Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: JhPJH59R6J+2gIHMrEZaA+AoJqI9tJXyBikVTwrN3tk=
Subject key identifier: 1C:CD:B4:47:1A:74:8B:F1:86:24:F0:40:C1:B8:AF:4B:7F:70:EB:6B
Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial: 5A9797991E6F98CB5B22686C20586C77E85BC72A
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Mon 30 Sep 2024 16:57:52 +0000
ROA not before: Mon 30 Sep 2024 16:52:52 +0000
ROA not after: Mon 29 Sep 2025 16:57:52 +0000
asID: 214757
IP address blocks: 2a09:54c6:d000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:97:97:99:1e:6f:98:cb:5b:22:68:6c:20:58:6c:77:e8:5b:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Validity
Not Before: Sep 30 16:52:52 2024 GMT
Not After : Sep 29 16:57:52 2025 GMT
Subject: CN=1CCDB4471A748BF18624F040C1B8AF4B7F70EB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:a7:3e:38:c5:fb:e2:1a:0d:7e:54:29:6c:
af:9c:9b:39:e0:0e:a8:f2:68:97:4f:a0:06:04:76:
56:4d:84:d7:53:aa:e5:4a:b4:8a:8f:71:3c:bd:ea:
3e:7e:81:40:9b:2e:c2:7c:92:95:15:ec:57:f5:1c:
43:ca:2e:95:16:71:77:0e:15:e6:f2:30:e6:a7:23:
5f:8f:82:82:36:f8:65:52:c2:f2:a1:c7:70:fc:8f:
24:b9:a9:0a:89:c4:bb:6d:eb:65:c5:08:b6:f2:e3:
79:22:e3:46:f9:c0:26:9c:07:67:f4:46:71:d7:77:
73:e4:da:e7:0e:3a:81:93:be:24:b7:a4:90:a4:41:
04:a1:9a:31:fe:00:8a:9f:d9:5d:5c:c8:08:f6:21:
36:c4:8c:db:da:e4:09:e4:09:78:9c:b1:73:04:b3:
ff:26:80:b1:18:21:b2:ac:84:fa:ba:f9:f7:78:5a:
62:f7:2a:2f:29:4f:ba:aa:11:90:c2:e7:8c:2a:dd:
da:9d:93:04:a5:26:6c:25:93:ee:b4:71:31:cd:25:
1e:ce:aa:20:0c:fb:e5:2b:0b:7c:a4:5e:07:2e:02:
df:c5:42:b2:f6:a5:7b:38:d5:6b:7c:f8:5a:ef:25:
0d:41:32:f3:1e:5e:b8:de:8f:6d:86:9c:36:41:2e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:B4:47:1A:74:8B:F1:86:24:F0:40:C1:B8:AF:4B:7F:70:EB:6B
X509v3 Authority Key Identifier:
keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d000::/44
Signature Algorithm: sha256WithRSAEncryption
b7:1a:16:b6:70:77:06:3e:85:0a:7e:fc:01:90:a4:8d:aa:d1:
03:ec:ba:ce:0a:8e:40:9e:52:5d:55:5e:3e:d2:20:8f:fc:4b:
16:57:c6:d4:c1:73:40:a6:26:aa:71:11:aa:d0:35:f5:61:64:
d7:1b:2c:5d:4b:32:ff:cb:17:76:ad:9d:d4:66:6e:24:d8:f9:
71:2b:5d:14:71:0f:41:c0:86:e6:5d:f1:aa:22:7f:ee:6b:b4:
1a:1b:1e:d0:65:68:11:00:1a:bd:df:3f:6c:d2:ed:1e:aa:33:
6a:2d:36:cd:b6:5b:cf:33:ae:13:fa:57:ad:81:5e:86:f0:d6:
bf:3e:95:32:23:d3:5f:14:b4:1e:a7:d5:ba:ea:e1:4a:6a:9f:
ce:f6:51:d7:ad:8e:6d:79:9b:01:b3:11:d9:6d:08:41:be:d3:
d9:6f:1a:97:00:eb:8e:20:a3:c7:00:4a:a0:32:15:dd:bf:72:
1f:bb:4b:c1:88:7f:82:61:61:51:85:17:00:34:80:9a:95:e5:
09:07:09:6d:0e:fb:6d:6f:92:d0:d3:3f:7c:89:f8:79:af:1e:
61:6b:31:5b:dd:c6:1a:00:67:1d:bb:30:df:98:b7:93:6b:1c:
0e:fa:22:fa:be:a2:bd:d8:a3:73:3f:7b:7d:ba:e2:af:c8:fa:
47:67:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:33 2025 by rpki-client