Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
File: 326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: e8uxospGmQw0ZUZNRKhI0pFWG//ZP7/hFvH3Jb3n4UU=
Subject key identifier: 59:B5:58:E6:24:CD:ED:65:3C:C7:76:5E:30:6D:60:68:79:C2:28:3C
Certificate issuer: /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial: 2AA07ED541EDFDB410B3CAFBCB15537662A72ACE
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time: Fri 19 May 2023 23:17:02 +0000
ROA not before: Fri 19 May 2023 23:12:02 +0000
ROA not after: Fri 17 May 2024 23:17:02 +0000
asID: 57870
IP address blocks: 2a13:df81:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a0:7e:d5:41:ed:fd:b4:10:b3:ca:fb:cb:15:53:76:62:a7:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Validity
Not Before: May 19 23:12:02 2023 GMT
Not After : May 17 23:17:02 2024 GMT
Subject: CN=59B558E624CDED653CC7765E306D606879C2283C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:9e:b3:c6:7a:e4:32:bf:a3:1a:b0:c0:15:
32:24:f0:0c:ae:cd:7f:27:b2:e0:57:bd:d0:21:06:
c8:a9:c9:bd:65:a8:ce:97:83:58:ed:14:6a:c7:e9:
1c:22:3a:61:4e:ff:7e:d0:54:41:9a:6b:2e:08:47:
a3:b9:a2:a4:f5:16:7f:15:85:6e:1b:da:50:c6:c9:
21:ce:d0:b2:06:a7:30:d7:2e:7c:8f:9a:4a:9b:31:
32:27:e4:96:d5:2a:d3:b3:18:ed:d6:ad:f4:71:7b:
c0:1d:2e:78:ba:14:cd:3f:ba:93:96:3b:08:8e:52:
15:5c:e2:d6:aa:30:d7:8a:e3:c4:79:0c:7f:e1:8f:
2f:19:2e:6a:6d:39:d5:af:e0:03:1a:e7:41:2d:d1:
77:db:84:09:60:88:86:43:aa:91:74:02:13:6b:a8:
bb:4c:32:e3:6e:65:6c:2d:41:d1:be:c1:87:40:e9:
eb:0c:26:6e:7a:6b:46:43:1c:6c:9c:78:1f:0e:58:
e3:8f:21:e5:b4:ff:e6:c8:f9:3e:f5:fb:2f:a2:81:
f6:2a:d8:12:3d:7e:32:8c:bb:c5:6c:91:f9:97:ca:
63:e9:f2:a5:7c:77:f1:71:05:24:8a:4d:cf:25:11:
30:8d:c1:c0:e9:c8:3a:eb:01:1a:0e:08:6b:79:0b:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:58:E6:24:CD:ED:65:3C:C7:76:5E:30:6D:60:68:79:C2:28:3C
X509v3 Authority Key Identifier:
keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638313a623030623a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df81:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
1c:94:67:38:3f:e7:1b:1c:27:8b:aa:40:0c:23:09:7e:11:20:
d1:0d:a3:b1:d3:ea:b0:53:28:da:c6:a9:38:d9:0c:9e:ed:95:
26:7e:32:81:b1:83:8f:d6:9a:7c:eb:45:95:f1:04:77:e9:dc:
e4:03:82:3a:43:83:73:46:5c:7f:fa:c0:c9:e3:1d:e2:4f:23:
5c:85:5c:93:56:e2:38:01:50:45:a5:f4:83:51:de:af:72:41:
e9:95:74:6b:cf:2c:cd:7e:ed:b4:6a:7e:3e:62:c0:99:34:82:
05:32:ca:2b:43:3a:a9:df:24:60:87:5a:7e:f9:56:95:82:ee:
ae:e1:af:6a:b9:a3:5a:5a:b4:49:98:9c:c3:08:ff:76:f1:21:
77:3c:b8:59:17:cc:f7:e9:20:f5:2a:34:20:5f:ff:76:29:83:
09:b6:5c:be:ea:35:5f:42:96:01:48:32:11:a0:36:bb:e0:00:
aa:44:bf:6c:dd:3a:f9:5e:1c:f4:a8:04:28:5b:cd:82:75:5f:
83:95:b0:ca:c4:db:0e:80:6c:e1:5e:a0:00:1c:57:5b:0b:81:
0f:9b:66:ad:ba:d0:f0:04:65:26:2a:8e:50:3c:4f:8a:8c:ac:
5a:0f:b2:93:cd:07:9e:74:62:9b:df:72:9f:4f:08:34:8b:0d:
2d:ad:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:30 2025 by rpki-client