Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393065303a3a2f34342d3438203d3e203437323732.roa
File: 326131313a323963303a393065303a3a2f34342d3438203d3e203437323732.roa (raw, json)
Hash identifier: 3/g+xhLbHj3L3xhqH5eJkVsEY3Dn8KC8qk9xlliuuw4=
Subject key identifier: 88:7E:F7:A5:25:EF:57:24:19:80:60:63:8E:80:E6:A0:CB:C2:64:B0
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 184023C8D246415D28F4CEFC6166101BEA73E7F9
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393065303a3a2f34342d3438203d3e203437323732.roa
Signing time: Wed 25 Oct 2023 12:48:14 +0000
ROA not before: Wed 25 Oct 2023 12:43:14 +0000
ROA not after: Wed 23 Oct 2024 12:48:14 +0000
asID: 47272
IP address blocks: 2a11:29c0:90e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:40:23:c8:d2:46:41:5d:28:f4:ce:fc:61:66:10:1b:ea:73:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 25 12:43:14 2023 GMT
Not After : Oct 23 12:48:14 2024 GMT
Subject: CN=887EF7A525EF5724198060638E80E6A0CBC264B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:fa:24:c4:95:04:4a:c0:a3:d9:44:ea:4c:
d0:97:9e:71:99:b9:31:ee:87:c8:d1:b3:af:a5:39:
3e:a3:fa:57:05:ef:90:4c:c7:e3:e4:1f:bc:cd:5d:
6d:01:69:9f:92:5f:db:13:f2:bd:7b:b4:43:0c:b7:
bc:6d:0e:ab:a8:08:29:2e:af:e8:36:4a:78:47:95:
6c:b4:16:78:94:3d:97:7d:f2:12:98:9b:d5:93:85:
64:95:67:a6:61:3f:13:70:b6:f6:e9:3e:18:54:49:
f1:2e:08:95:a8:84:4f:94:44:1c:19:86:51:f5:ed:
ea:e4:05:f7:f7:ec:ed:33:65:89:19:8f:c6:af:8a:
a1:02:7f:6b:77:0e:87:ba:77:a7:00:c9:56:4b:97:
0c:35:a5:bf:1c:5d:74:df:6b:90:e7:ee:7a:87:6a:
23:31:fd:32:89:4d:85:d7:bc:00:8b:cc:62:c7:b0:
18:b5:fc:53:40:c0:45:dd:7b:fb:5f:1b:a9:4b:ad:
05:43:e2:07:b8:a6:b7:9c:1e:8c:3e:00:74:e2:cf:
2c:30:27:54:1c:74:07:cc:85:f5:8b:ba:12:44:3c:
1d:08:4e:c4:36:75:be:a3:1c:39:7e:64:18:f3:46:
ab:a3:88:ab:c8:50:10:fd:1a:2c:2d:83:02:a5:43:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:F7:A5:25:EF:57:24:19:80:60:63:8E:80:E6:A0:CB:C2:64:B0
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393065303a3a2f34342d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:90e0::/44
Signature Algorithm: sha256WithRSAEncryption
78:2e:63:74:fd:96:37:f0:6e:25:83:7e:24:5e:d2:4d:b6:d5:
54:62:fa:27:09:2d:52:88:84:61:e6:68:99:dd:9e:54:f1:3b:
a2:87:51:7b:31:ba:d4:4d:03:00:8b:1d:5c:c3:f5:a4:83:62:
e9:bb:66:64:7e:b9:09:e5:45:c4:e7:1a:be:10:02:f1:b1:5e:
a7:1e:02:42:a3:18:99:d5:8b:19:5a:45:2a:12:c0:71:4b:58:
19:84:81:9c:a8:30:82:68:d9:23:77:46:4b:5a:66:63:41:5c:
4e:dc:f9:85:1a:75:3a:65:d6:91:55:81:96:55:d8:3f:aa:6b:
8c:f3:a9:90:96:84:0a:94:02:c4:1f:51:7e:98:61:d7:38:b7:
28:30:f1:bd:3e:68:d5:57:40:d7:a2:1e:aa:72:c5:ed:94:28:
6b:86:8c:98:fb:48:43:dd:d9:1d:a2:01:bf:b0:85:e4:3b:c6:
4d:63:b0:61:51:fa:94:74:1b:58:12:3f:e5:cf:88:8a:66:0d:
57:92:af:48:50:4b:30:be:99:9d:7e:0d:71:83:01:27:e0:1e:
d4:3c:fb:07:6f:3c:47:88:11:02:15:a4:39:4a:96:15:6a:ba:
56:6b:bd:08:b0:86:aa:de:03:30:d7:66:1d:b4:67:a7:af:cd:
c1:45:c3:d8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUGEAjyNJGQV0o9M78YWYQG+pz5/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4MDM2MDgzOTU3MDdBNkM0QTc2MjY0MzE5OEE1MkM0
OURGNjAxNzAeFw0yMzEwMjUxMjQzMTRaFw0yNDEwMjMxMjQ4MTRaMDMxMTAvBgNV
BAMTKDg4N0VGN0E1MjVFRjU3MjQxOTgwNjA2MzhFODBFNkEwQ0JDMjY0QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EvokxJUESsCj2UTqTNCXnnGZ
uTHuh8jRs6+lOT6j+lcF75BMx+PkH7zNXW0BaZ+SX9sT8r17tEMMt7xtDquoCCku
r+g2SnhHlWy0FniUPZd98hKYm9WThWSVZ6ZhPxNwtvbpPhhUSfEuCJWohE+URBwZ
hlH17erkBff37O0zZYkZj8aviqECf2t3Doe6d6cAyVZLlww1pb8cXXTfa5Dn7nqH
aiMx/TKJTYXXvACLzGLHsBi1/FNAwEXde/tfG6lLrQVD4ge4precHow+AHTizyww
J1QcdAfMhfWLuhJEPB0ITsQ2db6jHDl+ZBjzRqujiKvIUBD9GiwtgwKlQ1EJAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUiH73pSXvVyQZgGBjjoDmoMvCZLAwHwYDVR0j
BBgwFoAUBIA2CDlXB6bEp2JkMZilLEnfYBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzIvMDQ4MDM2MDgzOTU3MDdBNkM0QTc2MjY0MzE5OEE1MkM0OURGNjAxNy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh
ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC8wNDgwMzYwODM5NTcwN0E2QzRBNzYyNjQz
MTk4QTUyQzQ5REY2MDE3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMi8zMjYxMzEz
MTNhMzIzOTYzMzAzYTM5MzA2NTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCoRKcCQ4DANBgkqhkiG9w0BAQsFAAOCAQEAeC5j
dP2WN/BuJYN+JF7STbbVVGL6JwktUoiEYeZomd2eVPE7oodRezG61E0DAIsdXMP1
pINi6btmZH65CeVFxOcavhAC8bFepx4CQqMYmdWLGVpFKhLAcUtYGYSBnKgwgmjZ
I3dGS1pmY0FcTtz5hRp1OmXWkVWBllXYP6prjPOpkJaECpQCxB9Rfphh1zi3KDDx
vT5o1VdA16IeqnLF7ZQoa4aMmPtIQ93ZHaIBv7CF5DvGTWOwYVH6lHQbWBI/5c+I
imYNV5KvSFBLML6ZnX4NcYMBJ+Ae1Dz7B288R4gRAhWkOUqWFWq6Vmu9CLCGqt4D
MNdmHbRnp6/NwUXD2A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:41 2025 by rpki-client