Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
File: 326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier: XFBen5Su5jmtUJdSH63H11WFMlIQPcIgD6T1coljjwQ=
Subject key identifier: E7:32:5F:99:36:60:D1:71:5C:E3:1F:7C:55:DE:84:50:5C:27:F4:D5
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 22E312AE122A4D358E8261D7735F373EBB44CE31
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
Signing time: Sun 24 Nov 2024 10:08:34 +0000
ROA not before: Sun 24 Nov 2024 10:03:34 +0000
ROA not after: Sun 23 Nov 2025 10:08:34 +0000
asID: 20473
IP address blocks: 2a11:29c0:3e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e3:12:ae:12:2a:4d:35:8e:82:61:d7:73:5f:37:3e:bb:44:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Nov 24 10:03:34 2024 GMT
Not After : Nov 23 10:08:34 2025 GMT
Subject: CN=E7325F993660D1715CE31F7C55DE84505C27F4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:d1:a1:a4:05:c1:bd:82:c9:ca:3d:c7:de:
38:6f:6f:b2:4a:da:30:94:d2:22:d6:0f:56:45:a3:
17:d6:c1:35:ab:19:61:38:6c:99:fb:da:65:37:f9:
6a:61:94:8a:f9:e9:f8:83:28:8a:3d:a5:be:e8:bf:
15:4a:e7:ce:80:b1:55:31:90:16:2c:ec:38:7a:74:
b4:e5:e3:35:a9:0b:af:95:49:e4:30:04:5e:0f:26:
1d:ac:14:3b:f6:ad:b1:33:98:e8:49:42:8b:ec:71:
6f:7a:17:5b:d3:9a:78:71:dd:97:95:e2:60:0f:15:
67:11:2b:2a:12:85:db:ea:96:18:cd:91:5a:b9:a1:
e0:f0:0b:10:32:2a:91:f7:8c:6c:fb:ee:95:83:85:
5b:67:94:80:b0:7a:54:f3:4e:73:ce:50:a7:4d:f2:
f4:6e:52:6b:31:3a:07:d7:7f:84:2a:23:7e:cd:ca:
1e:2a:cb:2b:de:1e:2c:17:f4:3b:76:67:ae:87:40:
ff:50:35:60:50:1f:f5:f4:ba:52:46:90:45:62:8b:
1d:7b:d8:a6:26:50:8f:f7:75:6e:f4:1d:10:ca:7a:
86:7b:64:60:8e:50:30:39:14:58:d6:14:0f:42:9d:
b0:2f:1d:f9:44:d1:7c:b7:0d:cc:35:fa:db:96:25:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:5F:99:36:60:D1:71:5C:E3:1F:7C:55:DE:84:50:5C:27:F4:D5
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336534303a3a2f34342d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
32:33:f0:5d:f2:b4:fc:3f:5e:ec:8d:bc:9b:d7:e7:b9:0b:68:
bd:ad:ee:0d:39:22:89:2e:01:23:9a:2b:27:9c:af:52:f1:9c:
6f:6e:f2:f9:43:6b:ee:ff:5f:8e:bf:d1:69:dd:98:18:eb:ef:
80:36:2c:cc:8e:85:fa:e8:15:12:66:73:61:44:a8:f2:b0:7a:
6e:42:19:8e:2e:83:79:84:ba:50:99:c3:dc:19:df:39:56:bc:
f7:e2:3d:db:e2:a4:a8:f4:bf:95:e0:4e:f3:75:67:90:b4:dc:
6b:3e:24:89:6c:f4:be:e4:3e:c3:ed:03:e1:dc:08:cb:30:84:
e8:c8:53:b2:37:b8:ea:ae:2f:1f:06:8d:c6:de:ea:1b:92:d6:
d8:1e:a4:20:e1:5a:94:4f:d1:87:35:9c:c7:88:d0:ba:3c:7f:
2c:26:4b:fd:ea:71:30:2b:16:94:6b:84:0d:e4:8a:46:1b:68:
a0:79:74:f5:f8:83:fc:70:3f:99:7a:0b:b6:5c:1c:a2:76:4d:
b6:ea:62:65:b7:b6:aa:cd:15:b9:bc:75:cc:9c:be:64:55:e7:
47:8c:62:6b:ca:99:12:9a:12:5a:35:fd:ec:46:6b:11:a1:ce:
8a:1c:76:d5:ff:fd:ab:23:ac:b0:2a:7a:6c:ea:61:01:a4:a7:
08:b4:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:47 2025 by rpki-client