Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
File: 326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa (raw, json)
Hash identifier: SRxVaK1dbaOx6Ufi626s8rW015DR83HRrcLHHvK1nvM=
Subject key identifier: 64:24:77:F6:46:52:AA:39:D0:85:8D:27:45:5D:75:5F:41:E1:B8:98
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 11CEDC6FBD5AE7277099A002634D006C91E4FCB3
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
Signing time: Thu 12 Dec 2024 23:40:53 +0000
ROA not before: Thu 12 Dec 2024 23:35:53 +0000
ROA not after: Thu 11 Dec 2025 23:40:53 +0000
asID: 214138
IP address blocks: 2a11:29c0:4d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ce:dc:6f:bd:5a:e7:27:70:99:a0:02:63:4d:00:6c:91:e4:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Dec 12 23:35:53 2024 GMT
Not After : Dec 11 23:40:53 2025 GMT
Subject: CN=642477F64652AA39D0858D27455D755F41E1B898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:36:95:c2:e5:cb:dc:97:1c:4e:89:29:c3:
54:63:b8:d5:db:bf:4f:c2:bc:b4:a6:4b:10:d1:d1:
ac:21:fa:15:c6:47:20:6a:98:74:c8:5f:53:cc:58:
31:28:34:a7:bf:5c:74:d7:59:e0:02:d1:82:b4:4a:
af:7b:ba:5a:a7:e8:1a:af:85:2d:95:c2:4a:cd:c4:
aa:7e:d8:26:f8:5f:1a:bb:67:69:a8:8a:1b:4f:40:
ce:93:17:9c:25:0f:ef:5f:7a:af:77:11:93:fd:c8:
8f:5e:34:44:b8:d7:24:e5:75:79:f5:e6:c7:98:be:
0f:27:5a:b1:eb:64:01:4f:55:70:52:c3:0a:32:59:
58:f0:32:73:64:46:d6:3b:b7:79:35:42:68:35:2a:
88:e4:1e:62:a3:9c:06:5b:4e:e1:4f:3f:80:f4:f1:
6c:36:af:51:b9:d9:11:43:c1:ad:90:fb:13:fa:f9:
0b:ab:21:62:08:fd:70:7a:35:24:2a:33:14:ea:39:
c6:cb:25:1f:6a:09:76:96:ab:2a:53:dc:8b:4c:a7:
f8:79:25:9c:f1:db:25:86:3b:79:f7:27:d6:d2:2d:
8e:32:d1:55:79:4e:d7:75:0a:56:71:80:fc:f8:63:
a7:cb:2d:7f:31:7c:5c:7c:fd:f9:d4:5c:36:a0:fe:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:77:F6:46:52:AA:39:D0:85:8D:27:45:5D:75:5F:41:E1:B8:98
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4d::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3b:31:df:35:bc:c0:f7:ac:58:67:ee:fe:62:b2:79:33:94:
1e:84:b7:80:21:f3:a6:6f:d0:46:d1:1f:1e:db:3b:48:84:16:
10:39:62:a5:d4:4c:cd:86:2f:85:f1:c6:92:ec:9b:6f:22:6e:
0e:4a:13:cc:42:b9:d7:d6:fa:ae:5e:26:bc:66:5e:cc:3a:e7:
24:c9:88:e8:86:c2:b0:28:7f:03:86:4e:26:ad:dc:c0:ab:1e:
c1:cc:09:e6:3b:55:0c:08:9a:c5:ef:07:84:b1:f2:4a:11:d5:
1f:74:ba:68:3b:33:b4:97:20:6d:c5:f6:62:a6:56:14:df:5a:
1c:ac:b4:ce:09:c5:3f:37:92:d0:2b:a8:51:68:04:6b:96:f0:
cb:d1:f7:28:cb:7e:31:33:96:ae:68:2f:a5:db:7c:8c:77:20:
f8:67:9b:9b:ed:25:2c:68:7b:8e:1b:0a:39:56:32:74:55:8f:
72:50:e8:a8:3a:cf:ba:3a:1f:32:b3:36:ef:06:d6:ef:c0:d7:
3a:23:6a:5f:f1:68:92:29:88:40:82:bd:c7:66:4a:46:59:bb:
82:b6:2b:9f:fc:47:0c:83:96:be:ee:b2:71:95:65:53:73:ac:
c4:4c:66:63:69:51:ed:33:b6:a1:4f:df:29:56:c4:19:18:ab:
c3:0c:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:18 2025 by rpki-client