Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666653a3a2f34382d3438203d3e20323136333034.roa
File: 326131313a323963303a396666653a3a2f34382d3438203d3e20323136333034.roa (raw, json)
Hash identifier: f/UQt9eyPSypofuk7CU3SYCxTq8U4JFBD/8FM4+0rAg=
Subject key identifier: 5F:FE:59:A2:58:9E:E2:78:BB:F1:8B:FA:4B:B1:3F:6F:C9:B7:7A:D8
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 5BE88F8B6ED841FB844DE6C53E8B6D0FB4C1AD30
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666653a3a2f34382d3438203d3e20323136333034.roa
Signing time: Tue 17 Oct 2023 18:50:53 +0000
ROA not before: Tue 17 Oct 2023 18:45:53 +0000
ROA not after: Tue 15 Oct 2024 18:50:53 +0000
asID: 216304
IP address blocks: 2a11:29c0:9ffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e8:8f:8b:6e:d8:41:fb:84:4d:e6:c5:3e:8b:6d:0f:b4:c1:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 17 18:45:53 2023 GMT
Not After : Oct 15 18:50:53 2024 GMT
Subject: CN=5FFE59A2589EE278BBF18BFA4BB13F6FC9B77AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:87:7e:f2:71:66:48:85:3a:8f:63:98:54:
8b:3c:93:70:43:32:bc:78:e7:1f:7c:dd:d6:55:35:
61:5f:5f:a7:05:03:4a:2a:23:db:ae:15:fa:65:1f:
59:aa:94:dc:89:61:52:dc:97:4c:ef:09:cf:85:62:
ce:0f:ca:df:c7:ab:99:b7:d0:9f:78:96:27:6a:87:
c8:cc:5b:09:96:eb:6c:c6:01:8a:a8:b9:a9:73:a6:
1b:e8:a6:a2:b7:5c:3e:d5:bd:6a:40:39:96:c8:eb:
29:3e:ca:6b:1a:9a:15:e9:d5:1c:da:98:81:d5:5f:
bf:8f:84:20:8f:21:8c:12:4b:d1:a2:c7:b0:36:51:
e9:3b:f9:26:9f:aa:b0:6d:a0:cd:fa:71:e9:27:66:
64:af:86:19:f7:46:6e:af:ee:92:ea:02:91:dc:40:
f9:22:37:34:78:d4:1d:13:15:5d:4e:58:8b:2b:ec:
0b:d5:de:ab:7d:02:91:60:0b:fc:e1:ac:fa:c6:16:
90:77:d8:85:c7:ac:9b:2b:85:63:b3:c9:b4:09:28:
9e:c4:e8:28:74:94:d3:78:a4:33:66:ce:e3:80:0f:
7c:cf:8e:b4:8b:38:9a:70:fa:76:f9:bb:c1:56:5b:
e4:7f:68:7f:29:42:3a:41:ac:4c:d3:18:b1:5f:11:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FE:59:A2:58:9E:E2:78:BB:F1:8B:FA:4B:B1:3F:6F:C9:B7:7A:D8
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a396666653a3a2f34382d3438203d3e20323136333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9ffe::/48
Signature Algorithm: sha256WithRSAEncryption
6b:9b:15:51:31:1c:5e:9c:79:53:e5:2d:52:03:45:0c:fc:4b:
3b:b7:e8:1b:63:60:e0:ba:41:4d:41:d5:20:36:4a:5b:86:c9:
17:61:36:89:c8:04:3e:40:8e:2f:b3:15:e2:df:2d:49:bf:30:
2f:a2:25:93:e7:38:8a:5f:08:b3:b3:f4:bd:17:a9:9a:80:fa:
2f:6b:9f:fb:5c:03:6e:1e:80:b3:56:fd:fc:ca:f5:4d:d2:c4:
62:36:80:50:b2:44:50:08:35:d0:a8:84:65:62:38:c1:cc:66:
23:70:2b:f0:1b:5a:ae:30:9d:bc:bf:17:4b:c1:19:c9:18:d2:
3e:75:3a:ad:7a:13:15:6a:11:70:7a:7a:dc:ee:23:af:f8:cc:
44:65:46:1c:6c:55:15:96:8a:4b:1b:60:7b:5e:bd:fb:fd:59:
cd:ce:d3:25:72:e7:2e:6b:bf:2f:b8:61:fe:b7:fc:02:48:fe:
4b:6f:bc:f8:a2:4a:ca:b7:40:f2:04:37:21:cd:7b:ed:1e:96:
cd:bd:87:bc:ff:32:13:a9:f7:fd:24:91:e1:8e:e2:a7:0d:9a:
15:a9:82:23:5b:5a:92:99:5c:0e:ca:b1:fe:62:a5:0d:09:46:
42:6a:41:0a:63:a1:f5:c4:22:99:50:27:f2:76:cb:c5:35:38:
86:af:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:39 2025 by rpki-client