Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3730303a3a2f34302d3430203d3e20313939303939.roa
File: 326131343a343438373a3730303a3a2f34302d3430203d3e20313939303939.roa (raw, json)
Hash identifier: U9ynnQsgLkEKg7rT3MHIHyEoo3lrN067J6vZgqxfr94=
Subject key identifier: 53:C8:CF:9F:F4:35:F4:21:B6:A0:EC:93:A7:76:03:46:9C:CA:06:B9
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 27BBB2E44A2834F89F2606B840039857BC1F24E0
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3730303a3a2f34302d3430203d3e20313939303939.roa
Signing time: Thu 11 Jan 2024 08:47:37 +0000
ROA not before: Thu 11 Jan 2024 08:42:37 +0000
ROA not after: Thu 09 Jan 2025 08:47:37 +0000
asID: 199099
IP address blocks: 2a14:4487:700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bb:b2:e4:4a:28:34:f8:9f:26:06:b8:40:03:98:57:bc:1f:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:42:37 2024 GMT
Not After : Jan 9 08:47:37 2025 GMT
Subject: CN=53C8CF9FF435F421B6A0EC93A77603469CCA06B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:84:51:ec:6e:f3:b0:bd:90:a4:97:1a:21:24:
37:a1:47:0d:3c:81:b4:fa:d7:18:7e:ed:9c:52:c3:
94:e5:42:22:3d:f1:89:f6:dc:b0:78:cd:ae:5e:4c:
a6:f0:d9:52:7f:9c:7c:66:10:10:b4:2f:a7:3b:4f:
e3:00:5e:e2:20:35:0c:36:c2:6b:de:d1:37:a5:a0:
25:59:d7:82:b8:7f:7c:9b:f9:e0:cb:f0:7b:10:c5:
44:c2:6f:2b:ea:ef:12:1a:0c:dc:39:cc:48:03:70:
d8:38:26:cd:98:3c:f9:62:d6:87:e1:3d:08:d2:64:
0a:f3:48:e0:61:4a:00:c2:56:61:38:ef:f5:ea:d4:
04:29:da:1b:7d:2b:f2:c2:90:55:b5:8e:37:9c:e6:
d7:b2:87:d4:59:d8:e6:cb:8e:39:3a:c7:5e:8c:d3:
b9:1b:f4:00:d9:bb:2a:96:f2:1d:74:09:48:46:de:
d1:30:26:cb:b0:a2:57:e0:c6:9a:95:5d:f7:de:85:
34:5a:2d:a7:c4:99:c1:b5:bc:3d:9e:eb:aa:4f:49:
86:c2:65:a1:14:ac:d1:4f:0b:80:58:90:34:c3:2c:
13:b6:a1:a0:ea:07:6d:5b:fb:b2:23:96:51:04:5d:
ec:05:5f:a5:79:61:24:ad:fc:69:0e:aa:92:b6:ff:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:CF:9F:F4:35:F4:21:B6:A0:EC:93:A7:76:03:46:9C:CA:06:B9
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3730303a3a2f34302d3430203d3e20313939303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:700::/40
Signature Algorithm: sha256WithRSAEncryption
2e:a9:5d:b4:0a:1b:8f:85:e7:b3:cc:29:18:61:30:f6:32:84:
46:05:2b:6d:12:e9:4a:0b:39:a5:de:06:cb:e8:23:8c:68:74:
7e:37:73:b5:1c:10:0f:c5:0f:56:ef:39:5f:0b:f7:5c:1c:82:
d9:bf:31:a6:a7:23:ad:23:75:26:a5:85:36:4f:22:11:31:58:
8a:ed:d4:6a:43:93:e3:13:98:f6:3a:1b:48:ef:7f:a9:4f:06:
61:5c:9f:de:12:35:ab:61:89:12:69:f2:fa:64:91:a5:5e:36:
88:94:59:88:cb:be:e1:d5:dc:45:17:c3:34:58:1f:92:de:73:
b4:9d:b2:d4:61:71:b1:21:45:2f:5e:71:de:88:f8:10:01:8a:
f7:5c:c1:2a:7e:9f:8e:47:10:04:62:ef:c7:6e:71:0c:bb:d8:
4c:36:db:2e:95:ee:a7:ca:46:0b:5b:35:62:23:f7:e6:58:80:
9a:c6:73:2f:dc:5e:e7:09:58:8e:16:5a:de:22:ab:90:1f:5e:
d5:26:7a:a4:19:71:91:4f:3c:b6:f0:e0:67:20:ab:3d:50:0a:
0e:9e:4a:b9:f2:16:03:53:2e:7a:3f:be:91:af:cd:c5:16:9c:
1c:cb:cd:14:42:88:ea:3c:9d:63:c5:67:ea:d0:c9:4b:76:17:
5b:65:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:51 2025 by rpki-client