e2:8d:ee:24:28:65:2d:
40:66:56:11:a5:bf:b3:48:5f:dd:ad:bd:eb:cc:9b:86:97:1f:
3e:2b:85:f7:30:6d:ff:9a:12:5e:68:6f:e4:ec:bf:65:67:c2:
40:1f:03:fa:a9:63:d0:c1:a7:43:10:25:da:9e:c7:f4:bd:25:
ce:ea:eb:9a:ee:e1:81:c8:5e:64:27:4e:ec:ee:46:63:73:16:
a7:cd:45:bd:12:22:19:71:71:2e:ee:79:ca:9e:5d:75:3e:b4:
c1:c9:d3:64:f1:cc:5f:a7:b8:bd:2c:ad:b7:11:d4:ed:95:da:
b2:74:b7:9e:ac:50:2e:67:ee:13:03:bc:08:22:65:8a:17:f6:
9b:76:57:60:09:3d:01:a9:4d:a6:ed:ec:25:9a:03:33:7c:a7:
73:b4:80:da:42:9d:69:09:7f:89:6c:19:ba:18:c3:84:df:ef:
14:47:08:53:2e:cb:26:05:76:d2:58:59:be:3b:93:9e:61:18:
27:d2:e6:f0:fa:a0:6e:0a:7e:45:63:db:54:6d:e9:ea:3f:a0:
58:06:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org