Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633032303a3a2f34342d3438203d3e20323136303635.roa
File: 326130363a313238333a633032303a3a2f34342d3438203d3e20323136303635.roa (raw, json)
Hash identifier: THXfvnVOUJm33oRMoei47GBaciq4nRMDuBh8fCWm9y4=
Subject key identifier: 5A:D2:63:87:3C:0F:B9:96:0E:80:12:24:65:D3:04:2B:CF:30:0B:68
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 267D3B7D8E452243F62A8AB44A8EA557C32AAC08
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633032303a3a2f34342d3438203d3e20323136303635.roa
Signing time: Tue 14 Nov 2023 16:51:07 +0000
ROA not before: Tue 14 Nov 2023 16:46:07 +0000
ROA not after: Tue 12 Nov 2024 16:51:07 +0000
asID: 216065
IP address blocks: 2a06:1283:c020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7d:3b:7d:8e:45:22:43:f6:2a:8a:b4:4a:8e:a5:57:c3:2a:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 14 16:46:07 2023 GMT
Not After : Nov 12 16:51:07 2024 GMT
Subject: CN=5AD263873C0FB9960E80122465D3042BCF300B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:7e:84:39:33:00:be:21:c6:40:51:9a:22:
0d:ee:90:f5:4b:7d:21:de:e8:33:69:ff:ab:52:ac:
c0:bb:b1:9a:ed:48:78:59:77:d3:0b:b2:f1:6f:7b:
7e:35:07:a5:a1:1c:80:5b:4b:ad:66:d5:e9:a3:53:
92:d1:4e:45:be:96:8e:93:d2:e0:d5:22:e4:94:53:
0e:53:93:f9:95:23:c5:bd:2e:b7:50:ab:5e:0b:89:
52:88:3f:9d:87:31:9c:ce:bb:32:f6:cf:11:39:8c:
df:30:7c:58:d8:bf:d2:9e:99:14:46:45:9f:7d:d1:
26:e7:a7:5c:df:78:6b:33:9b:30:e0:ba:a5:fb:e4:
24:9d:1c:10:98:dd:7c:de:03:c0:5f:d3:be:aa:79:
c5:69:1a:af:96:6a:af:05:a5:cd:a1:0b:8d:a7:fe:
5c:66:6a:6d:c3:69:6d:60:9d:88:f3:79:0a:ca:df:
3f:1e:d0:8d:4d:2f:20:eb:33:c3:e7:e4:7d:87:24:
00:3e:35:65:4e:1e:37:e7:93:67:6e:b7:f9:9c:69:
3e:66:7b:cd:93:27:3c:f4:63:37:30:8c:11:4c:c2:
fd:7d:45:93:70:52:2e:25:ca:92:b5:13:04:e0:48:
e5:8c:9e:5a:a1:71:02:08:73:c3:00:b2:e1:a7:da:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:63:87:3C:0F:B9:96:0E:80:12:24:65:D3:04:2B:CF:30:0B:68
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633032303a3a2f34342d3438203d3e20323136303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c020::/44
Signature Algorithm: sha256WithRSAEncryption
05:c7:de:47:69:e9:a2:83:aa:39:06:36:3e:e9:66:73:9d:29:
22:bb:9e:23:70:e0:46:aa:9e:4d:d0:b7:38:20:7b:a0:62:60:
20:8c:aa:e0:31:ba:c3:71:e4:47:d1:a4:9f:02:ac:66:6b:04:
9a:9c:93:86:cb:f2:9c:62:eb:1f:86:08:ef:29:27:74:c6:9d:
89:78:ff:e4:c8:81:82:4b:05:28:0a:0f:f9:56:12:50:d6:42:
68:6f:1b:c6:17:ac:57:a8:bb:39:a2:a4:5f:8c:ab:1c:f0:49:
86:96:b0:aa:08:5c:35:a8:5a:cd:56:72:a6:23:52:af:d9:00:
71:cf:b6:bc:f4:d6:14:df:67:e6:0e:1e:66:b5:ca:cc:08:ff:
af:b2:da:2f:d0:c4:a2:e6:46:b6:9a:13:74:c2:5a:b6:b6:41:
c2:6b:a8:d5:62:3d:ba:ae:8a:96:94:e4:db:a9:a7:ad:5f:37:
e8:da:86:75:be:67:ea:eb:8e:30:1e:55:69:d7:3b:88:e2:ee:
d4:8b:b6:3f:2a:60:f9:b3:8c:03:6e:7a:22:61:89:8b:2d:96:
a3:1d:2a:68:8a:5c:9f:93:85:54:6f:dd:08:60:00:94:1b:cb:
3d:f4:c8:2e:d5:ae:7f:73:a5:6c:44:f9:0e:ac:8e:12:c3:b7:
ff:3e:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:41:21 2025 by rpki-client