Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa
File: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier: 65KxH6seIofG+vmHr5aI2/Lfdm2Bk4Pw2sBSezUjQNg=
Subject key identifier: 6B:CC:8B:62:73:55:24:96:D1:29:4D:C2:4F:59:FF:DF:79:B0:B2:DB
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 7B7F96E5CC99D180C261E88FE5CE89E13B69001A
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa
Signing time: Sun 22 Oct 2023 15:05:38 +0000
ROA not before: Sun 22 Oct 2023 15:00:38 +0000
ROA not after: Sun 20 Oct 2024 15:05:38 +0000
asID: 203069
IP address blocks: 2a11:29c0:9eb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7f:96:e5:cc:99:d1:80:c2:61:e8:8f:e5:ce:89:e1:3b:69:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 22 15:00:38 2023 GMT
Not After : Oct 20 15:05:38 2024 GMT
Subject: CN=6BCC8B6273552496D1294DC24F59FFDF79B0B2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:93:0f:83:00:b1:46:0f:3b:2d:98:c3:29:
d1:19:93:99:d9:8c:c1:fe:21:03:d9:33:50:99:8e:
df:20:09:07:fc:57:ef:01:df:b6:6c:bc:39:27:95:
94:75:90:a6:3b:c5:f0:02:59:41:af:29:b4:6f:26:
04:16:cb:c4:a0:c7:12:12:f8:a2:2a:0e:a1:34:3e:
aa:6d:94:60:73:26:4d:be:e9:39:e7:09:38:23:4c:
26:4d:8b:fb:9b:8c:8a:8f:b5:72:05:ae:af:62:b0:
b5:0d:19:15:cc:c6:eb:75:76:40:70:64:cc:13:36:
87:0c:80:0a:e8:a1:e0:ee:2f:82:1e:8f:8a:f7:db:
36:52:73:1c:16:96:86:3c:b3:ac:17:3e:18:b1:24:
f3:cc:6f:f0:1c:af:3d:8b:f0:d5:2a:e7:3b:79:34:
cc:cd:d6:43:22:78:ad:e4:c9:ec:dd:65:61:f6:ac:
6a:e8:ca:1e:da:97:a7:e5:a3:63:92:1c:ad:97:42:
39:47:15:ee:63:2d:08:4e:c1:e7:e5:cf:c3:37:cd:
7b:f7:9d:f8:56:16:33:1c:c2:af:1e:58:22:d9:d5:
8c:27:eb:3b:7e:99:40:6b:3e:9c:cc:f0:01:83:44:
94:f1:f1:8b:ba:b7:bd:4c:9f:af:b6:67:18:e2:bc:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:8B:62:73:55:24:96:D1:29:4D:C2:4F:59:FF:DF:79:B0:B2:DB
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9eb0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:9d:1c:85:8d:1e:87:a5:02:9f:e9:d1:44:35:08:f1:e4:7c:
81:e2:2f:2e:c1:6d:7c:c5:e5:a0:cc:27:91:aa:0e:d7:3d:65:
53:4a:62:25:a2:fa:0c:e4:f0:55:8d:6b:e0:24:a6:4c:08:97:
61:c5:67:bb:8c:9c:3b:7c:d5:5d:0e:de:6b:a9:df:44:0f:65:
0c:a2:21:94:f4:f4:d7:6d:94:f5:9f:40:4f:5e:f6:c7:f0:1b:
03:ae:63:14:f5:81:df:66:62:d9:ad:9a:0c:05:33:d0:7a:23:
a5:cd:b3:44:b7:47:0a:f7:ba:6c:76:9c:10:b4:f5:bb:8c:65:
88:a2:81:bd:88:ee:77:e9:d9:47:11:9d:44:ab:1f:b1:9c:ad:
2e:92:aa:d0:cf:f7:0f:54:00:86:e7:18:27:d7:f0:aa:29:1f:
26:4a:14:05:44:c6:64:cd:24:95:6b:72:ee:bf:25:51:83:60:
38:16:5f:23:07:8a:47:e0:a0:38:f4:4c:06:be:28:24:51:41:
eb:bc:4e:e3:e4:69:f2:e6:4e:bc:ad:af:b2:34:44:13:66:e2:
e1:67:e6:ba:4c:16:57:a6:db:cf:63:c7:1c:84:6a:9a:45:ac:
5e:c2:75:72:06:29:03:1d:3e:9f:93:8e:07:2c:83:d8:9a:d4:
83:ab:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:18 2025 by rpki-client