Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830393a3a2f34382d3438203d3e203437323732.roa
File: 326130373a353463313a333830393a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: 2Wj+5PzcVceWlD0LIqQtCzb7ufD89FrvmZYx6MQPODI=
Subject key identifier: 5A:33:49:2F:87:43:B4:73:43:FA:5A:9C:9B:80:B7:06:40:22:70:9D
Certificate issuer: /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial: 698E1692049D25C354E58197F0B0F2F14F931A71
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830393a3a2f34382d3438203d3e203437323732.roa
Signing time: Wed 04 Oct 2023 01:09:37 +0000
ROA not before: Wed 04 Oct 2023 01:04:37 +0000
ROA not after: Wed 02 Oct 2024 01:09:37 +0000
asID: 47272
IP address blocks: 2a07:54c1:3809::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8e:16:92:04:9d:25:c3:54:e5:81:97:f0:b0:f2:f1:4f:93:1a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Validity
Not Before: Oct 4 01:04:37 2023 GMT
Not After : Oct 2 01:09:37 2024 GMT
Subject: CN=5A33492F8743B47343FA5A9C9B80B7064022709D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:c5:db:54:bc:22:28:8d:40:c1:e1:de:80:
fb:9b:60:37:5b:db:0d:1b:f5:bc:3b:12:7a:02:ec:
b9:07:1f:3d:86:b1:1e:09:88:0a:f5:4b:28:7e:77:
3b:de:f2:e2:7d:75:a2:28:90:af:62:69:a3:bc:45:
56:fa:43:c1:ba:f4:f5:6f:46:2a:89:35:36:2a:98:
eb:31:bb:b0:f6:13:02:87:6f:1f:be:85:9c:0d:30:
0a:96:f9:97:b8:40:83:6e:54:02:97:c1:0f:c2:5c:
9b:35:ed:25:9f:da:27:80:e5:42:47:25:f0:9f:50:
5f:07:01:c0:69:d6:de:ce:70:7b:7a:31:c6:4d:99:
16:16:43:f8:97:6a:15:e8:d9:bf:75:78:e7:b8:30:
c1:02:d6:be:a6:ee:8e:7b:b4:95:8f:2a:c1:ce:a3:
08:77:a6:b1:ca:12:d5:00:b9:70:82:22:7c:78:c9:
11:02:8a:ed:57:83:60:ea:1a:28:58:f1:13:0a:ef:
e7:94:c1:d2:7b:3a:12:47:5a:f5:bc:92:a4:58:8a:
b8:6d:78:0f:c4:e0:a3:a3:6d:88:51:18:5c:1d:de:
5f:d6:c0:e0:c2:46:78:f5:83:ca:5b:82:33:53:61:
38:3b:ba:c2:83:c4:cc:7d:5a:1f:61:7c:de:5a:54:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:49:2F:87:43:B4:73:43:FA:5A:9C:9B:80:B7:06:40:22:70:9D
X509v3 Authority Key Identifier:
keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830393a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3809::/48
Signature Algorithm: sha256WithRSAEncryption
79:30:45:ad:7c:e3:0f:96:10:a1:69:4d:e3:0b:a4:7c:4a:e0:
5b:96:57:ba:e3:54:45:b2:70:37:cb:b6:2f:1c:8c:c3:71:8f:
1e:37:73:18:3a:c3:35:db:8b:04:22:b7:77:15:17:ce:11:6b:
f9:90:92:8f:f7:2e:de:61:4f:8b:a6:b5:c5:17:5f:a8:52:fc:
18:d1:76:e1:f1:09:3b:be:ce:c1:0d:ba:9f:6a:13:ee:26:b6:
a8:f0:10:4f:0f:5d:db:fb:c0:28:20:3c:e0:54:4f:ad:59:c1:
55:1c:31:8b:b4:3b:e6:bb:31:9b:03:05:56:0f:6e:d6:48:aa:
04:09:c2:df:3b:77:cf:76:d1:57:be:4f:15:b9:1a:a6:8c:b5:
de:ca:85:c1:20:a1:2c:cf:06:b9:9a:bf:be:f4:0c:71:4b:f3:
06:bf:b7:4e:db:c0:47:d1:22:fd:ad:57:b6:c1:16:c3:e9:fc:
66:e4:82:a6:ce:01:cd:2a:44:f0:17:af:91:30:bf:fe:f3:5a:
0e:01:4f:64:9c:fe:2a:1a:cf:a2:12:d6:a5:7a:05:17:b8:a3:
d9:a4:07:9a:ab:3f:4f:a1:8a:36:4f:ca:04:e9:ed:b1:de:3d:
25:9a:fb:bd:b2:da:c5:dd:cf:c5:fd:11:4f:c2:c9:c4:f5:03:
2d:61:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:38 2025 by rpki-client