Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34302d3438203d3e203437323732.roa
File: 326130373a353463313a333830303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier: F7fWd5a6rFILyu++9JkUVLKt9Vt8+yAVHxiQuwAf0Sw=
Subject key identifier: 5A:E2:02:3D:04:6E:B9:ED:A4:2A:3B:8B:B6:A3:C8:06:23:D6:05:FF
Certificate issuer: /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial: 2905981742050E71CD2EA19AD4976F2A12EA4D3E
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34302d3438203d3e203437323732.roa
Signing time: Fri 22 Sep 2023 17:38:07 +0000
ROA not before: Fri 22 Sep 2023 17:33:07 +0000
ROA not after: Fri 20 Sep 2024 17:38:07 +0000
asID: 47272
IP address blocks: 2a07:54c1:3800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:05:98:17:42:05:0e:71:cd:2e:a1:9a:d4:97:6f:2a:12:ea:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Validity
Not Before: Sep 22 17:33:07 2023 GMT
Not After : Sep 20 17:38:07 2024 GMT
Subject: CN=5AE2023D046EB9EDA42A3B8BB6A3C80623D605FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:4e:71:7a:72:67:eb:bc:95:db:ca:57:a7:
ff:96:f6:e6:97:fd:0c:8f:b4:d7:37:ea:50:30:9e:
d2:e3:5b:0f:e5:f8:c1:65:81:70:70:75:3a:55:0a:
55:ba:fa:9a:0a:db:f4:ca:c5:1c:53:1f:c5:41:08:
83:0e:52:07:6b:6a:39:55:bf:3f:77:29:ce:fb:04:
41:db:a8:8e:5c:27:11:df:c9:12:af:f6:f6:8d:a0:
2f:36:f7:d2:46:46:b3:5e:ee:76:54:57:16:51:66:
08:56:ae:43:26:e7:28:e1:b3:ae:24:35:df:eb:72:
47:bb:60:cd:66:94:ab:27:8e:45:48:7a:8c:f3:b7:
25:e9:c4:73:cf:3a:cc:1d:73:80:dc:97:4a:ac:77:
a7:a5:ec:8c:af:42:01:99:ea:90:f7:de:19:95:c9:
42:0c:a6:e0:88:13:0d:30:04:92:aa:c7:b3:33:82:
e1:1e:61:49:56:e5:5e:f7:f2:c1:48:bd:aa:27:1d:
8f:cd:54:ad:f5:1b:bb:9d:2d:e3:60:1a:a7:04:24:
17:d7:f7:8c:80:7e:04:7e:59:6f:30:56:ae:44:41:
29:75:ae:c5:68:49:91:08:51:61:08:8f:48:de:da:
19:f7:7a:76:54:95:df:cd:90:16:4b:21:83:e4:92:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:02:3D:04:6E:B9:ED:A4:2A:3B:8B:B6:A3:C8:06:23:D6:05:FF
X509v3 Authority Key Identifier:
keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34302d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3800::/40
Signature Algorithm: sha256WithRSAEncryption
74:ff:f3:ce:2d:32:da:6d:fb:d9:aa:c6:3a:07:9a:2b:ed:99:
6c:1d:81:6c:ac:54:9b:51:5c:3a:20:9d:11:ff:02:47:fc:b7:
85:2d:a1:b0:16:b0:ea:be:d6:32:70:2e:fe:61:0d:b9:b4:e6:
91:38:02:66:0d:ee:9c:a3:e7:73:21:60:83:63:a7:34:3d:62:
cb:b2:f3:d0:ab:33:08:bc:4b:63:22:c8:d8:09:62:45:c7:0b:
db:0b:34:ce:ae:ee:83:22:e8:bf:93:0b:23:7f:be:16:d4:3d:
de:54:23:c2:de:7a:36:1c:d7:d9:c0:5c:52:f1:67:c4:74:98:
6d:39:eb:78:e6:95:06:67:fe:ac:47:04:c0:b2:f6:0f:70:90:
1d:1f:32:9f:4a:cb:d2:fe:7c:86:36:9a:71:51:1c:39:58:b5:
56:2c:25:cd:ef:81:d3:d9:40:47:2d:2f:17:6f:8b:02:f4:4d:
63:d1:57:03:3e:3a:7a:00:8a:96:dc:82:2f:5d:36:0e:23:7f:
19:50:de:3f:26:6b:a4:5d:e8:55:b8:50:1a:ac:d8:85:32:cb:
69:8d:8a:fd:f7:9d:54:a6:38:a1:8a:fe:46:f6:cd:50:62:97:
ee:1a:45:2e:4e:50:d5:f2:59:68:d7:04:cb:b4:ff:fd:b6:de:
c9:66:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:33 2025 by rpki-client