Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393066303a3a2f34342d3438203d3e203437323732.roa
File: 326131313a323963303a393066303a3a2f34342d3438203d3e203437323732.roa (raw, json)
Hash identifier: QECPNwN61/iY9yd11Ya7ZDShiy90gvSBcfyWsVGAECc=
Subject key identifier: 67:2D:9D:FA:01:2C:74:F8:78:38:DA:33:51:54:B3:D9:DD:9B:87:EE
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 05557A6BF3F694D3FD67C894B45485366CCBE2D8
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393066303a3a2f34342d3438203d3e203437323732.roa
Signing time: Wed 25 Oct 2023 12:43:33 +0000
ROA not before: Wed 25 Oct 2023 12:38:33 +0000
ROA not after: Wed 23 Oct 2024 12:43:33 +0000
asID: 47272
IP address blocks: 2a11:29c0:90f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:55:7a:6b:f3:f6:94:d3:fd:67:c8:94:b4:54:85:36:6c:cb:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 25 12:38:33 2023 GMT
Not After : Oct 23 12:43:33 2024 GMT
Subject: CN=672D9DFA012C74F87838DA335154B3D9DD9B87EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:25:9a:53:76:cf:82:db:3c:63:6f:9a:ca:
5f:6a:79:0d:42:47:bd:2e:e0:99:c1:84:97:ce:45:
73:d2:5f:84:07:1d:2b:e2:fb:57:ae:43:41:e0:51:
1e:a8:23:b3:68:05:ed:5c:29:f3:e7:fb:5e:1c:ad:
97:4f:ac:28:37:f5:b4:78:68:5e:da:ba:e0:b7:70:
b4:0b:10:45:f8:be:62:93:15:30:d1:25:5b:d4:90:
1c:bc:f3:47:32:1c:03:db:c5:29:42:40:08:65:04:
56:d4:7b:39:01:59:3f:72:eb:3d:d3:75:e3:c4:82:
8c:51:03:fa:af:84:8c:7b:8e:91:4b:e9:e7:81:e2:
eb:de:78:d8:d7:d1:40:bf:29:13:55:4e:4a:cb:ce:
17:82:11:07:58:35:64:3a:b9:c7:cf:50:3f:0a:bd:
58:4d:f0:8b:10:28:43:d2:3b:01:24:85:cb:c8:a6:
8c:c6:51:09:d5:79:8b:3f:2d:bb:79:b4:7b:b4:96:
17:14:9d:c1:15:57:9c:83:ed:9e:9f:de:a1:fb:0a:
c1:c8:04:b5:b7:3c:a4:89:c4:98:fa:ce:0c:1b:8e:
15:c0:18:f9:c2:e3:58:0e:7e:5f:d8:8a:d9:b3:60:
54:71:3a:db:64:3d:66:53:ba:e8:74:f9:bc:b7:42:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:9D:FA:01:2C:74:F8:78:38:DA:33:51:54:B3:D9:DD:9B:87:EE
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393066303a3a2f34342d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:90f0::/44
Signature Algorithm: sha256WithRSAEncryption
1f:11:77:44:d0:b4:81:66:4e:a0:fe:04:e0:d4:1f:42:62:74:
3e:45:39:70:4c:26:fb:51:c5:02:6a:af:40:58:2a:61:d8:62:
ca:39:eb:87:37:2f:f6:72:39:ae:3c:18:9d:80:bb:79:b7:c1:
dc:fc:b6:e3:bc:5a:0a:5a:c0:32:e7:14:60:4a:f1:6f:36:9a:
7d:20:e8:4b:1d:75:f4:b7:03:fb:31:32:a6:0a:20:c4:fd:de:
62:97:cc:70:e8:0f:92:94:44:d2:db:fa:1f:76:fd:9a:f5:7a:
73:37:37:fa:ba:0a:9d:04:cc:0b:4e:6d:df:92:81:08:63:90:
89:58:d0:79:4d:a5:de:88:08:81:d4:ca:8a:c4:78:37:71:7d:
f7:9e:b1:f1:37:40:76:4e:81:f7:5a:50:88:ac:af:39:8e:a7:
5f:1b:a7:a7:f3:bc:37:2b:e3:de:d4:6a:ff:4d:16:16:31:f0:
06:5b:6f:3c:8b:49:76:98:a7:c2:83:07:71:b9:07:55:45:c3:
45:4c:32:4c:b9:e0:b7:9e:b4:0e:66:99:8b:01:d3:b3:44:fa:
e7:4b:c9:42:d3:37:ea:62:b0:01:c4:d7:21:71:cc:08:34:ab:
2a:b8:e1:43:da:34:e0:f0:74:4f:81:3b:db:e7:82:2a:91:5e:
de:e9:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:04 2025 by rpki-client