Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: coLv0Em4lO6ODSQvTCqwm2Wsr6tH1gV+MoI5Fimt8sg=
Subject key identifier: DC:E3:66:DF:A9:6B:B8:82:1E:D9:5B:97:5B:34:D6:25:69:41:24:4D
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 24EE62832B25FCC55184C9AE10397AF13C9B12C0
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa
Signing time: Thu 27 Jun 2024 19:31:11 +0000
ROA not before: Thu 27 Jun 2024 19:26:11 +0000
ROA not after: Thu 26 Jun 2025 19:31:11 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffdd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ee:62:83:2b:25:fc:c5:51:84:c9:ae:10:39:7a:f1:3c:9b:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Jun 27 19:26:11 2024 GMT
Not After : Jun 26 19:31:11 2025 GMT
Subject: CN=DCE366DFA96BB8821ED95B975B34D6256941244D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:63:aa:e9:f6:3c:2a:d4:b1:17:a6:d4:2b:
8b:fd:7c:69:43:09:4e:ba:98:ff:32:16:a7:33:e6:
6d:41:1e:b0:df:bf:73:52:02:c9:99:b5:e1:11:6a:
c6:fe:f4:7e:2d:c5:ee:3f:81:87:c9:d3:6a:56:d8:
9f:ab:aa:36:9d:73:d8:16:e5:90:f3:13:21:4d:2f:
0f:87:e1:25:a9:02:60:91:c6:bb:79:13:94:ab:23:
00:e6:1f:ae:5e:37:35:15:44:7b:0d:cf:ee:9c:95:
12:ea:f3:d7:9e:6c:33:8c:04:ac:cd:c1:bf:e6:7f:
33:15:67:2d:b3:ab:01:7f:d4:4c:f6:5d:46:96:5f:
80:9d:f1:fb:41:6c:28:b5:32:2a:65:00:a6:c7:46:
06:f0:98:60:32:14:2c:44:ba:23:b5:af:1d:00:cc:
2f:2c:e0:a5:0d:db:a9:e1:18:b8:05:b4:a1:9b:71:
e8:34:b0:10:26:f2:8f:0e:37:10:76:8f:22:61:7f:
98:e0:00:5c:d5:43:66:90:24:88:29:1b:49:77:5d:
9a:b3:14:83:76:f0:68:7e:64:15:2d:f4:d7:e7:90:
8a:c8:c3:8f:d3:ed:ae:93:c8:35:73:08:41:85:d4:
b5:8e:c0:50:0c:33:64:d6:1d:6c:fb:f7:41:84:b3:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:66:DF:A9:6B:B8:82:1E:D9:5B:97:5B:34:D6:25:69:41:24:4D
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffdd::/48
Signature Algorithm: sha256WithRSAEncryption
15:77:4f:79:43:0a:47:d5:6b:fc:46:af:a5:5f:e2:53:22:4a:
c8:c3:65:bf:ff:f7:b0:0c:e4:9e:4a:1b:b4:eb:bd:5c:b9:01:
69:8b:00:35:88:1b:91:a0:7f:3a:6a:b9:f6:cc:49:bf:15:78:
8c:80:26:3b:92:eb:1a:d2:52:aa:96:f5:4e:cf:9c:3c:4e:4c:
3b:8b:76:90:07:12:1c:19:88:87:0e:96:7f:0f:4a:fb:8a:13:
21:a1:40:2c:c5:8f:e0:9b:f0:0e:14:05:9d:36:32:f5:1f:94:
00:f5:fe:fb:98:8d:4f:ea:97:e0:61:58:3d:d1:40:c6:f9:dd:
78:33:28:1d:22:c2:7f:ea:69:69:11:0c:13:2b:0c:89:c7:35:
b5:e6:24:99:64:f9:82:2d:89:cf:b1:2f:ba:36:c4:f8:42:8f:
50:b4:8e:83:7b:cf:b5:41:46:74:cf:62:58:86:98:a5:91:14:
75:7c:ae:e9:cb:d1:ec:e2:2f:b2:65:1c:03:e8:c2:8c:25:c1:
3a:ea:e6:2a:2a:13:b3:b1:80:8e:e7:0f:51:60:3f:0d:96:55:
48:9b:c8:f1:e2:f7:92:5a:15:28:de:c9:3b:8a:71:85:99:0f:
d0:9d:71:fd:f6:03:a9:be:2c:3b:79:5f:12:4f:c8:46:f1:ef:
e4:86:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:40 2025 by rpki-client