Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
File: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (raw, json)
Hash identifier: pJ8S3eh9hqlIFxOt/KfTAPcTTesNrndXwXDB3fYR2PM=
Subject key identifier: 49:95:05:56:CD:2B:BB:74:F3:EF:20:32:E3:BB:AF:C2:A1:FE:92:88
Certificate issuer: /CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Certificate serial: 5F44AA6C805ED2DBB3C40445335C7B719FE7EAE9
Authority key identifier: B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
Signing time: Tue 03 Dec 2024 14:07:35 +0000
ROA not before: Tue 03 Dec 2024 14:02:35 +0000
ROA not after: Tue 02 Dec 2025 14:07:35 +0000
asID: 214510
IP address blocks: 2a0a:6044:7d22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:44:aa:6c:80:5e:d2:db:b3:c4:04:45:33:5c:7b:71:9f:e7:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Validity
Not Before: Dec 3 14:02:35 2024 GMT
Not After : Dec 2 14:07:35 2025 GMT
Subject: CN=49950556CD2BBB74F3EF2032E3BBAFC2A1FE9288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:84:fd:50:ec:1a:eb:d0:90:c0:a7:5f:78:
68:de:af:1d:49:6b:6a:7a:5c:9b:48:76:56:f2:3d:
58:94:4a:1b:50:95:fd:8e:7b:bb:22:49:e3:5b:cf:
ff:84:92:f9:b3:74:fe:1a:41:75:a4:20:ee:ad:79:
db:79:84:13:d5:3b:b5:64:f5:12:75:e5:62:df:81:
ba:f2:13:13:89:a6:2a:ff:2a:93:26:a9:d0:34:96:
0a:2d:35:c1:96:51:cb:dd:4a:f0:30:e7:79:15:18:
0a:43:4c:8f:a5:c4:e2:b3:1b:fb:4e:0e:4e:d9:4d:
91:aa:79:34:76:9f:ab:fe:af:f0:58:fc:06:ab:f7:
6c:bc:2e:84:13:29:86:35:27:cb:a9:15:8d:47:ab:
4f:12:54:2b:97:68:c6:a5:a9:8f:f6:0b:a6:59:06:
ee:87:93:02:51:ab:74:e5:60:44:8b:4a:44:0a:4d:
a3:62:fb:24:66:da:25:80:90:b6:c1:73:d6:f3:e9:
e1:1d:3a:f7:8e:8e:71:ef:17:9e:eb:d0:85:2d:5e:
8f:c3:9a:e3:d5:5d:f4:2f:2e:6d:2b:d5:2d:57:10:
4a:4d:3a:bd:b1:fb:49:87:c6:cf:ea:1b:36:22:b5:
84:c4:ca:df:5f:a0:f9:70:64:7f:4f:49:02:c2:8a:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:05:56:CD:2B:BB:74:F3:EF:20:32:E3:BB:AF:C2:A1:FE:92:88
X509v3 Authority Key Identifier:
keyid:B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7d22::/48
Signature Algorithm: sha256WithRSAEncryption
99:c9:0b:1c:9d:69:c1:19:bf:cb:04:9a:e2:52:9f:20:2d:c3:
5f:4e:67:6b:5b:03:40:f5:51:51:8c:84:10:db:98:b7:54:41:
82:2c:6e:37:29:59:30:28:a3:51:d0:bb:cb:15:c1:81:dc:6b:
d0:22:25:2b:13:d7:b4:b5:1c:22:8a:ce:3b:40:31:0a:0d:1f:
2c:4c:6d:77:fb:c8:5b:f8:8d:9d:7b:e6:27:34:ff:9e:7b:02:
b7:e3:2e:7f:59:d3:a2:84:11:56:4c:eb:9e:0e:64:92:f5:de:
f5:95:bd:4c:40:a3:03:3c:80:9b:65:7a:a7:92:da:b6:72:6c:
d5:d3:5b:f9:01:f7:4c:5a:62:9e:95:b1:9f:91:ff:8a:71:42:
c1:6d:be:17:d5:82:06:9c:99:82:d1:81:d4:3d:60:5e:87:5e:
48:da:ff:8d:a7:ee:05:ca:c7:87:46:49:0a:d4:96:99:a6:4b:
68:e2:2c:17:40:fd:fe:b5:16:2c:50:7b:11:51:2c:e3:6a:84:
98:d3:d0:7f:73:93:af:00:73:95:da:6f:0a:0a:55:b7:9a:c0:
6a:38:07:09:61:cd:e9:c0:ba:50:70:d1:f7:00:28:eb:51:69:
26:a8:4b:d3:3f:2a:48:f0:ef:a4:fa:e1:4a:4d:05:48:19:90:
f5:2c:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 06:22:42 2025 by rpki-client