Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa
File: 326130363a313238333a3a2f33332d3438203d3e20313937343737.roa (raw, json)
Hash identifier: yAdcrmA7UVx/gjQINkM0rl3OYJeX3EvfPdcB05va8b8=
Subject key identifier: 8C:81:32:7F:4B:95:EB:49:9B:4E:4F:EC:67:2E:74:F1:C9:47:F8:D9
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 761DFEF1CA64321EE11043266AD3E60376D3388D
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa
Signing time: Wed 15 Nov 2023 17:06:27 +0000
ROA not before: Wed 15 Nov 2023 17:01:27 +0000
ROA not after: Wed 13 Nov 2024 17:06:27 +0000
asID: 197477
IP address blocks: 2a06:1283::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1d:fe:f1:ca:64:32:1e:e1:10:43:26:6a:d3:e6:03:76:d3:38:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 15 17:01:27 2023 GMT
Not After : Nov 13 17:06:27 2024 GMT
Subject: CN=8C81327F4B95EB499B4E4FEC672E74F1C947F8D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:7c:dd:b2:e7:5d:cc:fc:a1:82:a8:e0:25:
8f:41:dd:b8:c6:18:9f:4f:64:9f:dd:e0:26:1d:fa:
bc:2c:73:7a:27:8b:01:84:c3:93:52:ea:32:e2:78:
d0:e2:3a:34:59:06:4a:78:8b:ac:68:a1:af:c4:e7:
44:b0:a0:97:6a:46:b9:9a:20:67:95:c4:b2:84:c3:
52:06:61:37:ea:71:fb:3e:72:89:da:23:45:26:ad:
6c:20:20:05:20:bc:7c:e1:ed:6e:99:0a:6d:5a:71:
ae:98:76:53:5d:b9:ae:de:b9:51:25:02:e4:64:99:
92:af:8a:16:ab:ba:ca:19:0b:d4:20:9a:30:53:98:
c9:c8:ce:a6:ff:99:4f:2a:22:36:26:da:36:1c:4b:
34:e6:32:32:d5:8e:f5:05:54:74:a8:c0:ea:cc:6d:
85:6d:2a:f0:70:f9:95:81:cb:6c:0a:b3:8f:80:6a:
d0:ff:8b:70:0b:08:a5:fb:94:f3:cc:f4:a8:b2:c2:
43:0f:04:6b:b4:0c:a9:ab:7c:97:16:23:28:0b:0f:
a8:f2:3f:5e:76:64:ee:f2:1d:1b:8b:9a:72:9b:9e:
29:7e:e5:36:57:41:f3:ce:27:b7:f3:38:66:d0:a1:
7b:0d:54:7f:7c:34:03:98:96:46:da:e8:c7:53:88:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:32:7F:4B:95:EB:49:9B:4E:4F:EC:67:2E:74:F1:C9:47:F8:D9
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/33
Signature Algorithm: sha256WithRSAEncryption
4e:2c:d2:fe:6a:17:a8:3f:3d:d8:79:67:da:dc:4b:43:f3:5d:
bb:4c:98:f3:61:7a:49:d3:f6:c6:11:18:d3:11:a1:4a:9c:d9:
ad:dd:61:b8:f9:ba:01:91:d4:66:77:d8:3a:94:a7:2c:60:6a:
2f:1c:fc:99:84:62:ce:d2:7e:d3:b6:75:6d:f2:60:8b:cb:a3:
f8:b3:7c:7d:bb:a5:b3:18:e8:f8:c9:10:c5:d3:73:53:35:21:
e8:51:b1:53:c0:93:e7:7b:cc:b7:3d:59:19:24:87:48:a2:6d:
21:66:f7:21:cf:44:e4:e3:5b:4c:26:6d:0b:1a:20:61:41:0b:
1b:6b:56:e5:3d:0e:30:d5:be:f6:63:97:f0:fc:d6:e5:8b:f8:
1f:8b:f9:ad:85:d3:ba:37:1b:64:68:2a:62:1a:ba:bc:5c:ae:
a9:7d:5f:3c:b0:9d:6b:b2:04:f0:d3:b8:d3:1b:13:b1:1f:8c:
f8:89:fa:6b:24:38:c4:66:63:a6:67:b8:6c:60:fb:05:e7:1a:
54:e8:5a:5f:fd:a0:ae:72:29:bb:e2:6c:e2:3b:20:a8:78:eb:
d4:82:ce:ca:3b:8d:80:8b:ca:cc:da:c6:63:96:da:c8:74:78:
43:44:0f:65:54:3d:d3:39:db:46:0f:da:6a:fb:85:23:e5:18:
a7:e8:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:44 2025 by rpki-client