Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363930.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier: oQiQdAK/xtvSkzPcIl+/Bm+QCSGDpUGu66SzRs00LHY=
Subject key identifier: C3:2D:83:72:66:D7:4D:43:D8:A2:39:73:73:E2:5C:6F:35:E0:20:AD
Certificate issuer: /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial: 1B836E75755ECFF8E38B1C3E99A1D2ADBF42635B
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363930.roa
Signing time: Sun 12 Nov 2023 06:58:11 +0000
ROA not before: Sun 12 Nov 2023 06:53:11 +0000
ROA not after: Sun 10 Nov 2024 06:58:11 +0000
asID: 200690
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:83:6e:75:75:5e:cf:f8:e3:8b:1c:3e:99:a1:d2:ad:bf:42:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Validity
Not Before: Nov 12 06:53:11 2023 GMT
Not After : Nov 10 06:58:11 2024 GMT
Subject: CN=C32D837266D74D43D8A2397373E25C6F35E020AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:ad:63:b1:fd:fd:6d:aa:0d:d3:bb:cd:85:
9d:5f:83:8d:27:16:ab:36:ca:1e:d6:89:a0:74:4c:
3b:09:96:36:d2:cf:b4:dc:47:a5:8e:fb:ad:85:6d:
26:7b:d0:23:a8:40:ea:4a:19:b0:78:b1:5c:27:62:
0e:48:08:1b:7e:15:49:7c:b4:33:9b:60:e6:2a:61:
2e:7f:68:cb:fd:27:b4:45:a4:5c:b0:aa:eb:94:7a:
68:71:2c:68:5b:3c:e6:b2:a5:c1:9c:ed:3d:f3:d3:
3d:dd:37:02:60:72:99:d2:e4:13:21:d5:95:96:f0:
58:44:eb:2d:5d:0a:d2:33:3c:41:86:49:9a:09:63:
56:de:8d:0e:39:4b:c9:e9:85:19:2c:f6:da:27:bc:
bc:e5:ca:d7:00:b2:9a:f2:ca:70:af:a4:c6:5c:42:
e2:f4:5f:dd:eb:24:12:59:00:b4:ed:b0:2c:85:b8:
3a:8d:71:04:29:cc:c9:5b:9d:6b:4e:0f:98:9c:7b:
1b:a2:29:cf:b6:0b:ed:62:3f:d1:21:6f:35:4a:7f:
04:0a:39:c8:71:bd:3e:71:e7:3e:6e:5d:f9:7a:d8:
c2:2c:cb:70:f1:4e:48:13:6c:3a:0d:43:95:c3:e9:
fa:b1:73:27:68:f0:ec:b2:c7:48:96:43:3d:34:8b:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:83:72:66:D7:4D:43:D8:A2:39:73:73:E2:5C:6F:35:E0:20:AD
X509v3 Authority Key Identifier:
keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323030363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
27:fd:d0:df:a4:f4:e8:a0:90:13:01:ee:8e:e9:1f:97:96:b2:
89:94:87:09:72:60:c0:cd:d0:9e:c3:15:46:5d:6c:53:9a:06:
82:e2:79:8a:62:d6:fa:52:6c:a4:57:61:c7:ba:3a:1b:ec:86:
51:1b:bd:5b:34:d8:44:ab:dd:27:3e:43:4b:7c:04:67:48:16:
b5:b8:40:1d:df:e2:c4:b9:a6:93:52:11:86:42:05:c6:0d:73:
55:1d:cb:d7:06:1b:28:dd:13:f3:58:19:b2:ba:6b:22:92:26:
b4:3c:c6:1b:e8:21:14:de:e2:3c:21:aa:48:9a:c2:24:e3:8d:
f3:cc:9d:10:38:9f:bf:64:66:23:00:65:4a:e3:96:09:e0:25:
83:04:da:0a:10:b2:57:6e:a7:47:30:ed:fa:4f:10:30:c0:7e:
aa:9c:80:30:c8:85:31:82:14:da:9b:af:20:7c:37:5e:49:47:
fa:d7:73:15:99:20:ce:42:77:76:4f:0a:09:b3:a8:a1:54:ca:
e4:c3:c4:e1:7c:eb:94:8f:9b:fd:28:92:b3:a5:5e:cc:fa:3c:
63:60:ae:da:de:5a:75:bf:b8:cd:ac:7d:12:d0:77:59:ea:ca:
e9:ac:4e:23:d6:64:fa:9f:48:fa:e5:86:62:6d:a5:da:78:e1:
bf:89:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:21 2025 by rpki-client