Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa
File: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (raw, json)
Hash identifier: iJJGlQENumm+DGgHblI6Gp26BMPPZLJuQpiMu7XNYDA=
Subject key identifier: 1E:40:AF:A6:E4:DA:8D:88:C5:5E:7D:38:DB:BE:6D:7F:C7:F3:F3:7E
Certificate issuer: /CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Certificate serial: 5EB9745B41A20D77939EBD23489660D577859F7E
Authority key identifier: B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa
Signing time: Tue 03 Dec 2024 14:07:35 +0000
ROA not before: Tue 03 Dec 2024 14:02:35 +0000
ROA not after: Tue 02 Dec 2025 14:07:35 +0000
asID: 214510
IP address blocks: 2a0a:6044:7d20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b9:74:5b:41:a2:0d:77:93:9e:bd:23:48:96:60:d5:77:85:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Validity
Not Before: Dec 3 14:02:35 2024 GMT
Not After : Dec 2 14:07:35 2025 GMT
Subject: CN=1E40AFA6E4DA8D88C55E7D38DBBE6D7FC7F3F37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:c3:a2:b8:78:4e:b2:8d:38:82:b4:73:7b:
4c:45:36:0b:4c:eb:75:b7:61:aa:70:ee:dc:46:96:
7b:81:3a:ca:f0:f2:43:97:d0:2e:0d:1b:d6:bd:a0:
18:fd:58:7f:ad:35:0d:67:c9:e3:0c:73:c9:82:aa:
51:e3:9f:57:8a:2b:34:39:82:de:72:3a:ec:67:07:
68:46:0f:2d:d3:bd:03:07:b6:96:06:11:48:a9:30:
75:e0:20:51:4a:d2:b0:7c:99:e2:79:81:1e:fd:67:
5b:56:6c:e9:57:cc:80:4e:d3:2c:3c:51:7a:b7:09:
ee:07:93:98:9a:ee:3f:c5:48:2d:a3:93:a9:50:a8:
34:a4:03:ff:1d:4b:0c:e7:8e:20:59:c6:47:23:18:
12:77:0a:4f:3f:9e:77:98:cf:3a:d1:6e:6b:3a:64:
87:4c:bf:70:18:40:05:59:f0:e8:d0:11:2c:0e:f4:
5e:ef:5f:51:a1:f9:29:54:0d:a0:47:e7:7f:17:ff:
f2:6e:ea:4d:f4:2b:a7:d9:c2:1c:8c:0e:59:f3:90:
cb:84:69:36:4e:df:6d:97:ec:7f:42:25:ba:ad:a9:
94:6d:69:6d:5f:d7:85:d8:51:49:2f:a2:99:d7:c0:
f3:7d:19:8d:ba:2d:8f:21:8d:68:c7:d5:a3:b4:f5:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:AF:A6:E4:DA:8D:88:C5:5E:7D:38:DB:BE:6D:7F:C7:F3:F3:7E
X509v3 Authority Key Identifier:
keyid:B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7d20::/48
Signature Algorithm: sha256WithRSAEncryption
20:ed:b4:ef:53:5b:04:b7:82:41:d6:09:2f:9c:ae:d9:88:63:
a9:09:e2:d2:d8:5a:1b:e2:9d:35:c2:a8:27:fd:dc:24:8f:ae:
fb:e2:e5:a8:bc:26:14:6c:06:1b:17:58:07:60:8b:17:a6:7a:
8e:7e:bf:6d:fb:10:b7:19:78:a2:b8:ba:67:3f:a9:55:f6:83:
10:8c:2c:47:71:97:46:34:4d:60:94:b9:49:7d:d3:80:37:c3:
b1:e5:8f:26:a1:d6:1d:f9:21:13:76:06:64:dc:f9:5a:c3:bd:
fe:b5:9e:e3:88:45:f3:4f:2d:96:9f:15:10:4e:df:7b:d6:3f:
84:8e:28:90:ac:8b:55:96:06:c4:ab:3a:ff:ad:cd:60:25:33:
4d:88:ec:72:6c:02:88:ca:90:1e:5a:84:52:1d:de:15:68:e5:
c4:70:f1:e0:08:26:0c:3f:15:f1:bf:be:4f:21:30:d0:e1:f9:
44:17:10:38:a7:88:e8:b8:ad:e7:81:d6:9f:f6:a2:ca:3a:28:
f4:53:e1:5d:68:03:3e:db:c1:89:22:7b:64:92:be:e1:e1:b9:
95:30:c7:89:61:8e:3d:d4:97:14:b3:63:6b:7c:e6:de:fb:fb:
52:d6:ba:dc:bc:45:d6:44:87:05:c7:4a:eb:c2:9f:39:f5:8c:
f7:8e:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 06:18:18 2025 by rpki-client