Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier: 4VpF/9pX7wka9SOeAeuTZi24SiyUdRf3wJX1y3EXbw0=
Subject key identifier: AE:39:3F:8C:7F:2E:8A:A0:3F:C6:C2:4F:8D:E9:97:B9:E3:A6:09:D3
Certificate issuer: /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial: 47237CACCED2DDB79ACEEFADCBE647019ECE11FF
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time: Mon 13 Nov 2023 20:36:36 +0000
ROA not before: Mon 13 Nov 2023 20:31:36 +0000
ROA not after: Mon 11 Nov 2024 20:36:36 +0000
asID: 197919
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:23:7c:ac:ce:d2:dd:b7:9a:ce:ef:ad:cb:e6:47:01:9e:ce:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Validity
Not Before: Nov 13 20:31:36 2023 GMT
Not After : Nov 11 20:36:36 2024 GMT
Subject: CN=AE393F8C7F2E8AA03FC6C24F8DE997B9E3A609D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:f0:1d:ab:62:fb:10:eb:37:06:1f:d3:03:
a1:1a:0d:d8:0e:11:c8:81:61:a3:59:e0:ff:39:e7:
f8:b6:27:4d:57:9f:77:a8:d6:38:36:c2:16:d6:b0:
1e:0b:ab:32:97:93:05:b5:c0:eb:6f:24:1f:80:81:
f8:6f:99:28:f1:78:9c:4f:0b:74:4c:7e:03:1c:8b:
bb:85:0f:d6:9d:98:e5:e6:9a:ab:3f:24:cb:1d:f6:
85:4b:fe:92:3e:02:92:78:a2:ff:49:e6:d5:5d:0e:
44:48:5f:9a:47:78:f3:b3:59:7f:1d:24:fb:ac:ce:
25:f1:a6:43:69:5a:f2:a5:2b:fc:e4:62:4c:fe:1a:
0d:1d:c4:e6:0f:16:88:9d:32:2b:1a:0c:5b:66:b5:
cc:41:6d:33:af:bd:b5:ea:e1:0b:52:67:4e:57:da:
75:89:14:00:f3:1f:ca:f6:4e:e6:40:4c:39:a8:0a:
25:77:4d:10:f8:fd:e8:9d:e8:44:62:98:83:11:24:
f0:fc:f3:21:d6:fb:78:61:2d:0d:7a:5f:d7:f7:8c:
12:41:99:ea:12:48:80:af:1c:a4:73:d9:1b:bf:35:
2b:1a:dd:9d:a7:c7:08:ac:dc:9c:05:67:f5:37:7d:
2a:92:cf:b1:eb:db:6c:1c:4a:44:2a:d1:4c:ba:b6:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:3F:8C:7F:2E:8A:A0:3F:C6:C2:4F:8D:E9:97:B9:E3:A6:09:D3
X509v3 Authority Key Identifier:
keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20313937393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
77:bd:66:9d:86:26:60:71:c5:12:8d:b5:6b:f6:bd:df:b3:bb:
26:5c:17:fe:9b:88:b0:f1:11:52:c5:b7:c2:79:05:99:7b:9f:
e8:07:70:38:00:0d:d2:ff:0f:de:b9:fd:88:ee:e7:78:c1:af:
62:e0:22:df:b7:96:d1:ad:f2:10:16:b2:a1:5a:f2:41:e0:53:
93:a1:d7:97:79:93:3a:53:4f:3d:dc:d3:ca:ff:3d:fc:d0:df:
d2:35:98:db:47:ab:7e:df:14:77:1f:03:be:83:4e:88:51:81:
f8:5f:f2:9b:f1:0c:89:5d:4d:22:0e:45:b1:e3:26:e1:59:64:
76:28:52:82:7e:9c:16:f3:0e:8c:da:12:89:a4:45:d3:65:65:
97:f1:80:27:c3:4b:82:a4:3d:36:84:82:fd:ac:ea:11:74:a9:
8b:4c:e4:a3:19:8a:d2:77:ee:16:1c:d9:4e:03:6f:f6:ea:e2:
af:ea:08:4c:29:8c:d9:1b:bc:4c:0d:1a:73:da:be:b0:cf:9d:
b0:ba:ee:24:f1:94:6d:f4:7b:fc:0c:33:1e:cf:8c:6b:d7:26:
2b:bc:e3:94:48:c5:ab:e0:c2:98:0a:67:de:ea:21:9d:2e:af:
e0:c8:ff:08:f7:28:63:90:2b:58:dc:3a:68:70:0a:25:c6:ba:
bc:b9:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:30 2025 by rpki-client