Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: zqXit6AjPih1H7o8vGK9RduZ+7GMr3usgZg4gAIjNW0=
Subject key identifier: EE:10:AB:15:C8:33:9C:19:DF:01:6D:7A:49:37:69:3D:AE:22:DE:37
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 7842778D5794769A40BB4356D0D35914C65039CE
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 15 Oct 2023 19:41:07 +0000
ROA not before: Sun 15 Oct 2023 19:36:07 +0000
ROA not after: Sun 13 Oct 2024 19:41:07 +0000
asID: 47272
IP address blocks: 2a11:29c0:9001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:42:77:8d:57:94:76:9a:40:bb:43:56:d0:d3:59:14:c6:50:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 15 19:36:07 2023 GMT
Not After : Oct 13 19:41:07 2024 GMT
Subject: CN=EE10AB15C8339C19DF016D7A4937693DAE22DE37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5a:df:2c:61:01:8c:e6:da:14:d0:e4:2f:39:
2e:7f:2d:70:28:9e:59:13:5c:95:73:f1:cc:ca:7c:
7b:a6:58:73:db:b0:10:87:78:81:49:57:21:92:45:
11:82:ad:2b:d5:26:33:7d:59:77:97:d6:50:bf:c0:
a8:c0:77:73:23:35:6f:74:d0:de:33:35:d1:b6:f0:
5c:00:09:98:ec:dc:d1:16:ac:37:a2:a6:3f:1c:91:
5b:d8:1b:48:48:12:08:fa:ac:bf:6d:a0:e4:b4:ad:
de:4f:85:52:96:f5:21:10:64:2d:7a:6a:4f:93:d8:
c8:ac:0c:56:1a:08:25:75:7d:89:5c:cb:bb:d3:20:
0f:1e:20:72:44:37:88:ae:b1:a7:5f:25:72:33:06:
7d:01:a4:44:30:ab:f5:c2:0b:34:07:85:55:1c:17:
d8:c0:17:00:dd:0a:1e:79:60:71:9e:71:39:cd:31:
0e:be:8f:4e:f6:c7:81:48:8b:fc:e9:2b:1b:81:3e:
e6:d7:34:a5:83:01:59:74:95:02:7e:ce:d4:17:45:
05:5e:b1:d4:8b:e2:66:b6:11:68:08:85:17:96:c1:
b4:2d:b3:c4:56:ef:d2:14:34:33:b7:cc:76:ce:a1:
ad:d7:4c:d3:c2:55:88:57:75:3a:e6:9a:b1:42:26:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:AB:15:C8:33:9C:19:DF:01:6D:7A:49:37:69:3D:AE:22:DE:37
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9001::/48
Signature Algorithm: sha256WithRSAEncryption
87:eb:da:9b:be:bb:fa:aa:cd:b3:a7:b4:01:70:eb:2f:b0:8c:
c1:42:ff:d8:b7:bd:0e:12:a8:05:fc:f3:60:0a:6b:7d:08:99:
d0:67:32:7c:fb:75:ed:5e:0a:aa:d4:93:30:16:e6:18:f1:de:
4e:b7:b3:a6:ba:75:3b:af:a9:27:69:f6:e7:ee:c4:6f:74:81:
65:a1:80:c6:1b:bd:82:a1:4c:eb:22:0a:f9:cf:20:9c:4c:fc:
b6:8f:e4:66:80:f0:fd:35:55:2f:4f:5a:f1:14:93:8a:4b:1c:
c3:df:04:6e:53:2f:ed:91:0a:89:1e:f5:c8:ba:22:52:95:b8:
c1:cb:61:67:39:9f:99:2c:47:f0:5f:2c:18:78:51:07:16:86:
14:08:eb:eb:92:0b:d0:dd:bd:11:91:43:dd:ab:95:bc:e0:fa:
5b:0e:d4:10:a6:9b:b2:a6:ef:0f:9e:c8:10:15:77:ee:1b:5f:
43:06:20:47:2d:af:19:b4:71:42:d2:66:f9:9d:a8:68:14:44:
05:f0:83:40:b7:f5:57:fc:a7:84:08:e8:86:9d:fe:45:65:57:
b4:27:91:9f:20:3c:cd:0c:98:90:f5:58:11:49:37:6f:5d:a9:
0f:b0:81:78:db:72:21:24:55:48:6f:f1:63:25:fa:96:f2:e9:
b6:26:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:11 2025 by rpki-client