Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa
File: 326130373a316334303a3a2f32392d3438203d3e20323130383833.roa (raw, json)
Hash identifier: 0gPh66KhgWgHcKsr2G/yUDyvB3KVu706aNoW2M5Ow+g=
Subject key identifier: D8:1A:DD:4B:F7:27:2E:C6:FD:12:4D:6C:6C:F9:2F:6D:F0:A1:9E:1C
Certificate issuer: /CN=fdc1a908766b391e371b6e3f5e6a1141efe78a48
Certificate serial: 654C5B09746F649C6C28DE96D4785F43E002DB88
Authority key identifier: FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cGpCHZrOR43G24_XmoRQe_nikg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa
Signing time: Thu 08 Jun 2023 13:16:50 +0000
ROA not before: Thu 08 Jun 2023 13:11:50 +0000
ROA not after: Thu 06 Jun 2024 13:16:50 +0000
asID: 210883
IP address blocks: 2a07:1c40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4c:5b:09:74:6f:64:9c:6c:28:de:96:d4:78:5f:43:e0:02:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1a908766b391e371b6e3f5e6a1141efe78a48
Validity
Not Before: Jun 8 13:11:50 2023 GMT
Not After : Jun 6 13:16:50 2024 GMT
Subject: CN=D81ADD4BF7272EC6FD124D6C6CF92F6DF0A19E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:5c:bf:d7:c9:89:03:a5:3c:e7:24:07:a7:
e8:a5:2a:54:58:8f:fe:bf:cd:8d:0a:88:e8:37:e0:
66:66:71:b1:e3:4f:38:a3:ef:0a:b5:b1:df:4d:87:
10:7f:ef:80:52:37:63:c1:3d:79:ab:25:63:8f:70:
79:ac:5f:ee:36:7a:09:31:3b:2c:fa:25:8f:8d:24:
6f:6c:1e:e6:01:82:04:9e:4b:b1:cf:b7:5d:0e:77:
ec:d9:a7:2e:c2:77:1d:07:84:a3:75:1b:f3:e2:30:
50:4e:6c:7b:f0:71:96:03:e1:0d:a5:34:ef:1b:55:
5b:57:4e:60:7b:b3:b8:24:cc:8f:7b:5f:a8:89:aa:
11:9d:40:1c:89:40:9a:9f:b9:6e:34:9b:1c:82:83:
16:67:58:56:aa:e6:12:2d:c0:b9:64:2e:c7:1f:29:
50:db:a3:b2:0c:e9:c5:2e:fd:d8:f7:f0:c7:96:59:
26:66:bb:f6:9b:03:1f:66:77:5d:a3:b0:ef:64:96:
00:83:b8:a4:7d:9d:ef:69:9e:90:fd:2f:86:fa:91:
73:a7:3b:77:ce:4b:ed:c7:95:22:4e:6f:df:f2:af:
ad:04:80:64:17:09:67:bb:a2:98:64:1e:0e:25:68:
2a:58:1e:7f:08:d0:54:68:1c:8f:95:52:92:5b:fd:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:DD:4B:F7:27:2E:C6:FD:12:4D:6C:6C:F9:2F:6D:F0:A1:9E:1C
X509v3 Authority Key Identifier:
keyid:FD:C1:A9:08:76:6B:39:1E:37:1B:6E:3F:5E:6A:11:41:EF:E7:8A:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/FDC1A908766B391E371B6E3F5E6A1141EFE78A48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cGpCHZrOR43G24_XmoRQe_nikg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ad9bead-4669-4e97-9963-3763c93ccf66/0/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
b3:ea:d4:6c:3b:47:9c:86:58:9a:2a:2c:fb:6f:35:89:37:a2:
8e:6c:fc:fc:c4:63:61:c6:cc:cc:4f:1f:ea:14:46:8e:ee:db:
da:7b:19:eb:14:98:63:c5:46:16:59:26:82:73:2f:1e:d8:eb:
37:29:12:70:7b:62:7a:38:00:46:33:dd:73:d4:29:47:df:4a:
0f:ce:e1:87:dd:ac:99:ec:0d:b9:05:c5:cb:ac:c4:17:7b:0c:
14:e0:73:43:25:fa:4c:17:9b:b4:45:48:23:70:0e:21:c8:11:
7d:52:11:a2:89:f2:ed:1a:d4:11:1e:8a:d0:94:73:0c:82:e2:
a0:56:33:a6:3b:e0:63:05:18:11:0e:d9:06:5c:2a:47:b5:b3:
eb:ad:8c:30:39:4c:5b:40:56:f8:0b:59:17:58:43:50:5e:b7:
0e:a9:c2:98:ed:39:a3:91:de:b4:7d:b8:20:6d:d7:89:80:73:
79:da:f6:60:25:e0:f8:81:88:dd:e3:40:99:4d:a2:40:4b:37:
75:3b:95:07:c6:fa:5a:f4:c4:46:99:6e:58:e3:89:8d:cb:cc:
f2:09:91:ed:7e:87:82:cc:c7:8c:8b:1b:77:18:d2:e5:64:df:
68:26:16:86:e2:f5:18:4c:e8:33:08:28:0f:67:97:74:d6:b3:
d4:c9:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org