Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633036303a3a2f34342d3438203d3e20313937343334.roa
File: 326130363a313238333a633036303a3a2f34342d3438203d3e20313937343334.roa (raw, json)
Hash identifier: BjM2BgsyZM8YDZ4f35o6+mXY8tcj0ILCZGmBpsHP6Zo=
Subject key identifier: A2:FE:6F:BF:52:AE:11:AD:0D:04:ED:99:03:D9:83:E2:D8:FD:C0:DE
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 64EA10742757C53F4BA8D5D4D285438E62B45DC8
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633036303a3a2f34342d3438203d3e20313937343334.roa
Signing time: Tue 14 Nov 2023 16:58:41 +0000
ROA not before: Tue 14 Nov 2023 16:53:41 +0000
ROA not after: Tue 12 Nov 2024 16:58:41 +0000
asID: 197434
IP address blocks: 2a06:1283:c060::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ea:10:74:27:57:c5:3f:4b:a8:d5:d4:d2:85:43:8e:62:b4:5d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 14 16:53:41 2023 GMT
Not After : Nov 12 16:58:41 2024 GMT
Subject: CN=A2FE6FBF52AE11AD0D04ED9903D983E2D8FDC0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:81:3b:79:31:e2:23:3b:1b:42:07:0a:f0:
53:8e:46:0b:58:cc:aa:27:c4:35:86:97:6c:ae:ae:
81:c0:6b:d9:ca:91:34:d9:1b:cc:9f:82:8e:25:da:
d3:27:cd:26:29:c7:71:b2:65:74:20:20:8b:4b:ca:
16:de:0c:b7:e1:e8:0e:aa:39:fa:20:38:14:90:55:
fe:a6:a2:92:3b:bd:10:1d:29:e9:8a:ec:2a:09:e7:
78:83:73:8d:25:38:c9:89:29:1b:e3:95:87:af:59:
85:2a:f5:47:cd:1f:a2:cf:12:69:3e:1e:f5:2f:86:
21:9e:6c:58:30:95:9f:65:77:5a:e2:7f:a0:78:2f:
74:f0:cc:64:ea:c0:9c:87:5e:06:b7:d6:b9:20:3e:
85:3c:f9:35:6a:a6:19:9a:12:6c:63:e8:92:55:ab:
a1:24:99:07:20:ca:43:e9:37:2c:f0:3d:26:f9:78:
46:f2:5f:44:ce:8e:e3:09:64:7b:7c:d2:7f:6c:1d:
d7:96:bc:09:88:29:e1:1d:2b:6e:ba:67:4a:84:2e:
4f:e3:b9:20:7a:7f:40:e8:f6:06:5e:6f:23:dd:c2:
21:27:c0:f7:0f:b3:69:7e:c6:92:8f:f5:7e:37:70:
5b:5b:88:30:b2:58:ab:d6:fa:0c:2c:94:77:fe:41:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:6F:BF:52:AE:11:AD:0D:04:ED:99:03:D9:83:E2:D8:FD:C0:DE
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633036303a3a2f34342d3438203d3e20313937343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c060::/44
Signature Algorithm: sha256WithRSAEncryption
6d:79:14:54:52:c5:b7:6b:80:e9:b2:20:f1:75:75:59:7e:87:
62:76:e6:4a:61:41:dc:a6:6e:f2:dd:36:e4:d8:14:9f:f3:c6:
a9:0f:ba:ca:2e:42:99:1d:86:ac:1f:f2:b7:6f:32:88:18:b6:
2d:11:bf:fa:9d:e3:4d:fc:39:ac:0d:18:4c:94:f5:33:79:36:
a0:e6:3b:e5:68:ce:24:b7:2e:6c:6b:16:6d:c8:a0:b9:26:af:
ad:69:a7:f2:58:fa:b8:05:a1:ef:23:0d:58:41:4d:d9:a7:fa:
64:b9:8a:58:9f:18:f0:4c:31:0a:74:b9:ba:9e:6f:51:d7:cf:
ad:21:cd:2d:3a:71:aa:0e:d0:4d:c8:5e:d2:57:0a:a7:ad:7f:
dd:48:8b:a7:ea:fd:8a:2c:ed:c1:9f:22:80:d7:cb:a5:45:29:
c2:e1:dd:d8:40:7f:b5:fb:de:31:a2:21:98:93:1b:89:25:64:
0d:5a:11:ce:39:a7:06:c5:32:29:75:2c:7a:4b:65:89:52:d8:
7a:bd:46:e6:99:a7:23:ff:27:86:6e:20:70:5b:b9:a4:1b:cb:
f5:7a:77:7a:81:60:00:90:ba:5a:65:e2:91:bf:93:9e:1f:10:
bc:9f:5c:7b:3f:08:42:c5:a6:f0:17:3a:14:bc:ca:3e:29:04:
e1:ae:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:56 2025 by rpki-client