Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e203434353932.roa
File: 326130363a313238333a623430303a3a2f34302d3438203d3e203434353932.roa (raw, json)
Hash identifier: pJ9aEYV5S9UxbHR43IOC2mwCqqFZTEGUjCqbXKak4tE=
Subject key identifier: 80:28:9E:1B:83:F5:5A:6C:83:C7:CD:77:DC:F3:E3:5F:56:8E:2A:EE
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 1A58F70FD5A0F89BA0DF4A18C81FF7BB6067D94B
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e203434353932.roa
Signing time: Mon 22 Jan 2024 10:10:18 +0000
ROA not before: Mon 22 Jan 2024 10:05:18 +0000
ROA not after: Mon 20 Jan 2025 10:10:18 +0000
asID: 44592
IP address blocks: 2a06:1283:b400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:58:f7:0f:d5:a0:f8:9b:a0:df:4a:18:c8:1f:f7:bb:60:67:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Jan 22 10:05:18 2024 GMT
Not After : Jan 20 10:10:18 2025 GMT
Subject: CN=80289E1B83F55A6C83C7CD77DCF3E35F568E2AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:a6:44:92:49:1b:c6:94:20:c2:92:85:e1:
a1:7b:7f:3c:75:e9:4b:c2:2b:d7:9d:c6:a7:46:01:
64:87:f3:ce:44:b6:b8:fa:dc:71:93:c9:2c:88:48:
6d:07:2d:8d:31:89:fe:96:4e:68:9d:6d:99:ad:68:
ff:5f:b3:ec:49:5f:12:25:30:51:a1:44:0f:01:9f:
4c:2e:1a:6e:de:c5:1d:84:e0:f4:60:65:11:55:b5:
12:e3:7d:63:c2:9d:44:a0:c0:51:91:eb:13:9d:7e:
95:5d:48:f7:2e:9f:14:7d:d9:2f:69:b0:96:2a:e7:
8c:56:56:ee:ba:28:a2:66:32:81:89:58:d9:38:ab:
b0:2b:46:ad:a1:f4:e6:16:45:c7:13:72:d6:98:e2:
37:4b:d6:88:07:83:9c:a7:f1:46:a2:37:d2:52:3e:
9e:9f:62:a1:39:ca:0b:3e:a1:fd:ae:37:43:2b:66:
65:c5:23:e3:c5:39:67:8d:1a:03:54:a1:7a:2d:5e:
fc:77:0f:1d:7a:53:d1:ef:1c:dc:7b:14:a3:f2:ba:
2b:f5:04:72:b9:0e:60:a2:f8:79:6f:75:7f:e9:c0:
db:c6:68:08:32:73:7b:e9:df:b8:1e:f3:e2:5d:68:
65:03:22:fa:da:1c:a3:4c:5f:f9:e2:6a:18:80:1f:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:9E:1B:83:F5:5A:6C:83:C7:CD:77:DC:F3:E3:5F:56:8E:2A:EE
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623430303a3a2f34302d3438203d3e203434353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b400::/40
Signature Algorithm: sha256WithRSAEncryption
28:75:30:53:e5:92:76:75:fd:a6:f6:a1:81:b3:15:00:27:c1:
c9:2a:63:25:cb:4f:4b:ce:09:f3:0d:4c:85:ef:9c:e2:a6:b8:
03:c2:09:2a:4d:72:d0:72:c7:d3:52:c5:a9:9a:16:3b:96:27:
6d:5a:67:57:20:a6:41:07:3f:93:b1:ba:23:c0:10:22:a8:d0:
55:a4:9d:63:06:63:4a:1a:be:9f:bf:09:75:14:69:56:38:c1:
f4:6f:07:8e:95:c5:38:d7:e3:4e:5d:da:75:5b:11:b0:64:71:
cd:f9:66:cf:e3:31:a0:12:58:83:45:57:70:26:24:27:ff:02:
d6:0d:28:42:65:39:98:cc:e8:9c:13:aa:7e:9a:90:8e:42:21:
38:c4:bf:59:4f:84:1a:88:c4:46:c9:d3:54:08:64:63:a0:d7:
66:ac:1a:17:65:69:a7:e6:db:1d:0d:23:32:65:13:45:93:83:
3f:38:cc:c4:21:e6:e0:12:4b:b6:25:72:2f:4d:79:fd:9c:28:
6e:c8:30:1a:60:8e:34:d2:2a:25:9a:28:8e:2d:39:6a:d7:6c:
b2:ae:86:65:48:68:0f:0a:24:61:a5:21:19:a7:4f:c6:b5:84:
bc:06:67:d4:a8:4b:d0:96:3e:94:c2:d6:79:29:44:f2:d2:71:
fb:1b:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:10 2025 by rpki-client