Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa
File: 326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json)
Hash identifier: exqEkQ0+fL/6lDShzazmwBgkKVwiH0ASM8RcqwaE15E=
Subject key identifier: A3:5E:32:12:A6:31:8B:0D:3F:06:DE:8B:80:94:38:7C:E3:E1:B9:1D
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 3C7685924B8D04EDAC04C1363D291E3B211DA646
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa
Signing time: Wed 22 Nov 2023 15:45:14 +0000
ROA not before: Wed 22 Nov 2023 15:40:14 +0000
ROA not after: Wed 20 Nov 2024 15:45:14 +0000
asID: 207424
IP address blocks: 2a06:1283:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:85:92:4b:8d:04:ed:ac:04:c1:36:3d:29:1e:3b:21:1d:a6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 22 15:40:14 2023 GMT
Not After : Nov 20 15:45:14 2024 GMT
Subject: CN=A35E3212A6318B0D3F06DE8B8094387CE3E1B91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:9e:2b:cb:2f:bf:b5:61:4c:15:35:98:ee:
24:01:f3:8d:47:29:94:1f:04:7f:e0:a0:7b:35:37:
27:e8:1e:0c:5b:71:18:6f:8c:87:b2:27:ce:1d:91:
a1:2c:83:df:d4:03:e2:c7:4f:4d:49:02:e3:74:a8:
a0:a3:97:2a:1c:9d:ad:f0:f6:5c:24:46:1e:58:8d:
c3:92:d6:b4:cd:64:ce:c3:8d:67:51:a7:71:0f:0e:
72:74:75:9f:cc:a2:22:07:4c:9a:2f:9d:e2:63:b8:
c5:8e:a7:7c:eb:84:c2:c9:cc:be:3f:42:ea:13:e3:
0f:6f:81:5f:d1:c4:6a:c9:98:ae:e2:0f:b5:2d:36:
66:1e:8b:35:7b:45:e2:ea:be:46:55:38:d4:fc:89:
60:73:a4:de:a6:54:e9:4c:b4:43:3e:59:84:1d:98:
33:75:22:58:5e:82:40:42:38:8e:5a:28:68:5d:91:
3e:65:7b:ce:7a:fc:de:d1:50:01:96:57:53:35:13:
a1:e0:84:c4:35:84:01:67:b3:1c:c5:a4:bc:b9:b1:
4e:be:41:86:13:47:5a:b3:8f:81:96:e0:4e:6a:68:
a7:57:e0:b9:21:2c:54:6a:6d:fd:95:3f:fe:a3:84:
1e:1f:31:71:52:9e:c3:93:94:bd:90:23:98:32:e7:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:32:12:A6:31:8B:0D:3F:06:DE:8B:80:94:38:7C:E3:E1:B9:1D
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
6b:df:fd:48:69:6f:dc:92:57:c6:b0:c7:41:99:32:d0:72:14:
6f:e4:4d:c1:4f:4e:e5:e0:f2:01:3d:90:c7:98:ea:fb:5b:79:
13:89:03:cd:f5:28:fa:d8:0d:0e:6b:c2:ed:44:ac:ee:cc:67:
9a:92:ec:f4:d8:d9:dd:11:dd:8f:ba:79:04:53:3f:36:a8:05:
83:2a:c2:ff:86:3a:43:81:0e:02:83:a2:3c:09:90:76:5c:2c:
0f:09:4b:3e:6c:33:9a:2b:09:70:e5:b9:00:59:db:7b:7e:a9:
46:0a:29:d5:42:d8:c5:f4:13:76:84:ca:a7:b1:cb:7e:c7:0e:
4a:19:0c:41:1c:32:40:45:a8:2d:c1:ba:3f:51:64:63:72:31:
a1:98:e4:86:5c:e7:f8:64:1a:04:8a:17:ee:61:64:c0:c1:7e:
fb:ed:56:6a:6c:3a:4c:c2:a5:09:3f:d3:dd:2b:68:9b:c9:f5:
c4:f3:07:8f:c7:c0:ca:33:32:25:1c:b7:32:be:5c:84:b6:e4:
a6:b9:b9:cf:cb:47:73:0b:5a:4e:b2:07:82:b8:03:89:6e:30:
98:4d:e9:d4:ca:c8:1a:5a:95:99:18:68:3c:ab:39:c9:19:38:
13:ea:f8:8e:19:8d:32:ee:4b:9f:1c:57:c1:29:15:0f:6d:c4:
16:2e:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:02 2025 by rpki-client