Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: dwDsbKQsNndI3uzYUGbi10i2SAsypWuYqynhCwtA0G4=
Subject key identifier: C5:E6:6D:31:FB:ED:F0:48:21:A4:2B:43:3C:34:45:10:E5:2F:80:30
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 55C549F38DEA52AE6F68050E9F2350F5FA89442F
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
Signing time: Fri 10 May 2024 11:33:31 +0000
ROA not before: Fri 10 May 2024 11:28:31 +0000
ROA not after: Fri 09 May 2025 11:33:31 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffde::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c5:49:f3:8d:ea:52:ae:6f:68:05:0e:9f:23:50:f5:fa:89:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: May 10 11:28:31 2024 GMT
Not After : May 9 11:33:31 2025 GMT
Subject: CN=C5E66D31FBEDF04821A42B433C344510E52F8030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:35:02:c0:30:34:2f:e3:1a:38:a6:4d:0e:
19:61:7e:c3:1c:72:6f:d0:fe:bf:52:3b:63:7a:04:
60:f2:09:37:ed:be:9b:61:22:d7:43:22:5f:6b:be:
43:1c:2d:1d:30:aa:d8:1c:ac:63:29:fe:af:9f:be:
51:d6:db:8a:d9:2d:d2:7d:c4:4e:a8:a6:d5:47:03:
fb:b4:57:7e:98:83:d4:a1:4b:51:b0:6b:3d:e2:87:
81:cc:64:c2:42:3d:88:7b:a9:db:8a:aa:f6:5f:2f:
9f:3a:6e:65:72:a5:2f:78:58:8a:bb:1a:9b:e9:b3:
6d:57:0d:d6:bf:5f:3e:ff:f4:13:76:0e:44:91:5c:
10:56:63:c5:ed:b5:11:09:ae:77:7b:6d:8e:a1:18:
7d:42:57:47:87:4a:b7:25:70:6a:a7:9a:29:0b:ce:
84:fd:a2:45:46:03:85:5b:8d:3b:01:0c:00:1c:f9:
e2:21:cf:ae:6e:18:44:0b:28:bf:56:f8:15:f0:4f:
c7:84:a1:ce:b7:18:d7:b5:a1:78:df:b9:9d:6a:93:
ac:9b:e5:ea:02:94:0a:8a:18:18:26:ca:31:6a:cb:
4b:5e:91:27:a5:8a:96:4c:df:48:84:37:b9:29:48:
de:2a:06:8f:56:ab:b8:13:8a:02:d2:b2:c0:27:a1:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:6D:31:FB:ED:F0:48:21:A4:2B:43:3C:34:45:10:E5:2F:80:30
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffde::/48
Signature Algorithm: sha256WithRSAEncryption
2b:04:ca:11:40:0f:09:b0:b1:8f:a2:de:32:8a:0d:be:ab:d5:
a9:76:c3:ef:e4:93:5c:bf:aa:30:c4:21:18:81:d6:04:4d:4a:
b5:e4:83:8e:35:25:79:15:c8:42:8b:b2:31:cb:ff:0c:03:28:
ef:f4:51:ea:32:68:e2:57:b2:a6:79:a9:51:26:34:e4:e5:cc:
72:20:82:0b:16:4b:00:78:a1:5e:f7:57:53:78:6e:10:60:b1:
cd:2b:2f:8b:2a:c9:ec:c2:fd:dc:8a:98:df:a4:ba:55:ae:9b:
be:a0:e8:50:dd:11:f4:b6:b6:a9:6d:db:c8:ef:79:27:08:6b:
a5:88:f2:fb:e9:1e:04:28:dc:28:c4:54:b7:6e:c9:b8:de:8a:
f1:1e:49:5f:ca:36:9a:3a:5e:26:c9:70:b0:4d:ae:1d:4a:de:
23:9f:0a:81:cd:7c:46:a5:0c:27:a0:7b:37:33:47:2b:bd:71:
39:84:89:31:59:28:24:66:e7:69:a8:c5:13:e6:4d:4f:c7:18:
25:32:72:aa:2b:04:3f:51:d5:6e:5a:6f:be:b7:f6:2f:c3:29:
eb:88:ae:00:bd:df:d3:63:23:0e:66:19:92:da:c9:99:cf:ef:
6b:27:6d:be:79:1f:7d:a1:d7:2f:9b:b5:af:a5:45:de:b2:09:
10:7c:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:14 2024 by rpki-client on console-fra.rpki-client.org