Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3438203d3e20323136323932.roa
File: 326131313a323963303a396430303a3a2f34302d3438203d3e20323136323932.roa (raw, json)
Hash identifier: T/OlRS7a+5OOmz2ICCQniATi6VUJkuBY0CuEDSVHMeg=
Subject key identifier: 38:56:3F:D5:6D:EC:14:41:56:49:0C:6C:E8:1B:5E:4A:7E:7B:03:E4
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 12A2FE11086CB24BC9AFF241A0A4572E29BBFB67
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3438203d3e20323136323932.roa
Signing time: Mon 23 Oct 2023 08:18:24 +0000
ROA not before: Mon 23 Oct 2023 08:13:24 +0000
ROA not after: Mon 21 Oct 2024 08:18:24 +0000
asID: 216292
IP address blocks: 2a11:29c0:9d00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a2:fe:11:08:6c:b2:4b:c9:af:f2:41:a0:a4:57:2e:29:bb:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 23 08:13:24 2023 GMT
Not After : Oct 21 08:18:24 2024 GMT
Subject: CN=38563FD56DEC144156490C6CE81B5E4A7E7B03E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:bd:62:d1:83:1a:9d:44:20:d1:16:dd:dc:
00:35:4b:7f:f7:1c:be:84:99:14:3f:bf:a4:a9:85:
4b:ee:56:f8:59:e5:42:f6:63:d3:42:2b:d6:1f:3b:
6d:2f:d7:cf:1f:cc:83:16:9e:5d:c5:85:f4:5f:cd:
a0:a4:89:10:4c:2f:98:c3:09:a2:1b:93:c3:18:51:
f1:4f:71:57:09:54:83:56:1b:41:b8:6d:7c:ba:9d:
47:49:10:df:ed:d4:8c:da:dc:68:d5:9a:dd:4a:e4:
99:9e:2c:25:ce:05:4f:57:26:f4:79:3b:07:e1:68:
86:4c:68:6c:a3:cb:c1:3c:70:ec:aa:fd:fa:32:29:
21:cb:fa:8b:af:fe:90:67:93:0e:4b:3d:ce:d8:34:
be:72:6e:d2:bf:21:d6:39:e7:cc:ea:ce:f5:95:72:
0d:83:d5:50:5a:f8:18:0a:6c:24:09:ee:ac:42:cd:
16:98:5e:65:d0:71:fc:94:61:17:fb:28:11:27:9b:
a1:16:87:f2:92:7f:6b:1a:a2:c2:b7:62:e2:32:34:
31:10:4e:af:65:e4:69:3d:55:6a:c3:e9:33:88:16:
30:5b:93:09:2c:87:a1:a1:a2:71:f6:63:03:75:4b:
cc:32:67:84:01:55:7b:71:bc:78:a7:f2:03:f5:c9:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:3F:D5:6D:EC:14:41:56:49:0C:6C:E8:1B:5E:4A:7E:7B:03:E4
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3438203d3e20323136323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9d00::/40
Signature Algorithm: sha256WithRSAEncryption
9e:34:18:d0:fd:12:a6:ba:f3:a7:17:73:0e:ec:f3:83:93:3f:
76:4c:8e:30:54:7f:ec:ad:51:a0:76:c6:ca:80:85:18:73:28:
db:84:25:97:09:76:5b:36:22:78:4e:53:b8:e0:53:14:72:05:
d2:dc:73:7e:5f:db:9a:74:32:a6:6e:a3:f5:c0:75:3c:cb:01:
1b:64:61:30:b0:6b:74:fd:88:ed:fc:89:99:11:ea:5a:f7:a0:
83:37:8a:f8:36:29:db:74:c8:f6:6e:79:dc:c8:78:6d:a2:69:
5b:04:36:bd:b7:0e:5c:35:17:39:88:9c:ad:15:7f:98:52:41:
64:e4:25:e9:6a:03:fe:d2:e0:3d:b1:e0:d5:e1:1c:34:67:3b:
bb:dc:cf:82:93:c4:3e:34:2c:4d:40:ac:4f:52:5a:80:69:65:
d2:90:a7:6f:38:67:16:41:06:cb:87:a3:72:ea:20:8c:34:aa:
e9:24:9f:93:f5:1a:c2:69:bb:69:a5:0e:70:51:d4:bb:2c:1a:
b0:5a:26:f4:11:55:3c:f0:2c:49:b4:45:6b:51:ff:49:97:fb:
d1:24:bf:fd:98:ca:fe:ff:be:8f:a9:83:7a:6e:eb:7c:c5:b8:
f6:dd:60:27:2a:9f:1e:e0:a7:21:00:18:42:1f:df:ef:9f:6f:
77:eb:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:25 2025 by rpki-client