Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3438203d3e203437323732.roa
File: 326131313a323963303a393030303a3a2f33362d3438203d3e203437323732.roa (raw, json)
Hash identifier: 5E8D0L7htrX3TU1BvChnh+jhDD2Gh41tONoX3urA818=
Subject key identifier: FC:10:A7:DB:B6:FF:9C:4A:EF:36:F8:3C:B1:68:A6:C1:39:09:43:7D
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 5A00D986361B744B475F921DAFC0DB0E6B25815B
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3438203d3e203437323732.roa
Signing time: Fri 22 Sep 2023 19:09:11 +0000
ROA not before: Fri 22 Sep 2023 19:04:11 +0000
ROA not after: Fri 20 Sep 2024 19:09:11 +0000
asID: 47272
IP address blocks: 2a11:29c0:9000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:00:d9:86:36:1b:74:4b:47:5f:92:1d:af:c0:db:0e:6b:25:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Sep 22 19:04:11 2023 GMT
Not After : Sep 20 19:09:11 2024 GMT
Subject: CN=FC10A7DBB6FF9C4AEF36F83CB168A6C13909437D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:91:a4:ba:61:43:94:bd:c2:2d:51:5d:1f:
d8:e7:87:3b:2d:7a:4b:9e:e1:31:b0:a9:c3:98:90:
e1:57:56:9c:4a:f1:34:05:36:63:fd:88:e1:f8:8c:
99:b4:52:16:39:29:f3:c1:65:5e:cd:b0:21:25:de:
50:69:a7:3b:64:4f:63:8e:aa:da:91:12:15:c0:b5:
71:c9:b6:d6:9b:7a:69:d4:4e:7e:20:aa:aa:da:3d:
a4:27:57:eb:7b:87:e4:72:f6:fa:cf:6b:4c:fd:46:
bd:4f:f5:49:4a:06:45:01:22:92:11:5a:5a:91:c8:
0b:7e:9a:45:0f:d8:74:9a:a7:74:33:6a:60:79:5b:
fc:c6:40:b4:d0:da:11:b1:83:72:68:13:57:95:2a:
38:62:10:2a:ad:6a:8a:3b:10:1d:6e:2a:fe:f4:ff:
3f:d5:a1:d5:60:35:d9:dd:af:d3:5a:95:dc:19:32:
5a:62:8a:ba:b1:39:b2:4f:7c:03:de:75:54:2b:32:
b7:bf:1d:9a:22:44:4e:b2:c5:94:82:b2:c0:f9:95:
2c:a5:5e:0b:b6:b7:86:99:06:5b:90:74:e8:56:6e:
de:56:ed:df:58:7c:37:b9:40:4c:f4:58:8e:fa:d4:
d7:9e:c1:68:b1:b9:38:1f:2a:64:c7:3a:79:4d:af:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:10:A7:DB:B6:FF:9C:4A:EF:36:F8:3C:B1:68:A6:C1:39:09:43:7D
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
59:e5:a3:fc:0b:fd:91:82:38:47:93:ff:f2:49:ce:ef:de:19:
84:03:dd:78:d9:7a:af:f1:ea:2e:b9:47:a4:e9:e6:fd:39:c7:
a8:d0:1e:c0:80:be:b4:5e:06:20:67:7c:1b:ba:59:95:8b:e6:
5c:a8:ed:37:24:c5:91:e8:56:40:21:6a:a1:ff:e2:dc:86:c5:
d4:5e:05:02:3a:42:c0:54:29:64:02:ba:cc:b8:a2:d1:46:39:
b0:d2:8b:f2:55:de:ed:e9:56:40:ce:fc:a3:19:4a:38:b6:0f:
22:a8:5d:2b:58:96:21:0a:09:56:2a:d8:f0:b8:82:02:e7:11:
0c:99:76:39:59:2a:49:ea:60:48:97:27:ef:30:e5:31:90:42:
09:ab:54:00:ce:be:ed:88:c9:f5:49:58:06:e3:f2:d6:af:09:
a8:a1:0d:f8:cf:4f:53:de:19:32:60:ff:59:be:51:8b:1c:7f:
26:5e:54:e0:06:e9:b3:76:83:d0:a0:fd:6a:0a:f0:e5:7b:40:
7c:67:9b:f5:e6:da:c3:f2:ae:93:5a:fc:22:d9:54:6f:a3:65:
07:39:5d:18:53:8b:da:ca:dc:af:56:e8:a9:a5:9e:ca:02:25:
fb:d8:19:da:2a:0a:28:a0:f3:0d:e8:44:3c:4a:73:7f:9c:3c:
e0:67:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:19 2025 by rpki-client