Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa
File: 326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: F8DQyce6bM2KucXBkLNX0Kuq1520yUhG9+Sdt4Kqnxg=
Subject key identifier: FA:8D:F8:BD:42:B2:B2:53:C2:E1:2B:A6:F6:70:B1:3C:2A:DC:AF:1A
Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial: 73B6E11DC00C3561D91FCA5902AF694FDFCDE16C
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Mon 30 Sep 2024 16:57:52 +0000
ROA not before: Mon 30 Sep 2024 16:52:52 +0000
ROA not after: Mon 29 Sep 2025 16:57:52 +0000
asID: 214757
IP address blocks: 2a09:54c6:d0b0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b6:e1:1d:c0:0c:35:61:d9:1f:ca:59:02:af:69:4f:df:cd:e1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Validity
Not Before: Sep 30 16:52:52 2024 GMT
Not After : Sep 29 16:57:52 2025 GMT
Subject: CN=FA8DF8BD42B2B253C2E12BA6F670B13C2ADCAF1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:92:5a:0f:47:59:cf:39:ab:65:20:1a:97:
6b:df:6d:39:c3:2e:de:da:ab:a1:3d:ca:69:3c:77:
10:04:fb:4f:a6:3b:4a:7e:51:b6:c3:fb:c3:14:01:
87:7e:03:79:88:b1:64:45:11:11:f6:33:c0:48:74:
2f:d7:6e:87:1f:83:9c:fc:37:f6:91:e0:e2:61:b7:
81:96:54:47:cb:21:42:79:88:e9:bd:05:9a:73:e1:
dc:fc:58:2b:ee:65:cc:7f:2d:2d:86:66:9d:b6:74:
be:8a:db:0c:ff:ef:67:f1:ee:85:8c:a7:2e:97:08:
ff:8c:7d:29:3a:a0:e6:b5:78:ba:48:9a:04:f5:4c:
1f:13:49:aa:07:75:6c:e9:a6:07:de:2d:2f:f3:dd:
4b:ad:50:c5:88:58:73:e4:17:5b:96:dc:30:a4:53:
78:47:94:98:f5:03:71:1f:2b:72:8f:03:13:24:39:
6f:75:30:6b:54:11:d2:48:ca:91:64:ce:50:d1:83:
8b:29:14:cf:be:37:aa:1e:54:e1:c5:9a:ed:15:03:
18:08:59:90:b4:d1:ca:76:2e:7d:2b:a8:41:02:e8:
48:74:88:76:78:46:9f:35:42:62:33:4e:3b:7e:a9:
75:86:f0:94:96:19:fb:53:8d:48:dc:9c:7b:58:bc:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:F8:BD:42:B2:B2:53:C2:E1:2B:A6:F6:70:B1:3C:2A:DC:AF:1A
X509v3 Authority Key Identifier:
keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643062303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d0b0::/44
Signature Algorithm: sha256WithRSAEncryption
98:b6:0c:ef:5e:2e:8c:3b:f5:64:1e:56:79:57:40:05:b8:bb:
31:96:30:a2:d1:78:7b:45:c3:c9:0f:65:63:60:08:d4:51:a0:
e6:66:66:f9:4f:e5:3a:fc:de:15:e0:16:62:e0:09:09:61:cd:
ad:bd:f0:a1:67:c5:45:1c:65:f9:ab:b4:d1:1d:62:3c:54:f3:
d4:b8:81:62:90:86:4a:1d:cf:d4:5d:3b:b9:d4:44:1b:04:ab:
90:b8:2f:43:ce:d7:e5:6e:58:34:99:4f:eb:96:ce:33:d5:7f:
92:49:13:a0:80:4f:a2:96:81:29:54:94:18:c4:da:e1:f6:c8:
4e:96:7b:52:80:b5:3d:7b:af:17:63:51:80:f2:bd:d6:9d:41:
0a:c7:d1:d5:72:4e:60:c5:0a:57:1e:8e:7c:8e:41:1e:17:71:
bd:ef:0a:53:b7:0f:70:4e:06:9f:3f:af:bf:b7:fa:1d:a1:4c:
ab:35:06:a0:7c:27:23:d5:d8:ad:d1:de:7d:b9:2c:86:be:1b:
db:15:ea:80:e2:2a:db:29:ed:0a:8f:03:d6:11:ad:27:94:ac:
4c:c5:40:14:f7:1a:51:01:7e:c7:30:d3:36:84:45:0c:8a:b8:
1a:db:b1:5c:b5:d4:bf:07:43:e4:14:86:c6:97:c6:f7:fa:9e:
82:9a:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:17:41 2025 by rpki-client