Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a613030303a3a2f33362d3336203d3e203336383332.roa
File: 326130363a313238373a613030303a3a2f33362d3336203d3e203336383332.roa (raw, json)
Hash identifier: v5FQ6ADHBYpkfsn19KOUvmg1cG6XRjmK9SnLmRLmu/4=
Subject key identifier: DD:66:D2:96:3B:F4:07:1C:9E:C7:3A:55:04:0B:40:8B:97:BA:5D:CB
Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
Certificate serial: 37B8BCB970C40B3E9001872D1FA6044D47538699
Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a613030303a3a2f33362d3336203d3e203336383332.roa
Signing time: Sat 21 Dec 2024 12:52:29 +0000
ROA not before: Sat 21 Dec 2024 12:47:29 +0000
ROA not after: Sat 20 Dec 2025 12:52:29 +0000
asID: 36832
IP address blocks: 2a06:1287:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b8:bc:b9:70:c4:0b:3e:90:01:87:2d:1f:a6:04:4d:47:53:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
Validity
Not Before: Dec 21 12:47:29 2024 GMT
Not After : Dec 20 12:52:29 2025 GMT
Subject: CN=DD66D2963BF4071C9EC73A55040B408B97BA5DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:c0:b0:9b:f7:f4:a9:30:0f:c7:e1:b7:2e:
11:ea:5d:d7:93:25:b3:dc:bc:77:16:17:53:b9:e2:
36:2e:ee:5b:a6:2e:e2:59:91:54:2a:5b:2c:ca:d4:
53:f3:1a:79:a4:50:29:cc:70:04:a9:ce:ab:0d:c9:
58:39:11:cb:ec:2c:bd:29:7d:e2:69:86:2d:11:eb:
a9:66:51:27:8c:8c:72:14:af:72:f9:ca:9a:94:fe:
ac:27:11:7d:26:08:8f:f9:38:af:55:a7:42:7c:aa:
3e:42:78:a2:ef:59:72:1e:11:97:05:20:be:26:a1:
f3:f5:ec:07:a5:18:bf:89:86:bd:e1:ff:e3:bd:ee:
7e:77:c6:7e:ba:48:1c:20:76:e9:7c:de:af:47:12:
9b:4f:38:7e:07:8e:bf:b9:03:db:47:0d:70:5a:e3:
45:78:fb:55:c5:60:df:49:55:98:f8:65:d4:19:dc:
36:f2:82:2a:9b:8c:af:bf:fb:82:f5:c7:98:b1:1f:
40:64:b7:24:ce:16:e0:6c:d2:52:02:28:32:d1:41:
2a:58:fa:f2:e2:5b:1e:b4:69:2b:41:03:ef:e7:ee:
b8:98:01:32:11:87:21:b9:64:0a:61:37:e9:89:3a:
de:06:20:4e:e5:3b:d4:04:d9:53:1c:8a:73:fc:71:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:D2:96:3B:F4:07:1C:9E:C7:3A:55:04:0B:40:8B:97:BA:5D:CB
X509v3 Authority Key Identifier:
keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a613030303a3a2f33362d3336203d3e203336383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287:a000::/36
Signature Algorithm: sha256WithRSAEncryption
72:63:03:33:ed:2b:99:a2:be:fe:7b:4f:72:e7:41:64:d8:b4:
f4:12:80:fe:ff:29:8c:8e:2c:62:49:3a:50:16:5f:9d:77:bc:
48:95:42:63:07:bc:7f:f0:91:bc:87:5a:72:fa:a3:ed:2e:0c:
2d:c3:9a:7f:da:8a:b3:d4:b9:7c:1e:0e:60:08:d2:91:8b:a1:
e4:b5:21:5a:84:86:72:25:2b:99:53:f2:89:a6:f3:d1:6a:40:
a8:53:c3:3b:1d:9d:3e:f8:65:46:91:f4:a0:63:49:37:89:c7:
fd:e6:73:9b:39:27:b4:81:ce:53:08:1f:c3:10:b2:6f:60:a3:
0a:8f:8c:3f:c6:5c:26:55:02:a7:28:0d:b4:c6:27:a0:29:11:
8f:58:cc:3b:e4:c3:1f:d1:6c:ea:c4:db:63:4b:8b:2c:bb:e1:
7f:16:ff:e6:49:75:a2:3e:cb:c9:cf:ce:e2:21:a9:0e:ae:33:
b8:97:a9:1a:b6:11:1b:5f:a5:0c:da:16:00:71:f1:eb:aa:60:
63:f9:00:b3:b5:31:29:1f:c3:95:3d:cb:15:07:a0:59:e7:68:
3e:8e:ba:0d:5a:72:24:05:1d:21:0d:d0:03:b6:39:13:40:82:
6d:a8:e7:3e:9c:a8:b1:69:30:db:ad:30:af:2a:a9:93:c3:a9:
16:2a:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:30 2025 by rpki-client