Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa
File: 326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa (raw, json)
Hash identifier: 8XXc/vUFLjWy/LRrqI4T91nQccSVuO66DoHLWKAgddY=
Subject key identifier: D5:A6:4A:79:DF:59:ED:84:EF:AC:2A:12:7B:46:ED:31:80:AF:4E:16
Certificate issuer: /CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
Certificate serial: 7530D6E60577278BBA4890120BCC1CC1F7AC93E6
Authority key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa
Signing time: Sun 20 Oct 2024 07:09:21 +0000
ROA not before: Sun 20 Oct 2024 07:04:21 +0000
ROA not after: Sun 19 Oct 2025 07:09:21 +0000
asID: 36832
IP address blocks: 2a0b:4e07:1700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:30:d6:e6:05:77:27:8b:ba:48:90:12:0b:cc:1c:c1:f7:ac:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
Validity
Not Before: Oct 20 07:04:21 2024 GMT
Not After : Oct 19 07:09:21 2025 GMT
Subject: CN=D5A64A79DF59ED84EFAC2A127B46ED3180AF4E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:55:40:ba:43:af:50:f3:c9:2a:d6:e8:6d:
a5:3b:a5:e7:ee:4b:dc:cd:e3:ff:d6:68:11:a8:59:
50:e1:fb:dc:09:64:df:14:5e:8f:2e:62:b1:b2:c2:
2e:dd:17:03:05:4c:11:60:a1:b7:90:78:03:08:0d:
83:4c:63:be:00:c4:2b:c5:e6:c9:4a:4a:6d:94:10:
c1:66:52:2a:8c:63:98:26:39:fe:c9:27:49:6a:7e:
d9:58:4f:d5:4a:7b:22:b9:ab:35:ea:5e:1e:8c:4c:
08:ac:5a:06:1a:2b:f0:a0:14:39:12:92:4b:d0:00:
d0:ca:ee:42:9d:a8:a1:3a:d1:14:41:2f:32:8d:cd:
1e:e7:7b:ae:d9:8d:50:c4:28:17:63:c7:3e:f4:c2:
3c:16:2d:7e:b9:e8:d4:1f:6e:9e:01:2d:f1:e2:19:
dc:a8:33:13:d5:8e:01:8a:c7:cf:96:57:e8:a2:b6:
51:a5:49:57:31:f0:b8:4b:ab:ea:f3:8b:b5:90:94:
da:8f:7c:2a:8f:8e:88:c8:5f:29:bf:80:cc:93:1a:
42:c3:93:e8:e4:2b:5d:f1:c7:b6:98:a4:9e:63:57:
e2:07:34:e9:68:d3:d5:46:4b:a2:07:d0:24:32:ec:
32:5d:15:1f:39:4e:f6:a5:34:95:9f:e2:25:a4:59:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:4A:79:DF:59:ED:84:EF:AC:2A:12:7B:46:ED:31:80:AF:4E:16
X509v3 Authority Key Identifier:
keyid:97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1700::/40
Signature Algorithm: sha256WithRSAEncryption
05:cb:ef:bd:78:98:39:aa:be:d0:9b:12:25:ca:d9:85:8e:c8:
38:5e:ad:a8:e2:d7:71:72:d6:f2:7c:dc:67:89:fe:a5:22:99:
37:07:fc:9b:4e:82:26:48:c5:ae:01:99:9d:9a:c0:91:a7:6f:
b5:c5:38:34:4f:0d:fd:06:46:83:9c:7c:13:dd:0f:1d:1e:0d:
56:21:b7:a6:70:4e:ec:11:0c:e8:bd:97:af:b8:08:7e:ca:4f:
eb:84:f4:b7:ca:ca:53:af:46:3d:b3:5e:19:78:50:65:29:ef:
55:ee:04:5f:6b:9d:cd:d8:9a:5e:60:67:4f:f8:05:a5:bf:b8:
2a:6b:df:05:e4:d6:7e:91:6a:ed:24:7f:36:66:5c:2d:86:f0:
05:34:71:87:d3:f6:b2:5f:83:e7:9a:42:07:55:ef:00:87:38:
c1:48:0b:85:5b:76:02:8a:42:5b:ac:ab:35:f8:d8:da:1f:b4:
a4:cb:06:b2:86:f4:bf:82:f3:e0:54:dc:46:8c:ef:f4:da:d2:
b9:c3:2f:60:d8:0e:2c:0c:37:62:2c:02:f9:88:03:76:9d:ee:
92:99:75:72:a4:8e:e4:15:9b:38:fe:c4:ca:e6:c7:71:46:83:
20:11:f0:34:45:45:52:a7:06:2d:0c:90:07:e1:46:26:0e:d3:
e7:3a:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:44 2025 by rpki-client