Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646666663a3a2f34382d3438203d3e20323134373537.roa
File: 326130393a353463363a646666663a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: 1Udwzo+BdGjtwa9F0boOSKd7mjjPeUTty0WmNAx9Y64=
Subject key identifier: 72:E7:BD:D4:99:9F:D2:01:79:D8:DC:50:62:DC:B6:CF:D2:74:DF:3A
Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial: 0D04D412F7CA21AA467D53D0B35FF1C20724AAD3
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646666663a3a2f34382d3438203d3e20323134373537.roa
Signing time: Tue 08 Oct 2024 14:04:19 +0000
ROA not before: Tue 08 Oct 2024 13:59:19 +0000
ROA not after: Tue 07 Oct 2025 14:04:19 +0000
asID: 214757
IP address blocks: 2a09:54c6:dfff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:04:d4:12:f7:ca:21:aa:46:7d:53:d0:b3:5f:f1:c2:07:24:aa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Validity
Not Before: Oct 8 13:59:19 2024 GMT
Not After : Oct 7 14:04:19 2025 GMT
Subject: CN=72E7BDD4999FD20179D8DC5062DCB6CFD274DF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:a6:e5:b6:af:ba:1e:45:ee:70:eb:2f:2a:
39:30:93:89:c4:ce:0a:88:ce:94:d8:f7:37:2d:ad:
fd:4b:14:c9:ee:e1:0d:88:a7:f9:81:3c:e1:5e:2b:
b7:7e:ec:e4:ea:67:bc:9b:ce:27:cc:e1:a6:fa:37:
f2:74:00:04:83:7c:8b:bc:ab:81:00:3a:4a:43:3c:
17:22:51:78:e2:13:a3:44:90:18:62:5f:3e:03:2e:
d3:e1:c7:78:84:6a:53:20:7c:2b:aa:09:11:70:4d:
c1:79:3c:81:8a:ec:28:07:b9:fa:e2:d1:bd:00:e3:
03:81:63:35:ef:7c:35:0f:b4:9c:12:4c:6c:ac:3b:
e5:04:d7:2c:28:a0:45:7c:19:02:45:50:b6:45:7c:
be:3b:cb:a7:48:a7:d0:dc:18:c6:e0:ac:3d:13:6e:
cf:56:32:ac:09:b8:a4:d2:69:2b:e7:7a:91:6d:ee:
8c:fd:2d:39:2c:8d:7f:41:5b:55:ed:12:7e:ea:19:
0b:b7:dc:23:f5:3d:5d:5f:c3:ba:f6:67:52:5a:13:
c9:2f:80:8b:d9:c3:f6:da:55:d3:50:ed:9d:42:88:
a1:25:30:cb:6c:b4:03:71:cc:34:77:67:5e:80:65:
a8:d5:f7:78:56:86:d7:ed:e3:19:81:35:65:ee:5d:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:BD:D4:99:9F:D2:01:79:D8:DC:50:62:DC:B6:CF:D2:74:DF:3A
X509v3 Authority Key Identifier:
keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646666663a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:dfff::/48
Signature Algorithm: sha256WithRSAEncryption
38:cf:12:7d:57:ff:4f:c6:c8:1d:63:3c:0c:60:05:05:fa:0e:
3e:c9:d3:cf:2e:47:35:3f:dd:3e:d0:be:3d:dd:f3:f0:09:c8:
56:d8:20:f1:ca:93:a5:a2:76:c5:77:26:f0:50:62:04:18:b1:
18:bf:64:87:87:df:15:21:d4:aa:06:92:52:93:a8:1d:77:40:
25:18:82:22:ed:bf:a3:4e:f2:99:40:d5:51:fd:0e:86:12:ac:
25:e0:46:a5:f0:6d:05:68:61:6d:63:e9:92:57:78:f6:cb:06:
d9:d4:5c:6c:95:c4:5e:01:66:1e:fa:75:3b:d7:e9:f5:93:9c:
ab:e1:cb:d3:18:31:11:4f:aa:90:a2:a2:72:5a:db:3a:4c:7d:
2d:19:2b:8e:93:a9:02:fd:17:da:cd:28:a0:ca:8c:38:d2:35:
9f:49:25:a9:22:39:ed:28:e4:3d:c9:db:fc:b8:6d:5f:1b:4a:
4d:9d:9f:97:9a:06:26:00:3a:92:81:34:e6:22:1e:c1:44:36:
43:ab:a1:7d:ae:23:b9:de:b4:a2:aa:63:dc:eb:f4:d9:8f:35:
7d:44:ec:23:a0:00:9d:ed:5d:e0:fe:02:bd:1d:24:45:e8:72:
9b:35:18:a6:7e:b1:ff:84:b3:8e:49:a1:f2:5d:8c:33:45:02:
82:33:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:16 2025 by rpki-client