Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
File: 326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa (raw, json)
Hash identifier: 77XyJjVypg00T50HWEuO8XczhlLFsilo8qCXiFdvcO4=
Subject key identifier: 83:12:CC:56:D7:A2:59:D1:AD:F1:64:1A:5F:CC:AC:D7:8D:FE:67:D8
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2561DF6508320A6177A964A0AC2714DEB53683C3
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
Signing time: Thu 27 Feb 2025 23:45:52 +0000
ROA not before: Thu 27 Feb 2025 23:40:52 +0000
ROA not after: Thu 26 Feb 2026 23:45:52 +0000
asID: 213126
IP address blocks: 2a11:29c0:3db0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:61:df:65:08:32:0a:61:77:a9:64:a0:ac:27:14:de:b5:36:83:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Feb 27 23:40:52 2025 GMT
Not After : Feb 26 23:45:52 2026 GMT
Subject: CN=8312CC56D7A259D1ADF1641A5FCCACD78DFE67D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:ab:5e:83:cb:41:e9:2a:c4:fd:22:2f:26:
c9:63:cd:53:d7:de:10:c6:02:74:18:37:ea:1f:8a:
aa:35:12:0d:e7:f6:fe:2f:9c:5a:81:93:de:bd:bb:
db:31:23:7e:e2:72:ca:ab:c0:51:a9:1f:f8:3a:f6:
b4:e5:e0:4c:02:af:91:1c:70:cf:60:d9:96:dc:44:
17:52:8b:47:53:23:aa:ab:04:5c:26:ac:fb:94:90:
0a:d7:73:a1:02:c6:0b:b4:6c:f9:6e:44:ce:a2:2d:
b4:83:c9:3d:c8:31:a7:4e:ed:ed:65:c1:48:88:f7:
8d:e9:ef:1f:e1:50:e9:62:30:0b:1d:dc:a7:15:ec:
ea:6a:a4:cb:8a:41:09:5d:0c:ad:23:e9:98:da:da:
44:8b:e2:4a:61:92:1f:eb:88:c2:cc:16:c7:6d:06:
fa:09:33:0e:d3:6b:3c:93:53:47:d4:c9:c6:2f:b6:
12:e9:25:bf:2c:d0:b5:50:41:92:1b:de:f2:68:52:
af:f9:b6:44:16:0f:3d:ab:da:e9:2a:b1:89:b3:53:
e2:73:0a:73:f4:c8:1c:dd:e1:05:54:ed:90:c5:73:
dc:41:83:f8:f6:f8:cc:93:f0:63:5f:ec:ce:f7:e7:
e7:76:60:b3:a0:c5:b5:9b:25:95:31:1f:c9:09:ba:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:CC:56:D7:A2:59:D1:AD:F1:64:1A:5F:CC:AC:D7:8D:FE:67:D8
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336462303a3a2f34342d3438203d3e20323133313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3db0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:a4:69:8e:b1:b4:14:d5:30:21:f1:57:fa:cb:44:92:fe:a1:
46:c0:13:ad:42:0d:cf:f3:36:05:0c:1f:1e:2e:d5:c5:b1:12:
cf:75:c8:b4:2c:98:00:74:1e:1f:4e:3a:0e:56:1e:ed:64:05:
15:74:bc:66:07:6c:0a:63:02:14:0f:10:f6:6e:87:e0:82:4b:
12:1a:6e:8b:7d:67:d2:ea:6f:5c:d9:d0:06:68:1d:1c:eb:cb:
5c:ec:b4:e9:fd:e3:2f:61:10:77:cd:b7:dc:df:a6:96:e1:8e:
7f:d7:b8:f8:30:d0:4d:f5:22:7a:e2:53:f2:11:52:0b:e9:0f:
cd:e3:5e:80:5c:94:bf:dc:53:f7:16:12:9b:da:52:48:a4:bd:
55:93:fc:34:8e:a3:d6:7a:e7:64:11:6f:b7:e0:43:b7:2f:3e:
83:47:68:49:8c:86:bb:25:5d:d7:35:ee:7e:49:bb:d6:14:59:
75:2a:a5:44:1a:19:16:e7:3d:46:31:3f:4a:be:15:c2:5b:f4:
7a:21:e8:b5:42:04:a9:d8:93:32:9f:9b:16:7c:27:34:20:fa:
47:5a:10:7d:68:29:dd:9a:55:3d:cc:15:71:37:16:90:99:af:
27:39:74:e7:ef:b5:ed:2e:3f:be:67:69:81:3f:45:38:4d:50:
9d:9b:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:51 2025 by rpki-client