Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030353a3a2f34382d3438203d3e20323135333634.roa
File: 326131343a373538313a393030353a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier: bu/h9XK3WsAHjx8MPP7pwiGIOlMrY2wNZz76Bs6Xv/0=
Subject key identifier: 9E:F9:72:E1:0B:2C:1B:05:6C:6F:92:0F:3D:95:E4:12:60:DA:6E:12
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 6010CB35CE6A782DE43B914ECFA1F1C5539E1EEB
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030353a3a2f34382d3438203d3e20323135333634.roa
Signing time: Fri 06 Dec 2024 11:35:55 +0000
ROA not before: Fri 06 Dec 2024 11:30:55 +0000
ROA not after: Fri 05 Dec 2025 11:35:55 +0000
asID: 215364
IP address blocks: 2a14:7581:9005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:10:cb:35:ce:6a:78:2d:e4:3b:91:4e:cf:a1:f1:c5:53:9e:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 6 11:30:55 2024 GMT
Not After : Dec 5 11:35:55 2025 GMT
Subject: CN=9EF972E10B2C1B056C6F920F3D95E41260DA6E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:03:47:0f:07:a6:c8:38:0d:bc:61:11:7c:
18:3c:9c:57:a4:99:b6:40:7f:b4:16:a6:b2:2c:cc:
f7:10:fa:56:e6:0d:41:6e:15:a7:e2:f7:c8:88:54:
1d:1c:63:61:3f:b9:1b:3e:c7:72:3d:ec:f1:9d:0d:
af:6b:ad:f0:2c:b5:1b:b5:4a:32:f2:9c:42:86:cd:
1c:b8:fa:38:f4:db:29:de:82:fd:05:24:2b:51:59:
9c:20:b6:30:3d:b4:48:c3:b7:26:5f:b0:37:e8:c6:
3d:27:80:5c:94:12:cd:6f:a8:a5:39:e9:cf:0c:1a:
30:a7:58:2e:3f:8b:22:ae:56:6f:af:51:f2:0c:2e:
63:5e:fc:86:2a:65:f4:82:ab:b9:31:e9:7a:81:3d:
ea:b9:70:85:3a:c3:45:25:d2:36:9c:ff:dd:88:36:
64:58:e7:26:15:07:36:c2:c0:a8:d3:79:3a:70:b6:
c6:d3:e2:ad:4c:d7:a1:dc:74:f5:27:c0:20:69:10:
c7:18:ba:53:1a:11:46:23:4b:f8:20:97:eb:de:24:
2d:7c:e9:18:e0:20:7f:1d:c0:e2:40:1e:a0:b4:87:
a6:a7:87:e0:e9:8e:4f:89:07:e0:11:a8:e9:35:23:
1f:97:23:4c:65:b1:2c:6e:8e:4e:c6:64:17:f9:0e:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:72:E1:0B:2C:1B:05:6C:6F:92:0F:3D:95:E4:12:60:DA:6E:12
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030353a3a2f34382d3438203d3e20323135333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9005::/48
Signature Algorithm: sha256WithRSAEncryption
13:4a:25:dc:1f:a9:68:f1:ce:56:50:d0:bc:d0:b2:0d:d9:bf:
a4:e1:80:5d:ea:a3:e7:b7:07:5f:58:d2:69:2f:7e:1c:97:4f:
45:b0:22:cc:c5:98:38:6d:9d:57:cc:d1:9b:4a:f9:34:22:5f:
b1:00:73:d2:2a:9a:c2:a1:e0:70:db:94:d9:a4:3d:b7:1c:74:
95:d6:56:a6:4e:45:cc:e6:82:68:de:99:32:87:25:35:58:aa:
48:78:6a:1b:cb:64:64:e5:73:01:c8:08:b7:27:4d:bf:22:f1:
98:c2:14:ac:bf:be:a4:c0:de:b3:d4:13:1c:ba:8a:e7:41:ec:
c7:a7:b3:55:0b:a7:14:5c:fd:a8:60:85:8b:0f:30:3a:81:fc:
21:3f:47:cd:3b:2d:44:63:a0:07:2e:6a:51:de:92:4c:7b:00:
2c:bc:fe:49:81:dd:75:7d:23:6a:de:39:56:86:1a:af:5d:e0:
f2:3c:7e:bd:08:9a:06:2a:6a:c5:9f:f9:10:8d:7d:26:8c:49:
9b:ee:ef:9b:3c:32:a8:10:8e:bf:97:17:c8:af:b4:9d:d5:78:
5f:3e:59:db:71:d0:2f:ec:de:d1:0b:94:fe:32:8d:a2:59:1a:
14:03:dc:9b:4e:c4:d1:09:37:65:88:4c:4d:64:71:a9:3c:26:
27:4a:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:46 2025 by rpki-client