Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3438203d3e203437323732.roa
File: 326131313a323963303a393030303a3a2f34342d3438203d3e203437323732.roa (raw, json)
Hash identifier: JQg9ufWayehjC8ExKLChlARJxAh+wfwMvPsAycRDNvc=
Subject key identifier: 8C:80:13:92:7F:66:00:1F:FF:85:74:C8:E8:16:C6:45:28:5F:D7:56
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 7701151C7A545DF9ABE8336A577CC6B1EE696D28
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3438203d3e203437323732.roa
Signing time: Tue 17 Oct 2023 17:42:16 +0000
ROA not before: Tue 17 Oct 2023 17:37:16 +0000
ROA not after: Tue 15 Oct 2024 17:42:16 +0000
asID: 47272
IP address blocks: 2a11:29c0:9000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:01:15:1c:7a:54:5d:f9:ab:e8:33:6a:57:7c:c6:b1:ee:69:6d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 17 17:37:16 2023 GMT
Not After : Oct 15 17:42:16 2024 GMT
Subject: CN=8C8013927F66001FFF8574C8E816C645285FD756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:79:e9:85:cf:e3:5b:c8:c8:20:73:ab:39:
c4:3c:1e:fc:e7:10:97:0d:a7:ed:6f:ae:b3:11:a6:
88:5a:c1:20:11:9f:3f:98:0c:90:f9:93:13:03:26:
49:63:1d:c0:50:e9:c8:c7:06:a6:32:b7:11:88:06:
11:47:07:1f:0b:d4:ab:c5:b2:8e:1b:cb:d5:0a:42:
91:63:da:0c:b9:ce:83:6c:ed:dc:34:d8:15:fe:a0:
ff:40:71:20:04:59:bb:b9:dc:f3:2e:bd:d1:7a:75:
ba:bb:48:a8:f0:57:ee:fe:17:4d:16:3e:8d:5b:f4:
0f:00:09:59:4e:98:8d:eb:57:19:bd:ad:3f:33:0f:
ae:38:a2:ca:56:8e:eb:ef:e8:3d:95:df:09:c5:f2:
ef:5e:73:25:26:db:bd:36:b9:da:bf:75:0f:aa:26:
66:b3:0a:2f:7d:fd:84:5f:9d:24:9d:da:bc:d6:24:
dd:65:e1:78:3f:53:ee:14:a6:06:38:7c:fa:17:35:
a3:bc:bd:89:39:ba:ee:f1:5f:07:58:b6:61:7a:94:
3e:11:6d:e3:2e:7b:7b:2c:2d:d1:6b:1a:b9:a6:e8:
dc:a5:53:fa:a2:fa:bb:0d:48:39:28:50:aa:38:f8:
a4:43:d9:69:3d:76:76:01:5e:30:c5:40:4a:ad:52:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:13:92:7F:66:00:1F:FF:85:74:C8:E8:16:C6:45:28:5F:D7:56
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f34342d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9000::/44
Signature Algorithm: sha256WithRSAEncryption
79:d5:78:c9:19:77:52:45:f5:32:d6:d8:09:62:fa:4c:e3:14:
d4:7a:8f:f8:fe:ae:67:cf:48:dc:e4:c2:a5:4d:4a:50:6f:11:
12:a5:c1:43:9e:58:fa:96:e1:fe:fd:db:c5:22:59:47:c4:d5:
e6:7e:7d:3c:ab:f1:bc:9a:a7:ca:8f:a5:8b:9b:42:3c:fd:77:
3b:50:84:f3:05:86:75:82:97:37:1c:20:08:fe:30:d8:c0:f6:
6a:9e:75:7a:45:39:cc:ae:7f:35:6d:c6:0d:97:e6:b0:46:7a:
a2:f3:e9:dc:d5:56:e5:1e:26:f2:d0:d0:bf:66:8f:85:6e:a3:
c5:ae:f2:aa:20:66:ee:7c:a4:61:22:01:ba:16:c1:a9:74:26:
36:ed:99:01:a7:d7:9c:55:d0:24:ee:df:ee:98:58:2d:9f:c6:
68:4d:0d:86:0c:ea:9e:6f:30:fc:46:c8:23:f1:90:61:4a:39:
59:96:a1:23:ba:fe:35:ea:91:ab:b2:8d:10:73:07:b1:83:7b:
af:46:c7:31:2e:68:45:f1:09:c2:ac:fc:1e:84:56:52:c0:ca:
22:3b:be:73:2b:4b:3e:a0:ee:2f:bf:91:1e:4d:eb:1c:21:9f:
a0:c1:e4:71:37:07:bd:79:38:84:e6:cd:d0:02:e0:6d:ba:59:
55:00:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:55 2025 by rpki-client