Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3130303a3a2f34302d3634203d3e203437323732.roa
File: 326130613a363034343a3130303a3a2f34302d3634203d3e203437323732.roa (raw, json)
Hash identifier: Cq1Vy8mB1qhO7/+wmkOI3qP8gNKBy+F3mgPkPxmEG/Q=
Subject key identifier: 92:1B:84:8C:4F:7B:DB:D4:05:4D:62:5C:CB:0C:11:BF:C0:92:2F:D0
Certificate issuer: /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial: 7F27530C2D056583D2E601BECD3402EB0978DC3B
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3130303a3a2f34302d3634203d3e203437323732.roa
Signing time: Tue 14 Nov 2023 11:54:40 +0000
ROA not before: Tue 14 Nov 2023 11:49:40 +0000
ROA not after: Tue 12 Nov 2024 11:54:40 +0000
asID: 47272
IP address blocks: 2a0a:6044:100::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:53:0c:2d:05:65:83:d2:e6:01:be:cd:34:02:eb:09:78:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Validity
Not Before: Nov 14 11:49:40 2023 GMT
Not After : Nov 12 11:54:40 2024 GMT
Subject: CN=921B848C4F7BDBD4054D625CCB0C11BFC0922FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:a2:ac:c3:e2:d6:8f:7e:5b:77:62:6f:3f:
ae:b5:44:5a:a1:aa:ea:1c:93:17:99:7e:3b:09:5c:
df:59:42:09:f0:03:8c:5a:fc:e3:c2:b2:91:32:a0:
64:01:4c:9f:3a:5c:45:33:70:97:bd:ab:f1:ee:a8:
28:0a:70:c4:7b:ed:37:9e:5c:53:6a:4a:c1:6b:3c:
c6:7d:0c:a3:6e:be:34:15:44:6a:0d:fb:11:87:b5:
21:4c:b4:3b:33:05:1b:71:24:7d:5a:6f:81:a5:57:
60:e9:42:3a:4b:b6:ad:aa:8a:b8:0e:8a:ce:b1:1d:
83:a6:f0:5f:02:15:e6:8f:0e:55:a2:02:c1:b9:63:
dd:da:96:70:41:0f:94:35:8c:f0:81:21:3d:8c:6e:
17:71:bf:0f:ae:99:43:ce:1c:f9:1d:d6:1a:0c:60:
55:ae:1f:78:2d:a7:81:2e:23:80:15:d0:86:f2:b2:
c1:84:35:52:5f:e0:0f:a0:48:b6:25:48:a2:fc:17:
aa:3c:82:c5:5e:0e:c0:a0:1a:70:c3:74:87:16:dd:
a0:1b:be:55:84:f3:6f:b5:95:93:3e:de:05:a7:23:
44:21:84:90:68:07:aa:b7:af:0a:77:22:71:c8:c7:
a8:2b:62:b8:f5:32:8c:7c:9b:1c:44:89:08:7a:f6:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:84:8C:4F:7B:DB:D4:05:4D:62:5C:CB:0C:11:BF:C0:92:2F:D0
X509v3 Authority Key Identifier:
keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a3130303a3a2f34302d3634203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:100::/40
Signature Algorithm: sha256WithRSAEncryption
16:f5:ed:05:e6:bc:51:71:1f:78:4d:76:66:e2:52:0a:42:13:
a3:4b:dc:24:96:eb:2c:43:a7:f3:95:40:65:26:7c:f7:92:13:
ae:1b:f4:32:90:b8:d6:47:5a:70:1a:83:e9:fb:cc:28:58:c3:
57:da:be:96:95:88:11:fc:0c:18:ad:f2:b0:e9:29:66:0c:60:
8b:63:3e:a1:d8:76:c5:36:d0:9f:23:09:88:88:33:9e:3c:62:
aa:0d:67:4c:6d:95:5c:f0:73:17:fd:7e:b0:19:f9:ec:3b:54:
eb:e3:fd:02:c7:6d:b3:92:a9:5a:c9:f9:b4:74:b2:61:a9:53:
5b:68:f2:5e:11:bf:4f:2f:cb:76:b6:64:9d:8b:dc:9b:58:84:
47:10:48:12:9c:12:43:53:81:70:2f:9f:47:0e:26:6c:7b:f9:
76:2b:9c:b7:90:7e:6a:44:e6:54:13:15:0c:6e:52:f1:5a:a8:
fe:80:37:13:1c:08:bf:dc:b7:0c:d1:8f:35:bc:58:d1:de:af:
9b:e4:aa:3b:5e:a8:b7:ab:6a:58:2f:0e:8c:f1:71:fc:22:36:
cb:22:95:ec:c7:2b:d5:07:87:d1:ea:f4:ed:27:f4:a6:a9:a8:
c9:94:cf:59:4f:a9:8c:0d:50:78:4d:c4:f8:cb:db:86:3a:01:
9a:55:9f:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:30 2025 by rpki-client