Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623630303a3a2f34302d3438203d3e20323135363439.roa
File: 326130363a313238333a623630303a3a2f34302d3438203d3e20323135363439.roa (raw, json)
Hash identifier: 9vgBD206rkuFkBOqrmKumMdSXIwhpiuVZO+yVmeIUXs=
Subject key identifier: EA:BE:B4:54:9D:C9:83:F0:E6:D3:48:88:67:B7:68:19:06:3A:77:77
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 511EFACEB7A7697DD2A96AA3FDFE840485DE3337
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623630303a3a2f34302d3438203d3e20323135363439.roa
Signing time: Thu 01 Feb 2024 14:51:47 +0000
ROA not before: Thu 01 Feb 2024 14:46:47 +0000
ROA not after: Thu 30 Jan 2025 14:51:47 +0000
asID: 215649
IP address blocks: 2a06:1283:b600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1e:fa:ce:b7:a7:69:7d:d2:a9:6a:a3:fd:fe:84:04:85:de:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Feb 1 14:46:47 2024 GMT
Not After : Jan 30 14:51:47 2025 GMT
Subject: CN=EABEB4549DC983F0E6D3488867B76819063A7777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:bd:8a:f4:1a:2d:47:4f:bb:6a:a2:8b:a5:
da:13:1e:2e:48:27:04:8d:d0:74:83:16:0f:76:1e:
1e:1f:a0:97:0e:f9:b4:21:52:c6:e1:22:0d:e3:65:
68:7d:89:f9:d6:49:a6:fe:d7:89:02:ab:8e:7c:0e:
cd:c9:56:23:cf:45:5c:d4:80:a4:31:09:e6:3b:39:
a9:7e:d2:c8:24:a7:0c:48:f0:e8:a2:8d:fc:cf:15:
92:b8:1f:83:df:36:d7:cc:9b:9e:ef:e9:a5:a0:df:
fa:36:01:6b:ea:01:41:7b:06:7e:2d:2b:3a:85:8d:
f0:cc:58:a2:8c:58:49:e1:a8:5e:c9:a5:66:d8:a3:
a2:3a:6f:29:76:cb:a0:13:bb:18:e2:ff:f8:ba:e2:
e2:0e:70:d9:e8:23:c9:a5:8f:a7:0b:18:ce:b1:86:
9d:95:63:49:33:8b:f6:4c:aa:03:a8:bc:98:ba:a1:
5b:35:eb:03:fe:29:24:79:fb:3e:91:37:74:d7:51:
ea:41:b6:cb:bd:ab:76:7a:6e:91:7b:ca:c5:a7:37:
08:7f:4c:2b:59:91:cd:97:db:df:ce:3e:8b:b3:e4:
9d:e1:df:c7:e7:57:6d:4c:59:82:1a:a0:8c:f3:5b:
1b:37:f8:ec:24:d2:a3:dc:95:10:a7:ad:27:0f:70:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:B4:54:9D:C9:83:F0:E6:D3:48:88:67:B7:68:19:06:3A:77:77
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623630303a3a2f34302d3438203d3e20323135363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b600::/40
Signature Algorithm: sha256WithRSAEncryption
06:e5:f0:ac:7e:1b:71:00:90:fd:db:e9:a3:85:64:dd:8e:d1:
9d:97:1d:52:55:76:10:7f:ec:58:83:9a:09:c8:eb:77:44:22:
ae:79:f0:69:d6:fb:00:cc:9e:d7:f9:94:96:61:c6:22:53:d2:
ab:85:aa:80:94:bb:98:00:10:73:25:56:b8:8b:0e:5e:35:be:
26:83:a4:32:3a:d0:20:76:d0:7a:0d:cb:2e:5d:da:60:72:fe:
5f:d3:03:81:93:b3:79:02:2a:89:f9:cf:0d:8d:10:17:a3:71:
17:a5:a2:40:16:7d:1a:80:8a:69:3b:21:7f:3d:ea:54:9c:3c:
7d:61:6c:68:06:c0:e4:a8:f1:49:60:69:ea:0d:b6:90:0a:ba:
3e:d6:d8:b2:3e:d1:a6:ee:e7:15:76:cc:51:be:5b:9d:3f:b9:
d6:c2:d3:57:5d:9c:09:26:e2:19:82:a7:6f:23:bb:9b:29:88:
1f:4c:0f:84:83:80:e0:43:63:58:55:2d:ce:9f:59:d5:a4:ad:
0d:51:dc:ca:2b:82:11:9c:3a:72:75:3c:48:eb:ad:56:40:41:
df:74:b6:f6:6e:9b:45:96:4b:4d:ed:0d:a5:30:9f:f6:f5:b8:
22:37:70:9c:c5:f8:7e:f5:16:56:f9:e2:39:b3:5c:d4:76:61:
53:a7:a8:b5
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUUR76zrenaX3SqWqj/f6EBIXeMzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yNDAyMDExNDQ2NDdaFw0yNTAxMzAxNDUxNDdaMDMxMTAvBgNV
BAMTKEVBQkVCNDU0OURDOTgzRjBFNkQzNDg4ODY3Qjc2ODE5MDYzQTc3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzqr2K9BotR0+7aqKLpdoTHi5I
JwSN0HSDFg92Hh4foJcO+bQhUsbhIg3jZWh9ifnWSab+14kCq458Ds3JViPPRVzU
gKQxCeY7Oal+0sgkpwxI8OiijfzPFZK4H4PfNtfMm57v6aWg3/o2AWvqAUF7Bn4t
KzqFjfDMWKKMWEnhqF7JpWbYo6I6byl2y6ATuxji//i64uIOcNnoI8mlj6cLGM6x
hp2VY0kzi/ZMqgOovJi6oVs16wP+KSR5+z6RN3TXUepBtsu9q3Z6bpF7ysWnNwh/
TCtZkc2X29/OPouz5J3h38fnV21MWYIaoIzzWxs3+Owk0qPclRCnrScPcCyRAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQU6r60VJ3Jg/Dm00iIZ7doGQY6d3cwHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzQzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoGEoO2MA0GCSqGSIb3DQEBCwUAA4IBAQAG5fCsfhtxAJD92+mj
hWTdjtGdlx1SVXYQf+xYg5oJyOt3RCKuefBp1vsAzJ7X+ZSWYcYiU9KrhaqAlLuY
ABBzJVa4iw5eNb4mg6QyOtAgdtB6DcsuXdpgcv5f0wOBk7N5AiqJ+c8NjRAXo3EX
paJAFn0agIppOyF/PepUnDx9YWxoBsDkqPFJYGnqDbaQCro+1tiyPtGm7ucVdsxR
vludP7nWwtNXXZwJJuIZgqdvI7ubKYgfTA+Eg4DgQ2NYVS3On1nVpK0NUdzKK4IR
nDpydTxI661WQEHfdLb2bptFlktN7Q2lMJ/29bgiN3Ccxfh+9RZW+eI5s1zUdmFT
p6i1
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org