Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa
File: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (raw, json)
Hash identifier: qLEvjwfoEyhWj9DVGwn8qdOomSXN46J1BxYBuAy12X4=
Subject key identifier: FC:6C:25:5D:26:2B:E6:9E:3D:C8:57:E0:F9:03:B9:EC:F4:8E:4F:59
Certificate issuer: /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Certificate serial: 305593091CC25011768D56FA6EE5CC1DA76BE05C
Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa
Signing time: Sat 14 Dec 2024 11:44:38 +0000
ROA not before: Sat 14 Dec 2024 11:39:38 +0000
ROA not after: Sat 13 Dec 2025 11:44:38 +0000
asID: 213862
IP address blocks: 2a0b:4e07:1c02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:55:93:09:1c:c2:50:11:76:8d:56:fa:6e:e5:cc:1d:a7:6b:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Validity
Not Before: Dec 14 11:39:38 2024 GMT
Not After : Dec 13 11:44:38 2025 GMT
Subject: CN=FC6C255D262BE69E3DC857E0F903B9ECF48E4F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:99:f9:ad:cd:60:60:d9:26:af:03:ac:95:
94:ba:f0:c5:6b:94:8b:ef:c0:fe:1f:45:74:90:aa:
67:cc:17:ce:90:be:93:9e:4b:2c:8d:9d:7e:56:1d:
b3:cd:4f:8d:fe:c0:1e:0e:92:cf:0d:06:4b:5d:82:
60:74:be:c0:8c:3f:4d:64:e7:ad:90:f6:3f:16:a3:
53:60:b5:e8:16:9a:02:84:65:cf:eb:16:db:8b:84:
d2:9c:39:39:c5:44:e6:15:aa:1f:7d:d7:33:25:0b:
ee:c8:6f:47:92:95:e2:11:24:81:25:b2:31:5b:ab:
5e:f1:12:78:57:95:98:3a:ac:06:15:0d:5b:88:40:
a9:c4:65:f6:aa:3c:18:df:56:6c:a9:c4:94:21:76:
bc:76:c8:18:f1:a0:83:6f:88:86:4e:5e:75:58:70:
38:32:07:f4:99:1b:7d:f1:02:f6:04:f3:2a:84:ca:
e6:1c:d2:37:58:5e:01:9c:45:41:c7:13:fc:d9:62:
18:17:6a:4a:5a:de:98:4e:24:f7:8b:a6:dd:e0:cc:
04:1b:8d:fa:e4:d6:86:d8:7f:cd:a3:5e:03:53:30:
05:11:27:a8:b7:c4:8b:be:31:ee:59:73:41:a6:f7:
fd:7e:80:45:51:10:e0:af:a9:0f:c6:e8:b9:23:31:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:25:5D:26:2B:E6:9E:3D:C8:57:E0:F9:03:B9:EC:F4:8E:4F:59
X509v3 Authority Key Identifier:
keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1c02::/48
Signature Algorithm: sha256WithRSAEncryption
1c:d8:2f:b6:d7:7b:9f:d9:c9:91:68:3d:3e:6d:a9:58:8d:a5:
99:1b:32:b8:68:66:a9:13:e1:0a:0b:33:65:bf:ef:c7:f2:11:
c6:1b:d4:b8:4f:f7:b3:f0:48:9f:08:98:d2:dc:d3:3d:0b:56:
3b:e4:60:e6:a0:ff:bf:6b:65:80:92:a6:dd:51:8e:fe:33:62:
74:81:f1:67:aa:9a:60:79:13:4f:24:cf:fe:cc:8f:7b:6b:e1:
c1:4b:9e:5f:4b:10:75:2d:78:da:bb:ce:5d:4f:29:0f:ea:af:
5f:e5:82:35:8b:ba:e2:68:bd:14:0f:23:77:c2:61:12:a0:d1:
c2:30:11:13:d8:dd:18:3a:a1:ba:61:1c:17:c5:66:26:b6:e7:
04:0b:18:8e:6e:a7:bf:b9:d7:85:a2:ed:58:94:8c:99:2d:6b:
e9:dd:77:84:74:03:0c:7a:26:e9:97:34:83:39:78:a0:f3:47:
c3:d0:ae:61:9a:7a:fa:fb:91:d8:a6:16:60:9e:6f:07:cd:92:
9f:a1:a2:8f:4a:5a:32:a4:17:d6:de:46:0e:9e:88:a5:ef:a1:
64:02:31:e8:20:77:a5:99:c7:54:12:c4:16:d2:01:c3:a5:08:
54:58:8e:01:27:35:0a:48:f7:e7:fd:d8:5b:39:e1:76:d9:f2:
c4:8c:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:01 2025 by rpki-client