Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e20323135363439.roa
File: 326130363a313238333a623430303a3a2f34302d3438203d3e20323135363439.roa (raw, json)
Hash identifier: /bsT6YWTvW5CUOKMuzAihpxwOUNXTrdL/oP20EWf5aw=
Subject key identifier: C8:05:31:94:AD:46:ED:32:C7:3E:D4:AC:61:C0:82:AF:EF:7A:62:5A
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 1B88148F4D6C00479EBE95CB40F02821ED996647
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e20323135363439.roa
Signing time: Wed 24 Jan 2024 18:14:04 +0000
ROA not before: Wed 24 Jan 2024 18:09:04 +0000
ROA not after: Wed 22 Jan 2025 18:14:04 +0000
asID: 215649
IP address blocks: 2a06:1283:b400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:88:14:8f:4d:6c:00:47:9e:be:95:cb:40:f0:28:21:ed:99:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Jan 24 18:09:04 2024 GMT
Not After : Jan 22 18:14:04 2025 GMT
Subject: CN=C8053194AD46ED32C73ED4AC61C082AFEF7A625A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:a3:9b:11:b9:3b:4b:17:8f:08:6f:7e:7d:
1d:70:ad:c1:66:27:bf:75:bb:35:4e:3c:a7:57:bb:
e9:3b:ca:5f:1a:38:c6:e7:bc:ca:04:f0:70:3b:cd:
65:35:6c:e8:80:14:21:a0:2e:bc:f9:e2:ab:26:e9:
2e:86:4f:ba:2c:8b:42:10:e1:ef:4e:89:f2:6e:d7:
34:6b:d0:46:d5:cd:90:b3:6a:8d:b6:38:b7:de:dc:
f0:84:52:71:da:2a:d6:40:ad:a9:41:96:e1:c8:ee:
17:1a:20:b5:bf:ad:9d:2e:e3:65:5d:56:d4:f9:9d:
c0:71:33:e1:81:14:2b:88:a5:bd:34:d7:ca:24:73:
f9:57:67:49:d5:ff:43:58:81:63:23:9b:0f:aa:4a:
8c:09:50:57:15:69:5e:04:00:fd:d6:1c:7d:42:a9:
b5:87:cc:49:14:18:c9:69:fc:81:c5:4a:67:88:90:
29:d6:68:7f:09:60:07:6f:41:01:f5:5f:79:52:b3:
e0:c3:20:e9:5b:53:05:88:45:4d:87:51:db:bc:e1:
98:b0:67:3c:c6:64:8b:8d:83:85:c8:99:57:66:8a:
7e:e1:18:9c:50:85:6f:65:ef:2b:69:06:a5:44:0b:
8c:e0:92:a7:3a:1f:51:5a:48:f3:68:ab:f2:3d:f2:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:31:94:AD:46:ED:32:C7:3E:D4:AC:61:C0:82:AF:EF:7A:62:5A
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e20323135363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b400::/40
Signature Algorithm: sha256WithRSAEncryption
4b:0b:3f:6c:0e:b5:89:fa:76:1d:cd:24:5a:1a:40:01:60:7a:
4b:52:81:32:3a:07:30:60:91:11:67:f2:61:62:4e:2f:11:65:
be:64:f9:11:37:15:3a:0b:79:94:b7:25:9c:b9:11:6a:f0:be:
9e:0c:4a:3a:40:48:18:1b:83:39:bc:f8:86:99:8d:09:c6:56:
94:9e:aa:1a:27:f8:00:6c:b0:19:e7:cc:0a:f6:37:49:01:67:
a5:f7:ef:40:00:f2:d7:3e:fc:63:4f:05:71:00:63:0b:d0:09:
c3:e2:0f:f7:09:bc:ec:5c:fd:93:9b:3e:3c:b2:b8:1c:6a:97:
69:a2:78:22:9e:0b:1a:b3:09:d1:8c:ec:90:fe:bd:a5:74:1c:
6d:fa:0a:45:56:03:7b:2e:02:6c:1b:0a:79:7b:3f:cf:36:9c:
6b:06:45:0b:b4:13:3a:59:ec:ac:5d:ba:06:d9:9e:94:55:46:
b2:11:97:5b:3b:e0:ed:77:c8:0f:d8:33:ff:72:b3:9f:4c:47:
92:bb:54:70:46:28:01:20:69:85:92:ed:b2:89:ef:29:c0:fd:
95:5a:2c:65:c1:c9:72:a6:65:31:9a:22:c0:22:c7:4f:c5:4f:
d1:10:50:ff:b8:bc:83:c1:c3:97:e0:68:ff:0f:41:c0:24:c9:
19:21:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:08 2025 by rpki-client