Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030323432.roa
File: 326130363a313238333a623030623a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier: dM3qR0bxbUrhEI51qRL1RVbA7WrAL8Wi28c0XD6guS0=
Subject key identifier: E8:AB:6B:96:CD:51:31:94:2F:D3:DC:FC:DB:44:89:66:00:61:63:6D
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 2499ED6253739DA45416A7D6629B9137518F5230
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030323432.roa
Signing time: Thu 16 Nov 2023 20:14:08 +0000
ROA not before: Thu 16 Nov 2023 20:09:08 +0000
ROA not after: Thu 14 Nov 2024 20:14:08 +0000
asID: 200242
IP address blocks: 2a06:1283:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:99:ed:62:53:73:9d:a4:54:16:a7:d6:62:9b:91:37:51:8f:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 16 20:09:08 2023 GMT
Not After : Nov 14 20:14:08 2024 GMT
Subject: CN=E8AB6B96CD5131942FD3DCFCDB4489660061636D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:c3:be:32:e2:3c:32:e2:16:e1:e0:bd:ec:
ba:d5:04:b0:16:ca:d7:c2:1e:22:2e:b1:64:f6:ae:
f9:69:fc:96:80:54:a6:19:b5:d1:c8:05:04:22:f1:
14:91:05:ac:6a:4b:19:36:9e:d6:d4:cd:c0:c4:2e:
2d:88:6e:d2:f5:d3:cc:35:54:6f:ba:56:eb:ac:57:
bb:4f:64:1a:ba:f6:62:0b:00:b9:55:65:5b:95:d0:
32:46:81:a2:85:c0:09:b1:d2:71:31:5d:1a:41:3e:
63:c3:74:2c:f8:e9:6e:2d:18:ff:93:d3:b5:dd:9e:
cb:c8:f5:2f:18:d6:7f:96:ec:96:10:2c:09:30:b3:
47:82:31:0d:de:7a:b3:2f:d6:09:9d:c3:64:70:01:
1a:6e:f4:fe:cf:4c:b2:ff:9e:cf:58:5f:11:ad:b4:
05:11:56:84:bf:52:43:90:18:47:e2:ad:fb:5d:f2:
f1:41:ab:b0:f8:85:85:14:71:e2:ab:b8:3e:36:77:
d9:18:60:f8:db:b7:6a:2b:be:d0:f5:94:49:8e:53:
d5:79:cf:71:96:09:d6:2a:5f:7c:11:87:ab:83:18:
e4:44:24:db:28:9c:30:d5:3a:b5:44:d1:67:a8:bf:
52:de:fa:81:9c:80:be:d3:7b:ab:e8:b2:02:9c:14:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:6B:96:CD:51:31:94:2F:D3:DC:FC:DB:44:89:66:00:61:63:6D
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323030323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
03:fc:cf:65:6a:72:b8:38:c5:e7:ff:1a:50:fd:c2:63:dc:e1:
5c:8b:28:06:1f:1c:82:76:a0:a3:21:d0:ad:40:90:ba:bc:d0:
e4:11:74:42:e9:f0:3a:ab:ed:37:7d:11:7b:64:4c:ab:6e:b5:
9b:5c:a4:07:4b:5f:93:bd:51:3c:5f:b6:e3:8c:58:cc:23:f4:
79:41:c5:8b:e0:4a:a8:34:f0:5f:b0:30:46:2a:3b:23:d7:7f:
83:c3:ff:9e:d5:92:79:86:71:18:2a:0d:75:b4:bd:d3:04:cd:
bb:6b:c4:ec:f3:8b:56:3a:b0:c5:ae:a6:aa:b4:36:45:f9:52:
44:17:c5:ff:f0:5a:a9:6c:81:a6:7b:d7:be:67:33:f1:ba:a8:
57:7d:0c:0c:13:86:b0:aa:d0:6d:9d:11:cf:c8:61:b5:02:a9:
50:11:26:ac:05:2a:62:c2:ea:49:1a:3f:62:1c:e1:f6:96:11:
f9:94:0a:e4:77:29:63:a4:01:a4:9f:e4:bb:8e:d9:6a:76:51:
8b:9f:da:b4:00:09:76:b6:6f:6d:4f:c7:f0:9d:64:7a:b3:02:
8e:9f:7c:f5:06:c1:70:c0:4f:da:4e:14:a9:40:9b:25:ee:7d:
36:08:cc:47:d9:bf:2d:e2:cb:6d:f8:3e:47:cf:8f:92:a4:25:
fd:3e:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:18:06 2025 by rpki-client