Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa
File: 326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa (raw, json)
Hash identifier: UdL0OgXRiDCa1bATLJG+87JzaPxAlVHXsHSP3/DUp5Y=
Subject key identifier: F0:4C:32:4D:DA:1C:A9:33:B8:6F:C5:D9:63:10:04:BF:FA:F5:4F:26
Certificate issuer: /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial: 1B0E8DA0CF7184CB3FA8751D1F72B6E43080B8E4
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa
Signing time: Mon 18 Sep 2023 15:33:06 +0000
ROA not before: Mon 18 Sep 2023 15:28:06 +0000
ROA not after: Mon 16 Sep 2024 15:33:06 +0000
asID: 203597
IP address blocks: 2a07:54c5:1400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0e:8d:a0:cf:71:84:cb:3f:a8:75:1d:1f:72:b6:e4:30:80:b8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Validity
Not Before: Sep 18 15:28:06 2023 GMT
Not After : Sep 16 15:33:06 2024 GMT
Subject: CN=F04C324DDA1CA933B86FC5D9631004BFFAF54F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:d8:bb:b1:58:0e:c6:1e:29:aa:b1:d6:38:
7f:a5:5c:b5:ba:bd:30:d1:58:6f:2d:df:dc:3c:ac:
92:ea:92:05:31:e6:9f:e9:84:a9:d3:24:06:38:c5:
7d:b2:83:32:26:d0:83:93:09:b8:ac:2d:c0:41:e6:
1b:b9:a1:0e:9f:e6:0c:36:41:0e:8e:c0:83:51:11:
bb:43:96:18:cd:c3:cb:09:ca:7d:31:8c:1f:33:81:
7f:86:4f:77:aa:be:3c:97:d5:85:ba:81:bb:45:a6:
de:e5:08:ac:d8:4e:33:e2:63:e2:ca:9b:25:6b:81:
c1:23:49:0b:f4:93:a5:b8:68:9e:86:46:91:16:16:
eb:91:c0:57:6e:b2:a1:e0:d6:f2:f6:c4:a8:40:a1:
e8:88:29:9e:31:8a:89:8f:a2:a5:6f:a2:00:a0:a2:
2d:89:b3:dc:3c:a3:05:7a:e0:4d:07:be:5c:cb:96:
f7:89:38:eb:fc:90:15:0f:69:45:60:d8:00:c7:6f:
45:4e:a4:b1:8f:40:15:17:f4:14:db:e8:2e:07:ba:
e2:ea:4c:dd:aa:cb:79:55:ad:8c:45:90:7a:82:76:
47:3d:02:20:4a:68:df:5b:7a:20:ad:9f:bd:66:17:
50:79:ac:2f:c4:76:c5:7c:7c:41:ed:88:9d:e4:dc:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4C:32:4D:DA:1C:A9:33:B8:6F:C5:D9:63:10:04:BF:FA:F5:4F:26
X509v3 Authority Key Identifier:
keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1400::/40
Signature Algorithm: sha256WithRSAEncryption
6c:c4:ac:13:51:4e:81:79:55:03:a6:1e:b6:b6:8f:b9:3b:f0:
0f:2c:9f:09:69:20:8b:03:5c:9c:4c:d2:2f:a2:0c:2d:cc:fe:
95:50:04:21:9c:c4:78:ea:86:56:18:19:05:09:24:26:d9:93:
ae:ed:0b:c1:57:f6:15:0f:ea:78:2c:67:35:20:b7:3d:27:23:
b1:2c:88:9b:15:14:96:dd:35:d5:10:e6:9e:60:33:8a:e1:6b:
8a:14:22:cf:35:d1:4a:b2:cb:a8:96:d8:d1:1c:21:e9:33:af:
74:bf:bf:8f:b1:e9:bb:c7:85:ed:75:a4:c6:d6:57:b6:54:51:
e5:78:77:2b:f5:28:86:59:ee:d8:30:9c:61:74:15:6f:92:1c:
c1:f0:5d:c6:17:b4:85:5d:d5:d7:f7:03:9d:c9:06:aa:b6:9a:
41:79:5b:cd:50:f9:12:74:be:c4:5d:48:f7:54:11:69:0d:db:
27:28:a9:26:cc:c1:6c:69:c5:7a:c0:7b:96:9e:f9:ed:e2:c7:
c1:0b:86:3f:c4:ef:09:43:5d:57:d0:7e:e4:91:a8:49:9a:2a:
ae:14:61:14:c8:6a:32:6f:db:33:bc:fa:03:e0:6a:8b:eb:04:
82:cc:15:28:33:cb:79:3d:0e:1a:45:df:c9:02:2a:0e:ac:48:
9d:27:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org