Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa
File: 326131313a343238303a3a2f32392d3438203d3e20323130383833.roa (raw, json)
Hash identifier: qeQbePB/jygUl9m3dKOZDTORjhzHewLMx8TF3Q7BtsM=
Subject key identifier: 89:DA:50:2F:8E:C3:CA:32:FD:05:D1:F4:5D:3D:AB:99:27:9C:03:59
Certificate issuer: /CN=0893bff9f6ed42d9058987140aa711c3b125a981
Certificate serial: 661BA01D0F0D8A674EF8C5927C17AF7D9FDAD1B6
Authority key identifier: 08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa
Signing time: Thu 08 Jun 2023 13:21:42 +0000
ROA not before: Thu 08 Jun 2023 13:16:42 +0000
ROA not after: Thu 06 Jun 2024 13:21:42 +0000
asID: 210883
IP address blocks: 2a11:4280::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1b:a0:1d:0f:0d:8a:67:4e:f8:c5:92:7c:17:af:7d:9f:da:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0893bff9f6ed42d9058987140aa711c3b125a981
Validity
Not Before: Jun 8 13:16:42 2023 GMT
Not After : Jun 6 13:21:42 2024 GMT
Subject: CN=89DA502F8EC3CA32FD05D1F45D3DAB99279C0359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:11:67:1b:e7:04:b7:5c:4b:18:34:74:42:
eb:0b:49:b2:44:1e:52:d6:13:dd:48:d2:34:f5:f4:
16:1a:9c:5e:e4:c2:61:fe:2f:69:02:57:83:27:f4:
59:e1:9e:f4:ae:5e:11:7d:a9:aa:79:28:2e:16:ec:
38:01:e8:bf:02:10:cd:c4:fc:f9:68:ac:03:c1:1d:
f7:5a:92:7a:b2:44:77:42:66:5c:21:b9:81:15:43:
65:77:7d:ff:8f:58:e4:20:e2:99:72:d2:7a:3a:8e:
23:f0:a3:b5:3d:d4:d6:e2:ca:33:36:53:83:7c:ff:
5b:20:89:6d:0f:ad:3e:b7:63:69:86:e6:99:20:55:
04:20:74:35:79:da:b3:80:07:50:b2:c8:29:b3:45:
af:9b:cd:96:7d:18:e5:59:50:22:6d:5f:b1:76:0d:
d4:ff:7c:5f:7c:a9:2a:71:06:af:54:b0:e0:93:56:
eb:9b:fb:54:c2:6d:12:f5:76:34:d1:08:5b:6c:bf:
ca:ab:49:80:24:35:de:ca:3b:9e:f7:af:20:a6:71:
33:3d:e1:86:3e:93:5a:2c:9b:9a:39:f4:82:bb:c3:
ce:ed:02:d7:45:58:9c:47:2f:c0:1e:bb:58:3c:98:
2c:72:0d:0e:a4:6f:06:ec:45:26:61:64:75:a7:8f:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:50:2F:8E:C3:CA:32:FD:05:D1:F4:5D:3D:AB:99:27:9C:03:59
X509v3 Authority Key Identifier:
keyid:08:93:BF:F9:F6:ED:42:D9:05:89:87:14:0A:A7:11:C3:B1:25:A9:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/0893BFF9F6ED42D9058987140AA711C3B125A981.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJO_-fbtQtkFiYcUCqcRw7ElqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c733315-bdad-4a76-ac80-3f787fc83fcb/0/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4280::/29
Signature Algorithm: sha256WithRSAEncryption
3a:bd:01:5f:e0:5a:a6:25:d4:34:a6:80:ec:60:86:81:0f:42:
c1:49:81:79:fe:4e:d3:f8:38:da:4b:a6:93:20:d6:4e:d4:99:
43:0f:67:5e:3d:57:8d:00:e0:b8:b8:4a:01:4d:0e:b5:c7:fd:
7e:5f:ee:67:4f:67:9f:10:b6:20:de:03:51:eb:51:15:7b:7b:
72:66:9c:30:52:9c:bb:15:36:a5:91:07:e4:38:51:c7:e4:ea:
1f:05:8e:28:d1:75:cc:f0:ae:95:37:4b:07:bd:b9:7a:64:01:
10:89:cf:70:7e:7c:48:8e:70:07:e6:73:5d:2d:c6:be:ac:dc:
f1:1a:2e:de:86:1e:73:2e:43:24:bd:bc:59:38:34:b2:25:27:
ae:92:43:8d:07:e1:8f:70:a1:aa:c1:39:60:d8:85:38:7e:74:
9f:7c:d0:7a:21:73:5a:28:0a:c4:d1:22:05:fc:65:27:50:4a:
aa:e5:8a:25:f2:04:dd:06:5d:f4:02:3c:ec:16:9f:23:b4:a4:
7d:75:bb:3b:96:5d:63:90:4b:d9:69:92:ff:bb:2c:4b:6f:30:
10:80:83:4f:46:77:2c:10:bd:9f:c2:3a:c0:d4:ac:c2:6d:7e:
4f:ba:0b:2d:9e:ef:36:bb:fe:d2:7b:8e:a9:d6:10:8a:65:78:
1e:21:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:12 2025 by rpki-client