Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
File: 326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier: 78ILiliL9cuOA6ic1AFnzANKR6py/Q86j24g8zXYUUo=
Subject key identifier: D7:AC:4A:54:C5:3B:E5:FB:5D:58:77:B4:B9:3F:50:37:E1:61:00:F3
Certificate issuer: /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Certificate serial: 64742571BEBE4567876B5CF29A78C1723B21B4AD
Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
Signing time: Mon 19 Feb 2024 13:25:27 +0000
ROA not before: Mon 19 Feb 2024 13:20:27 +0000
ROA not after: Mon 17 Feb 2025 13:25:27 +0000
asID: 210667
IP address blocks: 2a07:54c0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:74:25:71:be:be:45:67:87:6b:5c:f2:9a:78:c1:72:3b:21:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Validity
Not Before: Feb 19 13:20:27 2024 GMT
Not After : Feb 17 13:25:27 2025 GMT
Subject: CN=D7AC4A54C53BE5FB5D5877B4B93F5037E16100F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:da:59:25:57:75:9f:5d:2b:70:ec:d1:e7:
2b:52:48:04:50:30:57:04:ed:82:ee:5d:07:52:73:
df:b3:05:21:4d:b2:43:e0:e3:d6:ee:2d:5e:90:ac:
1d:5a:f6:21:ba:21:a8:3f:9e:a3:8f:ac:84:e7:5f:
75:6c:85:26:6c:14:64:6e:cf:02:da:e1:a8:bd:53:
d8:e2:9a:c1:1a:0d:8a:1b:6f:f0:ef:06:ef:8c:01:
5a:67:ec:2d:72:e5:86:13:46:18:93:e4:d8:dd:36:
ae:1f:6e:f9:11:f6:ad:d9:5e:b7:b8:62:c8:a7:08:
68:d8:81:0d:bb:f1:61:a9:21:43:f2:37:2a:2e:1b:
18:48:ec:ac:32:db:ed:7d:a4:3f:fc:f5:bb:a4:7e:
8f:5a:8f:8d:dc:14:47:df:63:dc:79:76:bf:06:d5:
d9:bb:11:d9:f8:55:91:d3:05:a3:fd:e7:05:50:15:
1b:bc:4a:a0:be:8d:8d:fb:cd:f1:fa:96:7e:e6:05:
39:45:d3:03:84:6a:6d:32:f5:86:17:b0:ae:c9:8d:
8f:d5:1e:43:08:32:14:d4:8c:c4:9e:ab:b9:5b:93:
29:8b:18:56:a1:cf:4e:e8:f7:4b:fe:fe:78:37:4f:
06:ad:75:56:1c:ab:a4:18:4e:fd:45:a0:43:9b:de:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:4A:54:C5:3B:E5:FB:5D:58:77:B4:B9:3F:50:37:E1:61:00:F3
X509v3 Authority Key Identifier:
keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20323130363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3a:b0:aa:64:a7:3a:e2:74:e9:fb:7f:94:fd:0a:7f:d2:78:0c:
66:2e:de:0a:70:3c:6f:9c:30:0d:0b:84:3b:00:b7:aa:9b:b7:
24:e3:c9:6a:b1:f2:59:12:ce:bb:c6:73:ed:a9:d1:48:19:8c:
01:fd:bc:6a:43:9e:e0:83:83:7e:83:e8:20:ea:04:7b:e2:aa:
c0:71:08:fb:bf:58:37:b8:a3:cc:8f:4a:c1:ad:f8:24:8b:0d:
d1:18:67:03:50:b6:14:33:0b:66:bb:14:5c:9a:ea:fc:d1:19:
ab:93:ab:25:aa:14:e2:d4:7e:32:06:1d:24:7e:d5:c4:24:fa:
ee:86:58:44:f1:98:1e:4d:36:b4:57:81:59:7c:91:a7:39:e2:
3b:f0:16:c9:04:56:ec:a8:01:eb:e2:40:65:f7:aa:b2:8d:db:
c8:30:86:4c:d1:b9:2a:0d:7e:7e:e9:3e:ad:35:7e:cf:77:ab:
cc:e4:91:bd:ad:7b:38:6a:36:97:2f:32:3a:35:16:8c:84:a4:
81:12:ef:96:c0:ec:18:78:0d:58:e6:6c:af:02:e5:e5:04:e4:
67:bc:81:74:fd:8c:26:f7:21:bc:62:a7:9e:b8:7a:22:91:71:
91:e1:e2:b0:65:46:15:8d:ac:51:fc:b5:6e:dd:87:c5:a8:f6:
48:f8:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:03 2025 by rpki-client