Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3430303a3a2f34302d3430203d3e203537383730.roa
File: 326131343a343438373a3430303a3a2f34302d3430203d3e203537383730.roa (raw, json)
Hash identifier: kAhiHh7l1yXvwZn10lGSmPT+CCOU1rDW6PD0YzNB+UQ=
Subject key identifier: F4:D9:26:8A:CA:07:C3:11:C3:B7:ED:B5:C5:62:6A:1D:BF:4C:2B:87
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 4D36B4ACEAF0B317136ACD280B5246297170AAEA
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3430303a3a2f34302d3430203d3e203537383730.roa
Signing time: Thu 11 Jan 2024 08:46:49 +0000
ROA not before: Thu 11 Jan 2024 08:41:49 +0000
ROA not after: Thu 09 Jan 2025 08:46:49 +0000
asID: 57870
IP address blocks: 2a14:4487:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:36:b4:ac:ea:f0:b3:17:13:6a:cd:28:0b:52:46:29:71:70:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:41:49 2024 GMT
Not After : Jan 9 08:46:49 2025 GMT
Subject: CN=F4D9268ACA07C311C3B7EDB5C5626A1DBF4C2B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:af:96:44:d7:63:01:f0:81:df:40:6f:29:
03:7e:2d:bb:6c:73:af:13:f9:70:80:51:69:1a:a3:
f4:d3:39:0e:00:90:52:60:33:25:9f:fb:20:32:03:
0f:df:5b:c1:39:0b:cf:b2:a4:2b:8a:a2:bf:33:47:
a8:5a:19:36:a9:dd:c6:47:91:4a:0b:a4:9f:b9:cc:
85:dc:1f:06:d0:65:be:1b:dd:bd:e1:d0:c8:90:f9:
4f:63:7c:9e:4f:4d:aa:50:90:c4:2e:e9:af:72:9c:
6b:3e:87:e6:2b:65:89:26:8e:e3:1c:fb:59:23:dc:
7d:2e:45:8f:55:71:8a:05:b0:5d:6d:97:72:38:63:
f0:1f:18:a5:30:43:21:9c:39:90:50:99:f1:bb:17:
54:72:af:93:83:0a:62:ed:f8:1d:ae:02:06:9b:49:
de:bc:6d:cc:9d:7e:aa:95:1c:02:00:f9:78:bc:a6:
15:b9:34:0d:4c:9e:d9:bc:8f:98:95:29:cc:02:70:
64:54:7b:ee:ae:23:63:5e:2c:2a:85:37:28:ad:0c:
fc:51:e8:e3:d1:47:86:9b:aa:bd:07:30:88:a8:2e:
60:01:59:fa:c1:d6:fb:0c:3e:da:b5:98:b6:c6:3b:
65:1b:50:2d:b2:05:b5:0b:08:b2:ce:36:c1:ce:e4:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:26:8A:CA:07:C3:11:C3:B7:ED:B5:C5:62:6A:1D:BF:4C:2B:87
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3430303a3a2f34302d3430203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:400::/40
Signature Algorithm: sha256WithRSAEncryption
38:50:8c:e4:3a:ef:ac:1b:b8:77:0a:9b:a3:aa:47:50:ec:a1:
4d:ff:a9:db:6e:c2:b2:1f:23:46:31:fc:94:62:62:14:c9:03:
5b:a7:41:4a:aa:fc:b4:d1:08:0c:ff:8c:7d:1c:5c:a2:6e:43:
70:dd:fa:d4:56:c4:0c:c5:f7:4d:97:ab:d7:ca:ab:3f:38:12:
b5:fa:2f:2f:d8:5a:92:ee:e7:b7:7b:3c:e8:ea:c4:8c:fb:60:
27:d0:b8:b9:8c:ad:62:04:1f:77:25:af:67:3d:d0:85:46:49:
55:f3:e7:65:cd:05:9e:d4:58:fb:bd:bf:6e:ec:49:53:48:d2:
c2:92:62:88:8e:c1:12:9d:9d:d8:7a:5e:d9:fa:c7:ca:d1:3a:
19:de:28:76:f9:be:c4:76:d9:d5:77:cc:60:6f:ad:6d:de:17:
5f:d3:ac:96:6e:9b:c9:b8:d6:3f:46:fd:ec:cd:f6:09:e5:b9:
d7:7c:1e:6e:37:84:df:09:4f:29:30:3e:69:d9:0f:8c:71:23:
1b:2b:2d:12:c4:64:63:1a:fe:e6:b0:72:50:6d:c7:c2:02:8c:
58:4c:44:99:d6:26:3c:98:b7:68:e4:36:90:1e:d1:e0:9a:b9:
31:1f:54:12:29:df:27:61:47:48:e9:52:aa:c9:80:0b:95:ba:
76:40:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org