Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa
File: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (raw, json)
Hash identifier: R+EiKwwEDxz1xQ6GdFVZb2UsUX00rOjHWZ2wwCdAZP8=
Subject key identifier: 70:80:BE:C8:4E:A6:5D:38:7D:86:C3:05:40:E9:C0:B3:6D:EE:F0:5B
Certificate issuer: /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial: 2683E35C7C31D20D6DAFCF4379F41DB2A9A7C901
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa
Signing time: Tue 21 Jan 2025 17:05:09 +0000
ROA not before: Tue 21 Jan 2025 17:00:09 +0000
ROA not after: Tue 20 Jan 2026 17:05:09 +0000
asID: 214809
IP address blocks: 2a0a:6044:b300::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:83:e3:5c:7c:31:d2:0d:6d:af:cf:43:79:f4:1d:b2:a9:a7:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Validity
Not Before: Jan 21 17:00:09 2025 GMT
Not After : Jan 20 17:05:09 2026 GMT
Subject: CN=7080BEC84EA65D387D86C30540E9C0B36DEEF05B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:4c:c8:d1:57:0f:e5:61:6d:9d:a0:29:4f:
0b:ba:7f:28:e6:d8:0a:38:f9:d6:7b:fa:ce:30:9f:
80:75:06:3b:46:ad:cc:17:0d:fd:e3:5e:6f:a7:5b:
d8:dc:eb:da:4e:24:f5:7d:d3:06:5b:de:ac:59:4f:
6e:2e:3d:d7:00:00:4b:2b:22:90:08:1c:1d:dd:76:
20:03:38:82:86:1c:05:83:a5:48:59:53:4e:dd:f0:
dc:0e:ec:9d:4e:10:6a:ce:3b:1f:c7:fc:f4:80:69:
08:07:ce:e6:d0:25:cb:9a:18:1c:e0:be:1e:63:f3:
6c:8a:52:b9:15:6d:12:14:47:99:f5:fa:31:e0:10:
39:38:3e:8b:3d:94:e6:99:0c:02:91:54:39:c1:f4:
5f:c5:50:92:aa:75:53:df:4f:c4:50:51:e0:66:0b:
18:0b:26:ab:39:b5:ec:6d:15:f5:42:fd:02:b5:a5:
bb:f9:19:86:80:10:fd:89:33:f4:fc:d5:1e:21:ee:
a5:de:7a:f3:60:c5:eb:84:29:cb:ad:bc:da:66:34:
53:2e:18:e6:c2:b9:21:4a:3a:a9:0b:8e:ef:0d:04:
c0:b2:de:8a:8b:07:0d:1a:53:5a:35:ba:48:db:f8:
f1:9f:ac:37:d1:94:5d:6c:4e:ae:6f:ce:d6:29:e9:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:BE:C8:4E:A6:5D:38:7D:86:C3:05:40:E9:C0:B3:6D:EE:F0:5B
X509v3 Authority Key Identifier:
keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b300::/42
Signature Algorithm: sha256WithRSAEncryption
8f:f8:72:86:b1:ba:b1:be:23:31:a8:83:21:0f:9c:01:d4:bf:
7e:96:97:b2:87:c8:17:b8:0b:0d:0a:b5:a3:6f:a6:e0:c5:24:
48:05:89:29:f8:b2:98:de:fd:d5:09:9e:c5:41:06:05:6c:68:
d7:a8:e2:36:c0:9c:b5:41:00:5c:da:6f:07:d9:1b:a9:43:81:
19:7d:55:03:ad:23:95:10:41:4b:cb:f6:90:0e:44:7f:99:c3:
9b:16:3f:9d:41:7f:2e:34:6c:ac:d2:35:c6:7a:a4:78:a0:41:
13:cc:25:42:3f:63:40:0b:14:ce:fb:d4:de:42:d8:5b:a8:23:
06:90:3e:55:1c:b5:f9:01:ac:9b:97:91:10:1b:15:17:d1:4f:
32:76:31:20:7a:56:48:25:88:4e:f7:7e:f9:69:ee:05:46:4b:
2e:52:86:04:a5:c1:87:0b:34:4a:7a:91:df:2c:16:7a:6f:c6:
f2:68:34:b2:c4:47:11:d6:ea:81:ad:b2:3c:0c:62:a3:3e:56:
84:e8:7b:d5:87:26:27:93:e6:0a:90:0c:06:43:1b:85:2f:f8:
d7:35:1f:41:68:53:02:0b:ab:37:c1:53:19:26:e9:c7:80:47:
b0:03:0c:a7:d6:fb:a9:2e:97:0c:a7:4f:24:1c:ca:0f:3b:49:
d9:89:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:52 2025 by rpki-client