Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3334203d3e20323136343734.roa
File: 326130363a313238333a3a2f33332d3334203d3e20323136343734.roa (raw, json)
Hash identifier: vijeRLwARB/6MYkmoGwnqJALT5yARY4DvXdgqP5qPzk=
Subject key identifier: FE:8C:99:1B:AB:4E:18:3C:4C:35:67:64:38:50:40:18:E6:33:B8:94
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 0888FC2C5E5185BB328DBF804D7CA08584EC0688
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3334203d3e20323136343734.roa
Signing time: Sun 03 Dec 2023 08:58:26 +0000
ROA not before: Sun 03 Dec 2023 08:53:26 +0000
ROA not after: Sun 01 Dec 2024 08:58:26 +0000
asID: 216474
IP address blocks: 2a06:1283::/33 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:88:fc:2c:5e:51:85:bb:32:8d:bf:80:4d:7c:a0:85:84:ec:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Dec 3 08:53:26 2023 GMT
Not After : Dec 1 08:58:26 2024 GMT
Subject: CN=FE8C991BAB4E183C4C35676438504018E633B894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:3f:60:11:9c:b4:08:ca:b8:ec:5f:8b:47:
3d:cd:73:f6:36:cb:57:24:3d:98:57:c0:91:25:74:
53:6e:35:13:f6:ba:bb:dd:98:cf:a9:6e:e7:7e:92:
6a:1d:d8:9a:c8:aa:6e:c4:de:a3:c7:a2:db:36:3e:
49:f5:77:ab:14:a1:70:29:36:9f:02:e9:38:fe:05:
cc:0d:40:20:76:4e:c4:87:0d:41:20:db:4a:e5:90:
6b:78:43:d0:67:3a:2b:f4:ef:84:3a:6f:e8:e6:c7:
6c:f4:de:e2:c8:bf:2f:0c:8e:13:3c:86:1e:7c:07:
6b:03:e6:ce:05:27:14:91:f6:74:c5:e7:02:20:8c:
7c:e3:02:2f:00:d2:cc:d8:e0:db:73:9b:0c:c7:bc:
11:fd:04:16:20:fe:9a:d4:33:84:67:aa:4d:77:a4:
9f:b2:e9:35:46:de:3f:b9:5c:f8:e0:31:f6:dd:b1:
25:91:72:27:71:97:1d:61:6e:be:70:4c:1c:d1:be:
02:84:56:3f:ce:0c:d9:6d:81:03:f1:78:4f:51:7f:
bf:51:87:d2:31:f0:e2:31:cf:64:1e:fc:36:e4:94:
74:dd:36:86:95:76:4e:54:8a:35:fa:f0:fa:20:ca:
6d:63:f2:db:1d:53:69:a8:0d:ce:5e:24:66:aa:03:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:99:1B:AB:4E:18:3C:4C:35:67:64:38:50:40:18:E6:33:B8:94
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3334203d3e20323136343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/33
Signature Algorithm: sha256WithRSAEncryption
8d:24:11:4f:ae:7e:d6:88:b5:0d:d8:79:68:b1:3f:21:74:23:
33:0f:14:0c:be:60:ba:d6:d8:01:1a:06:20:4a:0a:e7:78:18:
10:c6:18:98:a6:f6:59:90:2a:67:9c:39:c3:d2:5f:41:b9:55:
dd:c2:5f:22:9e:22:9e:ea:3e:64:8d:8b:16:fc:f2:d1:e3:be:
27:07:d6:a0:bf:92:30:11:2c:71:b6:65:25:28:64:c5:52:ef:
d1:9f:6d:85:49:09:3c:b5:96:16:d6:cc:c4:4d:7c:a3:f4:bf:
cc:cb:f3:69:eb:0c:fe:fe:e0:83:b6:82:4c:12:69:44:74:e9:
c3:2f:ba:1d:3f:ae:ef:73:4a:df:50:50:fa:b0:8c:6e:73:94:
e5:ff:08:2e:ca:f0:3b:18:d0:47:7b:b8:a1:6f:25:9b:1e:44:
fd:e1:48:5e:70:3f:35:51:67:8c:57:4f:3e:10:78:86:61:14:
95:d5:33:c3:d7:58:26:65:61:98:e3:aa:6b:d8:14:16:4f:2a:
94:b3:06:7a:b5:c2:ab:37:68:7b:b9:b2:1a:2e:11:0f:9e:ac:
9d:48:87:d8:ab:98:3a:61:4b:a3:15:f4:85:14:4e:ad:cf:67:
1c:f0:0c:4e:d9:1d:10:fa:18:2e:d7:01:ee:58:53:af:b9:38:
ef:d9:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org