Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3634203d3e203537313130.roa
File: 326131313a323963303a396430303a3a2f34302d3634203d3e203537313130.roa (raw, json)
Hash identifier: uJOuavHZrBxI03mAQGFrgD0QtoLdGC7LBZpOOPZj+Jo=
Subject key identifier: 0D:15:5D:C4:3E:A5:72:D9:44:9A:19:A6:91:27:E3:2D:86:A8:6A:3D
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 02D2848407D78B63029A5B098216D0D0A03BFE12
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3634203d3e203537313130.roa
Signing time: Mon 20 Nov 2023 18:44:02 +0000
ROA not before: Mon 20 Nov 2023 18:39:02 +0000
ROA not after: Mon 18 Nov 2024 18:44:02 +0000
asID: 57110
IP address blocks: 2a11:29c0:9d00::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d2:84:84:07:d7:8b:63:02:9a:5b:09:82:16:d0:d0:a0:3b:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Nov 20 18:39:02 2023 GMT
Not After : Nov 18 18:44:02 2024 GMT
Subject: CN=0D155DC43EA572D9449A19A69127E32D86A86A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:31:cc:b2:a8:a0:c3:39:be:d5:47:ed:ac:
f2:45:0d:69:06:8c:4e:ac:e0:1e:b7:68:d1:a1:09:
1c:40:f1:42:4c:75:f4:7c:9a:bd:0d:3a:03:85:b4:
67:6c:4c:12:77:46:80:31:e3:13:66:2b:ac:da:ec:
75:4e:18:d4:3e:51:46:6e:ac:5c:10:89:32:42:08:
a1:8e:5f:cf:5d:53:e8:d4:ad:e8:5b:9c:dd:45:51:
13:03:94:35:2b:3e:b9:b2:6b:0a:22:b4:87:35:b8:
71:5c:db:35:2a:10:58:54:77:20:f6:db:af:1f:f6:
9e:24:40:e3:4f:1f:3a:5b:93:40:21:fd:6a:fc:b8:
b6:32:14:36:c2:72:88:4b:13:f2:e2:0a:74:0d:4a:
cf:53:d1:44:6c:5d:68:d0:76:43:d1:b5:1b:64:04:
c3:59:b8:70:2a:11:40:29:0c:22:72:62:07:7a:ba:
58:bb:11:6f:7f:52:b5:80:9d:4f:5e:bf:ab:df:e9:
6a:19:7f:29:3a:22:1e:5e:c7:57:4a:af:fb:60:c5:
f1:8d:6a:df:2f:02:4a:df:2d:45:1d:e6:97:69:de:
69:cc:f5:a2:10:f4:64:1c:49:b3:0d:27:79:43:81:
ca:ac:db:a8:bc:d9:e2:fd:30:be:e5:88:a9:30:87:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:5D:C4:3E:A5:72:D9:44:9A:19:A6:91:27:E3:2D:86:A8:6A:3D
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396430303a3a2f34302d3634203d3e203537313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9d00::/40
Signature Algorithm: sha256WithRSAEncryption
40:d8:af:38:41:d6:15:c0:d5:4d:49:fc:b7:d3:81:4d:bc:ba:
e9:69:a7:2e:d5:04:00:3b:77:72:28:50:82:4c:0b:97:24:45:
33:7a:18:16:ca:48:3b:be:aa:61:fe:c9:8a:32:19:57:cd:24:
5b:69:25:fa:26:d1:3d:85:44:60:4d:85:9a:da:f2:c4:58:4b:
ff:c5:b8:3b:ee:d6:0f:eb:f9:d3:e8:81:30:ac:98:ba:97:4a:
40:1b:3e:62:e9:5f:00:68:e2:36:47:fc:eb:c1:4c:d0:36:f0:
73:8f:2a:50:9f:89:59:ee:45:02:b5:3c:da:6f:8b:96:51:48:
0b:d0:41:1b:6d:38:b0:6d:af:62:95:63:3c:d8:f9:43:ce:7d:
ad:fe:dd:bb:84:00:c3:c1:f8:87:d4:4c:57:7c:12:4e:4c:32:
40:15:a0:b7:7d:c1:02:12:14:5b:1f:4a:97:51:7d:f4:f0:97:
ca:87:7e:bf:4e:c0:99:b6:d3:53:b2:3d:ab:aa:49:17:98:24:
2e:87:a5:16:18:9a:39:b1:62:a4:4f:8e:38:1a:5f:55:2f:b5:
54:e3:4d:f8:a8:ba:92:c2:df:9e:aa:89:c0:49:64:2d:97:dc:
89:49:43:b7:78:fe:3f:14:ec:d6:0a:b5:49:83:a6:d4:d1:77:
d1:5d:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:34 2025 by rpki-client