Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa
File: 326131343a343438333a3a2f33322d3438203d3e203438323638.roa (raw, json)
Hash identifier: 9Tc2t1n0xk/sCBdPeG7dDFLwdK3aXChZWQsXaEhrZK0=
Subject key identifier: 9E:07:EC:53:4E:30:BA:42:65:29:1D:3D:29:BF:C3:D4:AC:36:6E:12
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 6DA5842ECFEC306B7E8D88BFA6BB80A327FFDF14
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa
Signing time: Sun 14 Jan 2024 23:17:12 +0000
ROA not before: Sun 14 Jan 2024 23:12:12 +0000
ROA not after: Sun 12 Jan 2025 23:17:12 +0000
asID: 48268
IP address blocks: 2a14:4483::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a5:84:2e:cf:ec:30:6b:7e:8d:88:bf:a6:bb:80:a3:27:ff:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 14 23:12:12 2024 GMT
Not After : Jan 12 23:17:12 2025 GMT
Subject: CN=9E07EC534E30BA4265291D3D29BFC3D4AC366E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:66:77:ed:42:ef:de:45:6a:4c:d9:2b:71:
ef:68:cf:f1:a5:67:fa:e4:5e:be:74:cb:99:50:e1:
20:06:23:e1:d7:f9:67:ae:ca:78:47:07:6e:c9:59:
01:bf:ed:90:1e:8a:29:a1:e3:42:5a:1f:0a:c0:a6:
7f:53:97:92:f4:67:0a:63:24:c5:b9:af:80:f0:69:
db:49:75:45:c7:c4:13:5a:5f:27:af:39:62:3b:27:
2d:b4:29:30:72:36:a7:d6:c6:e7:a8:75:51:70:c1:
4f:0a:08:b3:a1:ca:f7:0e:31:6e:2c:07:ab:1c:c2:
04:6f:15:7f:a3:f8:b5:3a:67:ab:e2:a2:35:8f:d5:
db:79:f3:76:c2:68:3e:8e:51:e5:ea:49:6f:35:bb:
f8:86:46:08:1f:79:1c:24:53:0b:98:7c:fe:18:1c:
79:de:97:ff:d0:92:56:91:2a:03:63:38:f3:ff:a7:
56:94:bc:b9:11:2d:60:72:72:a2:50:ae:66:fb:f2:
96:45:5b:59:56:0e:6c:93:66:6e:09:d3:6d:9a:d7:
a4:24:e0:60:48:0c:01:19:7f:26:1a:75:57:cc:27:
3b:b1:2f:13:47:eb:e2:1d:a6:70:86:74:79:fb:69:
a1:0a:a1:df:71:a6:e8:0b:56:62:c7:80:76:8e:ed:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:EC:53:4E:30:BA:42:65:29:1D:3D:29:BF:C3:D4:AC:36:6E:12
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438333a3a2f33322d3438203d3e203438323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4483::/32
Signature Algorithm: sha256WithRSAEncryption
99:7a:1d:cb:88:09:57:96:7b:5e:e9:e5:d8:6c:08:a6:4e:51:
19:3a:03:45:a6:88:8c:a7:e0:70:8e:d0:d6:72:fc:a0:fa:9a:
66:25:ac:36:55:a9:56:49:04:69:ad:6a:3b:e8:20:1c:c8:07:
e5:ca:ba:be:7c:74:d1:f1:55:15:4d:9b:9e:6a:65:46:02:4f:
48:b7:72:4e:55:59:aa:3c:b7:21:7d:92:a8:1b:f2:cd:e4:78:
36:cf:12:33:88:87:b6:0c:1f:ef:e3:b9:4b:17:de:b0:62:be:
e5:7e:d0:b4:e0:3e:69:d8:27:71:d8:1a:51:f3:78:99:e4:ac:
92:06:f2:25:21:0c:0a:08:9d:a3:83:24:9d:85:7e:2f:d8:25:
71:51:6a:aa:d0:13:ad:ba:0f:bd:bd:e6:28:1d:86:70:d4:9d:
20:ee:c4:5d:31:07:ec:75:bc:bf:64:0e:df:2b:18:3d:97:90:
02:0f:24:61:9b:fa:5f:ef:34:6c:c1:f6:e9:13:37:f7:ae:e3:
fd:9e:9d:f5:6d:da:0a:d1:a3:93:3c:54:ec:80:cb:a5:be:35:
fd:03:f1:2a:e2:ac:ae:0c:13:d1:8f:1e:5c:68:5e:c9:53:d1:
48:ec:23:08:be:03:38:ca:e2:86:07:f4:be:1e:ef:23:b3:e5:
39:00:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:33:24 2024 by rpki-client on console-fra.rpki-client.org