Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/326130373a663838303a3a2f32392d3438203d3e203539393933.roa
File: 326130373a663838303a3a2f32392d3438203d3e203539393933.roa (raw, json)
Hash identifier: wMQSqEm1C5z1nsv6thKeX5gFF1W64cXFpC4DBf5lNtc=
Subject key identifier: 36:F3:52:23:93:20:5B:82:05:4B:49:BE:A2:A0:DB:F1:17:54:6C:F0
Certificate issuer: /CN=07d9165af9441043ebdea8c571c0a1f8b6416bbc
Certificate serial: 3F188F2F9216091185F99E016E24FB042FD3FDCB
Authority key identifier: 07:D9:16:5A:F9:44:10:43:EB:DE:A8:C5:71:C0:A1:F8:B6:41:6B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9kWWvlEEEPr3qjFccCh-LZBa7w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/326130373a663838303a3a2f32392d3438203d3e203539393933.roa
Signing time: Sun 28 Jan 2024 01:07:50 +0000
ROA not before: Sun 28 Jan 2024 01:02:50 +0000
ROA not after: Sun 26 Jan 2025 01:07:50 +0000
asID: 59993
IP address blocks: 2a07:f880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:18:8f:2f:92:16:09:11:85:f9:9e:01:6e:24:fb:04:2f:d3:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d9165af9441043ebdea8c571c0a1f8b6416bbc
Validity
Not Before: Jan 28 01:02:50 2024 GMT
Not After : Jan 26 01:07:50 2025 GMT
Subject: CN=36F3522393205B82054B49BEA2A0DBF117546CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:14:7c:9b:6b:fd:c0:e8:4b:82:ff:a5:ec:
15:b8:f9:61:8d:31:8b:c2:c3:9a:b5:b6:04:24:05:
19:29:a3:5d:b1:f6:80:a3:8b:d8:18:4b:f2:ec:04:
68:c4:d7:ef:35:4b:bf:18:09:d5:6b:74:f4:0b:3d:
08:d9:6b:83:a5:2e:07:bc:5b:8f:5b:2c:94:7c:a3:
2e:85:f3:0f:cf:ea:3c:cc:49:f2:a7:d4:b0:06:8c:
78:31:01:b6:67:f7:e6:ec:54:3c:6a:2e:a7:ed:b5:
52:79:d3:a1:06:23:14:b8:0e:be:81:51:b0:a0:2b:
db:d7:7f:6e:36:43:4a:ef:5d:9d:6f:d6:49:9e:b3:
64:08:63:1e:6e:f4:af:f3:d2:0e:4e:81:1e:f2:69:
83:76:4f:f4:d1:06:25:07:c3:eb:fe:f3:7e:a5:66:
36:8a:68:40:fc:d9:6c:a7:96:36:0e:a4:23:5f:ea:
14:96:3d:ce:1c:d3:7c:e4:18:07:6a:23:0f:46:47:
f4:c9:96:7c:20:e3:63:8d:3d:e3:7b:1e:b5:2b:9f:
26:6d:93:1c:e1:b3:c6:77:89:7e:e7:1d:5b:d3:b5:
16:d0:44:49:cd:79:1a:de:8d:68:14:b5:04:14:72:
8c:58:32:17:5f:68:07:0a:29:84:13:49:cd:9a:29:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:52:23:93:20:5B:82:05:4B:49:BE:A2:A0:DB:F1:17:54:6C:F0
X509v3 Authority Key Identifier:
keyid:07:D9:16:5A:F9:44:10:43:EB:DE:A8:C5:71:C0:A1:F8:B6:41:6B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/07D9165AF9441043EBDEA8C571C0A1F8B6416BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9kWWvlEEEPr3qjFccCh-LZBa7w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/19/326130373a663838303a3a2f32392d3438203d3e203539393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f880::/29
Signature Algorithm: sha256WithRSAEncryption
8c:9d:6e:9c:3c:b2:c3:17:7a:1c:dc:ac:89:2d:a6:6d:47:00:
39:80:5b:b8:a6:f5:fe:fe:c2:2b:8d:ed:db:f3:14:59:12:d6:
75:a9:6e:b5:34:30:14:f0:8d:91:90:2c:da:21:16:20:37:dc:
9f:a9:11:94:23:df:02:26:6d:46:ca:eb:6d:63:58:82:b8:b5:
64:53:16:9e:7e:8c:32:1f:67:b8:0c:2a:c7:df:b1:82:db:89:
7d:30:4f:b4:0d:66:0c:27:19:37:58:d8:fd:50:09:db:21:99:
d9:71:d5:af:39:aa:02:02:07:8b:c1:da:58:ed:7b:ee:69:00:
18:e7:79:cc:1b:25:66:7e:83:62:be:f6:8a:5a:cc:da:7f:27:
42:6b:6c:ca:bd:07:31:f6:85:52:28:58:b9:a6:44:b3:71:28:
bc:82:f7:7c:7c:5d:79:01:08:e5:0d:6b:b6:da:ca:1a:4a:72:
79:50:4f:e0:58:be:5d:34:e3:d0:d1:b9:3a:25:a9:c2:4b:56:
2d:38:28:73:0d:f5:6d:bf:fd:c7:98:64:83:c4:62:a0:1d:0d:
81:e3:1f:8b:f7:c2:b1:a4:24:4e:a2:7b:d7:f1:8c:2e:64:f3:
0f:83:62:84:ff:fb:9c:0a:b3:68:c3:7a:8c:89:5f:0d:77:3c:
14:e5:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:36 2025 by rpki-client