Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa
File: 326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa (raw, json)
Hash identifier: Mj2XC7qT/S8UY0gpvBfm44k32ba9coTjolpHTu/hps8=
Subject key identifier: CA:C4:22:F7:B4:CA:49:59:AC:FA:0A:45:A2:AE:BE:8E:23:DE:A7:F0
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 2335758B1653073F26C15AF67E47AC76623DC1FC
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa
Signing time: Fri 17 Nov 2023 21:59:06 +0000
ROA not before: Fri 17 Nov 2023 21:54:06 +0000
ROA not after: Fri 15 Nov 2024 21:59:06 +0000
asID: 216079
IP address blocks: 2a06:1283:c070::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:35:75:8b:16:53:07:3f:26:c1:5a:f6:7e:47:ac:76:62:3d:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 17 21:54:06 2023 GMT
Not After : Nov 15 21:59:06 2024 GMT
Subject: CN=CAC422F7B4CA4959ACFA0A45A2AEBE8E23DEA7F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:e8:66:55:7a:3f:a4:bf:43:7f:1c:96:f4:
fb:82:64:e6:f3:1e:91:6f:a5:03:70:8a:ff:9d:65:
5c:68:29:0f:f7:e0:e7:d4:34:71:0b:70:75:3f:e8:
ef:15:8c:fa:44:ce:e7:5e:53:2d:74:8b:17:eb:a7:
0e:1c:e7:92:e7:03:94:10:19:34:b6:aa:3d:df:26:
e8:c8:6e:18:2d:b8:b6:88:58:41:f3:5e:ce:4c:1b:
9a:43:62:fd:52:c2:a7:1a:62:a3:34:2e:15:54:75:
f5:f6:2c:b7:79:80:66:88:1e:2a:30:0e:37:69:0b:
ff:07:80:2c:d7:fe:23:7b:de:49:91:f2:42:83:f4:
61:34:e0:6d:99:d2:a5:e8:a5:aa:f9:0e:c5:c1:9c:
d4:4f:51:12:8a:eb:51:fc:89:96:0d:9b:5a:b3:1f:
2a:89:d6:9d:e4:ab:51:9a:95:76:4c:68:ae:47:17:
49:ef:5a:e2:e2:8a:64:1a:da:82:da:d4:5e:a0:44:
ed:bb:fe:3f:aa:41:c4:99:38:07:ef:61:0d:bc:d1:
51:0c:8e:33:93:cd:86:ed:b2:ab:0d:34:59:78:d0:
d3:33:b9:d4:b9:50:32:f2:9b:50:b1:5b:81:01:ed:
ab:c4:56:f4:0a:80:3e:3f:f7:b0:80:33:9e:de:50:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:22:F7:B4:CA:49:59:AC:FA:0A:45:A2:AE:BE:8E:23:DE:A7:F0
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c070::/44
Signature Algorithm: sha256WithRSAEncryption
91:23:44:f7:22:63:38:47:1d:f8:89:07:ba:29:f4:87:bc:07:
f1:dd:ba:0d:98:28:d2:bd:85:2d:ec:0a:6f:6e:0f:1f:d5:13:
69:4e:42:e1:ff:65:6a:6f:57:7a:3d:5a:31:18:16:c1:d4:74:
4c:51:c8:80:23:23:5d:48:35:fc:e6:e6:28:4c:7c:33:52:ae:
9c:87:22:49:f1:d4:f6:c2:18:a1:54:dc:92:f7:73:1d:24:6b:
5c:c9:a2:a5:27:16:92:89:fc:1d:6b:14:00:95:f0:d7:5d:dc:
c3:6a:dd:bc:26:4e:64:ba:8e:79:5f:1d:62:5c:a7:37:65:14:
0b:ae:9b:c3:86:7b:9c:94:91:bb:53:1c:7c:9c:49:89:30:30:
84:7c:ab:26:a6:3f:74:1f:f0:fe:30:61:37:d0:f2:68:fd:74:
f2:d8:94:10:83:41:37:db:de:5a:f2:03:fe:07:c4:80:b0:af:
5e:f5:32:50:79:7c:fe:c9:90:3b:75:66:93:d7:ce:a2:a2:df:
56:8f:88:2f:9a:2e:a6:9a:bc:8e:f5:35:54:8f:8b:bd:f8:53:
0f:c4:66:3e:7e:67:1b:ea:35:de:43:e4:4c:4b:39:fd:a6:3a:
2f:2e:09:ac:1b:d5:57:07:0d:1f:6b:82:7b:98:5d:c6:b8:54:
3b:02:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:13 2025 by rpki-client