Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633035303a3a2f34342d3438203d3e20313937363334.roa
File: 326130363a313238333a633035303a3a2f34342d3438203d3e20313937363334.roa (raw, json)
Hash identifier: XG9umeiDf9tE0pK9BE5hycmy2Mdl1xdkJtb21UofVCo=
Subject key identifier: C1:92:CC:56:62:A6:59:CB:F5:06:F3:2C:98:0B:09:34:D8:16:05:51
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 2240EAEE61255B376A554B6426DE98453666E2B4
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633035303a3a2f34342d3438203d3e20313937363334.roa
Signing time: Tue 14 Nov 2023 16:58:11 +0000
ROA not before: Tue 14 Nov 2023 16:53:11 +0000
ROA not after: Tue 12 Nov 2024 16:58:11 +0000
asID: 197634
IP address blocks: 2a06:1283:c050::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:40:ea:ee:61:25:5b:37:6a:55:4b:64:26:de:98:45:36:66:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 14 16:53:11 2023 GMT
Not After : Nov 12 16:58:11 2024 GMT
Subject: CN=C192CC5662A659CBF506F32C980B0934D8160551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:a2:03:75:8e:7c:8c:61:2e:4a:6a:b1:28:
7b:09:50:3c:33:b5:f6:73:0c:67:d6:cc:df:7e:d4:
7d:b5:96:f4:e7:7d:87:11:3c:e2:eb:69:0d:e0:23:
ac:8c:25:05:27:de:19:9b:18:78:a3:5c:81:f0:12:
89:c2:5d:3d:93:a3:da:0c:70:52:d5:88:bd:08:75:
ef:f2:0c:67:79:06:c8:2b:33:2e:f3:ab:9e:e6:1f:
5f:f2:c8:eb:2a:82:9f:f8:95:71:9f:57:74:56:6b:
b2:4d:e9:59:ad:50:c0:5f:e8:f6:f6:7b:57:36:54:
20:8d:51:e6:1a:f3:41:19:94:ab:73:06:a9:75:ce:
86:a8:2e:52:e9:e7:99:e3:50:e1:c9:09:83:0b:17:
7d:2a:27:65:10:81:5e:bc:bf:17:3e:51:a1:e2:d5:
f7:98:8c:96:55:d0:45:98:cf:81:db:96:02:b3:83:
72:77:28:af:15:d1:dd:48:33:d3:fd:72:82:7f:f7:
a0:62:4e:ce:cc:e7:8a:ba:30:f2:6c:ed:6a:28:dc:
f5:30:f0:3e:96:4e:92:a8:1a:8c:ac:82:06:fc:aa:
55:df:48:26:48:d2:01:b9:f5:1f:05:cb:19:7f:df:
dd:5f:dd:38:d8:d9:96:b5:50:52:5e:9a:16:b0:c8:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:CC:56:62:A6:59:CB:F5:06:F3:2C:98:0B:09:34:D8:16:05:51
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633035303a3a2f34342d3438203d3e20313937363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c050::/44
Signature Algorithm: sha256WithRSAEncryption
0c:ff:53:51:5c:1b:3d:14:1d:74:47:a7:5b:0a:88:de:b4:54:
f0:ba:89:8b:63:23:ff:9f:33:62:4c:3f:d7:76:89:b5:b4:93:
6d:78:69:6f:b4:69:55:91:5e:00:e5:87:fd:f4:23:2a:c6:0b:
b0:32:b6:33:25:79:8e:cf:70:ca:63:58:57:01:d8:89:29:00:
45:04:3a:8d:df:79:f0:47:1b:9f:4f:49:35:04:86:5c:c4:c1:
a0:11:91:cf:5f:68:1b:99:e2:43:ed:3a:96:06:8b:fb:f5:a4:
1c:aa:a1:cd:ac:7f:9b:4c:60:43:22:b6:36:a3:c8:fd:26:45:
00:b7:e6:66:dd:9a:bc:2c:64:4e:0b:be:5e:98:ca:b3:29:72:
ea:eb:df:f9:8d:31:4d:72:fc:5b:e5:87:2e:e5:e2:59:e7:b8:
e4:7e:4f:d1:ce:1c:b6:bc:aa:78:8f:54:16:e8:e1:5c:8c:cb:
50:65:5d:e7:45:9f:0f:c3:15:00:9d:74:7e:22:2a:8e:d3:da:
42:e6:4e:cd:d5:11:ee:a7:90:7d:7d:aa:19:1e:00:53:fd:42:
ab:f5:a3:81:31:e6:b1:70:d2:cb:4f:48:ff:60:7b:fa:bc:4e:
f1:e2:b0:a2:97:3f:73:d2:de:25:bb:7a:23:d5:12:69:56:98:
5f:df:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:16 2025 by rpki-client