Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030343a3a2f34382d3438203d3e20323135333634.roa
File: 326131343a373538313a393030343a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier: bPdjs19tk/MpRbgarmAN0uEcDcdl6i6wd4cN5TGGv2M=
Subject key identifier: 6B:61:E0:A5:FC:84:82:96:0F:8B:F2:84:C6:4F:BA:87:F4:D1:21:91
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 70C0F7EA43A18F7AFD8D3F34B491128CBB9E8DC9
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030343a3a2f34382d3438203d3e20323135333634.roa
Signing time: Fri 06 Dec 2024 11:35:28 +0000
ROA not before: Fri 06 Dec 2024 11:30:28 +0000
ROA not after: Fri 05 Dec 2025 11:35:28 +0000
asID: 215364
IP address blocks: 2a14:7581:9004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c0:f7:ea:43:a1:8f:7a:fd:8d:3f:34:b4:91:12:8c:bb:9e:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 6 11:30:28 2024 GMT
Not After : Dec 5 11:35:28 2025 GMT
Subject: CN=6B61E0A5FC8482960F8BF284C64FBA87F4D12191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:91:a0:a7:7c:c3:5d:c9:19:2b:3a:f1:84:
3a:f5:c2:c9:e4:21:17:59:ab:45:fb:0e:60:5d:54:
f2:a4:67:32:94:67:24:fc:4a:6c:ad:0d:c2:9f:bf:
08:34:36:cb:7b:c2:f6:14:e7:2d:08:fd:95:c8:4a:
91:72:76:88:fb:a4:73:4a:d5:b3:ff:5b:6d:0e:9f:
29:9e:7d:b0:a4:90:b2:cf:27:64:82:83:ea:c8:f4:
90:b9:bb:0b:8b:3d:57:a7:46:35:32:1c:43:6d:67:
b2:32:18:b4:08:37:64:db:6f:c7:1b:16:1e:4d:87:
03:98:3b:c3:21:3f:35:f0:79:da:bf:75:34:43:bb:
e9:4d:67:3c:19:3e:04:8f:c0:7d:dc:ca:c1:7e:90:
22:73:81:4d:3d:68:8a:03:f7:bc:af:c8:5b:92:ab:
29:4a:a5:7e:5b:68:6c:ea:14:01:d2:de:45:94:a0:
3c:c1:91:6f:e3:cd:a0:2c:29:1d:fa:95:09:e6:df:
2c:a1:55:d8:c6:02:34:54:38:55:18:17:2f:92:bc:
47:44:83:51:ba:3b:91:a8:5c:fa:c5:d3:56:3a:fe:
83:07:f4:6c:3a:65:42:a9:07:88:ec:08:81:a0:3f:
05:71:9b:0b:db:a9:02:ca:6f:18:1d:19:5a:01:d9:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:E0:A5:FC:84:82:96:0F:8B:F2:84:C6:4F:BA:87:F4:D1:21:91
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030343a3a2f34382d3438203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9004::/48
Signature Algorithm: sha256WithRSAEncryption
a5:ad:b0:02:8a:02:b3:97:dc:17:f9:3c:f4:ed:2c:11:2d:f2:
36:69:73:e9:a4:12:48:d6:aa:14:64:0c:8e:a1:16:1e:61:fa:
94:eb:de:7b:42:45:26:6f:68:84:8a:82:22:a6:68:de:4c:08:
89:7f:4f:30:fb:2b:84:28:2a:bd:87:10:f9:e1:76:6c:54:5c:
93:81:b8:4d:fd:48:f1:69:92:22:1c:56:f2:90:e9:64:ee:e6:
e0:d4:f0:15:30:6a:07:57:84:77:3a:da:69:4d:20:34:31:c2:
83:80:3d:a8:47:d2:9d:83:46:5a:07:b3:c3:93:a7:22:c0:60:
9c:fe:e6:4f:61:6f:a8:cc:79:c1:06:82:cd:2c:08:72:e4:ad:
f4:95:5a:e4:cf:5d:02:5c:79:ec:4e:35:57:35:63:e6:4d:69:
5f:2f:03:f4:d3:15:cc:9a:af:8b:fb:79:a5:7e:db:4f:7e:61:
2b:74:dd:a4:64:58:5e:d2:47:f5:d8:b1:c6:e6:d5:98:5d:ee:
c1:37:a8:7c:6b:b3:ad:9c:dd:37:39:5e:3c:a2:be:b0:f6:54:
5c:e5:b1:ce:b6:9a:86:e0:05:d8:f0:e1:88:40:e3:82:4d:1f:
33:6a:52:8c:58:b8:23:80:5e:2d:df:0a:59:33:b0:0c:f4:9e:
15:20:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:22 2025 by rpki-client