Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa
File: 326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa (raw, json)
Hash identifier: hf0sTrKrDJ4boI08ZHhNaHWTmMq+esR34eLQdUrR3Dc=
Subject key identifier: BD:60:96:2A:8B:B4:72:E1:9D:96:0B:2C:49:A8:89:DC:F5:49:05:9C
Certificate issuer: /CN=503177A5FC39DD005C41B770207D6705510713A8
Certificate serial: 7B4934301A2BEB305A08709FD7E633A913441086
Authority key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa
Signing time: Sat 22 Jun 2024 02:52:17 +0000
ROA not before: Sat 22 Jun 2024 02:47:17 +0000
ROA not after: Sat 21 Jun 2025 02:52:17 +0000
asID: 203069
IP address blocks: 2a12:dd47:8400::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:49:34:30:1a:2b:eb:30:5a:08:70:9f:d7:e6:33:a9:13:44:10:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503177A5FC39DD005C41B770207D6705510713A8
Validity
Not Before: Jun 22 02:47:17 2024 GMT
Not After : Jun 21 02:52:17 2025 GMT
Subject: CN=BD60962A8BB472E19D960B2C49A889DCF549059C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:67:20:53:11:ca:f7:00:60:4f:a4:e0:9c:
1e:4a:0d:a6:b9:43:b0:71:4e:71:04:f8:40:a9:49:
67:c5:ba:3c:e3:3b:13:b7:bb:18:7d:ae:5b:47:63:
65:4d:35:33:66:3f:43:06:96:28:10:92:f2:93:3d:
26:17:cc:5c:8f:6e:0c:2f:95:28:80:f0:79:54:ed:
c0:8d:28:71:e4:9f:e5:f5:29:58:41:ef:e6:df:a2:
c8:7f:87:e7:f1:08:33:ed:ee:98:41:22:55:58:59:
da:26:0b:97:72:f8:00:84:82:1c:29:66:86:ef:5b:
63:19:fe:9d:38:a4:db:e9:61:e5:ea:3c:91:ad:03:
25:f6:76:f6:36:23:1e:7c:b9:7d:e6:34:88:92:e8:
86:73:75:09:73:18:6f:52:68:81:7a:55:d3:46:1f:
a8:78:47:68:c0:11:6d:25:de:78:ff:92:c0:61:95:
6d:1f:1a:47:54:31:51:9c:df:ff:67:ff:6e:85:6b:
f9:45:22:00:fc:2d:cd:ba:91:e0:ff:82:fd:cb:44:
cc:42:7a:05:77:16:0f:25:c8:75:0a:63:6a:24:43:
d9:db:f7:2d:a0:d3:69:ea:ec:10:39:0c:c7:77:d1:
ed:b5:06:ac:ef:41:35:80:82:00:ba:3f:c8:73:cf:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:96:2A:8B:B4:72:E1:9D:96:0B:2C:49:A8:89:DC:F5:49:05:9C
X509v3 Authority Key Identifier:
keyid:50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8400::/45
Signature Algorithm: sha256WithRSAEncryption
b5:7b:64:ea:94:da:d7:ae:45:e0:29:0c:42:d6:ef:9c:2e:95:
1c:1e:53:2d:6b:75:29:0e:72:1d:b1:d2:2b:42:5f:4e:18:ca:
03:99:c9:7c:11:58:7f:f3:bd:d5:35:b9:5e:69:b9:b5:b5:e5:
7b:bc:58:42:a0:30:47:73:00:09:f8:21:f9:d5:d0:d2:e7:2e:
af:2a:fc:3e:76:35:ca:70:62:34:b1:8d:0f:d0:cf:22:ef:df:
d0:3f:74:9b:21:36:00:0d:ba:14:aa:a7:f7:97:c2:49:4c:bf:
68:8e:b9:b1:09:d4:11:55:9f:dc:7b:78:1b:ae:a9:2e:8b:fc:
47:e2:9e:95:b9:a8:e6:e4:d7:2f:e4:32:d2:3e:1a:f1:5e:cc:
97:3c:cd:2e:d9:41:da:e4:a7:d8:7e:6a:54:d5:d5:c9:ca:9d:
b9:53:78:7c:5d:ef:58:e7:3d:c4:5e:89:4a:eb:1c:b4:55:d3:
67:83:cd:65:3d:e9:2f:95:3e:cd:8b:16:db:45:cc:b8:fb:ee:
8b:17:77:c0:9d:1f:61:d0:df:a9:61:dc:f1:af:fd:96:2b:08:
28:1a:f6:d7:4b:44:1e:95:41:6a:c4:83:14:f6:6c:c6:96:e4:
4c:d4:17:b4:54:3e:46:41:a4:09:45:3e:3a:45:e5:9c:6f:52:
60:89:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:53 2025 by rpki-client