Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa
File: 326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier: M+UQgJRndf7iDu5NVHwZtWTdF7mL4QZTbFPoh5R2bPA=
Subject key identifier: DB:AC:FA:6B:7D:59:7A:CB:B5:BD:FE:E0:04:CF:A3:7B:91:C8:50:A5
Certificate issuer: /CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Certificate serial: 44FE0C064F823836A5C4117B69B7686F82AAF653
Authority key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa
Signing time: Tue 20 Aug 2024 00:09:13 +0000
ROA not before: Tue 20 Aug 2024 00:04:13 +0000
ROA not after: Tue 19 Aug 2025 00:09:13 +0000
asID: 200351
IP address blocks: 2a07:54c1:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fe:0c:06:4f:82:38:36:a5:c4:11:7b:69:b7:68:6f:82:aa:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Validity
Not Before: Aug 20 00:04:13 2024 GMT
Not After : Aug 19 00:09:13 2025 GMT
Subject: CN=DBACFA6B7D597ACBB5BDFEE004CFA37B91C850A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:4a:a5:8f:9b:7b:b6:ce:4b:94:91:5a:13:
de:63:93:18:f1:d2:29:f7:28:7f:98:91:82:32:dd:
da:8a:bd:6f:2d:e7:0c:b2:77:d1:47:4f:4c:26:19:
66:21:28:e7:40:49:05:e3:f4:2b:24:72:ba:fa:0e:
78:85:e8:8e:b4:62:d7:01:ea:36:4b:04:55:e9:c1:
06:01:60:8c:57:c4:1e:b5:8d:e7:90:f2:a2:af:09:
8e:dc:97:09:0e:cd:64:e4:a3:c6:69:9d:c4:0f:3b:
39:88:e0:4f:17:88:cc:51:9b:80:a6:86:04:8d:18:
b8:8b:64:a8:ed:76:11:fd:7d:f0:47:ba:24:05:25:
1c:bc:2a:e8:1f:33:80:63:81:dc:01:e1:44:0c:92:
60:33:59:76:c4:92:32:d0:58:c1:b3:85:6e:13:20:
d6:19:75:38:0d:31:10:5c:67:98:f8:da:13:68:b2:
e1:72:e6:8f:3f:b0:06:ff:e0:70:51:7c:a4:b4:54:
2f:65:bb:60:d3:b4:69:d8:29:18:75:d9:73:16:88:
ab:a3:59:ea:02:a5:ff:57:09:89:43:cd:bd:33:7b:
61:60:c5:31:40:89:aa:0f:2d:34:7f:4c:25:f3:88:
d4:e8:a6:c9:b4:e5:52:91:6f:28:ba:37:8b:59:73:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:FA:6B:7D:59:7A:CB:B5:BD:FE:E0:04:CF:A3:7B:91:C8:50:A5
X509v3 Authority Key Identifier:
keyid:84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:dead::/48
Signature Algorithm: sha256WithRSAEncryption
0a:d5:90:28:08:91:85:00:9b:d7:13:64:78:bb:fd:26:a1:72:
89:aa:0f:cd:ee:b6:20:a9:8e:3a:64:34:93:4d:e7:e2:41:f9:
39:9b:a1:9c:58:2f:02:e9:51:d6:e6:ff:f1:f6:e0:b8:e5:28:
90:1c:27:99:0e:5e:a3:58:ce:cd:00:3e:69:f6:0c:97:7f:33:
a5:2d:99:46:13:82:f2:40:83:21:d2:5d:3c:8e:79:25:13:39:
0f:32:cf:e7:67:36:e8:43:a0:0a:8f:e2:bc:58:57:3e:1f:21:
ee:bc:84:16:c6:57:5c:23:c1:4c:3f:1a:34:40:31:27:59:c5:
b0:5d:38:c0:9d:f9:19:d2:f7:be:72:35:9b:3f:56:86:71:24:
db:cd:ca:41:c6:27:24:aa:12:cc:c1:f0:a8:6b:fd:0b:12:1d:
e1:28:bc:de:f8:5c:7d:7d:22:b0:67:bb:45:2f:ad:68:ba:bb:
23:19:52:85:e8:0b:ae:9c:6c:65:39:78:12:a2:47:8d:12:88:
bb:5f:9c:50:f8:d4:2f:cd:83:18:48:0a:d4:62:d2:7f:ed:f8:
5e:fe:44:be:1f:d3:08:64:90:fc:c7:01:42:63:4e:a3:33:42:
2e:0e:ce:76:a4:b8:5c:da:6b:a7:fd:d7:f9:70:d7:9b:d2:a7:
d5:fc:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:07 2025 by rpki-client