Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa
File: 326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa (raw, json)
Hash identifier: hH0EXbdveeImJQc1EhH0L+hOa62pXa2OMFLpudruz/g=
Subject key identifier: CB:06:E1:30:BE:97:8C:70:1D:12:42:F8:2D:45:CC:34:A8:9D:50:DD
Certificate issuer: /CN=A91B6523E1C9781A34EC2BE5316C06F044E9BB64
Certificate serial: 675F667F7E3B176C69BC7C0EADD00DF20C618A0B
Authority key identifier: A9:1B:65:23:E1:C9:78:1A:34:EC:2B:E5:31:6C:06:F0:44:E9:BB:64
Authority info access: rsync://rpki.co/repo/AS205432/0/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa
Signing time: Tue 16 May 2023 04:54:52 +0000
ROA not before: Tue 16 May 2023 04:49:52 +0000
ROA not after: Tue 14 May 2024 04:54:52 +0000
asID: 211151
IP address blocks: 2a05:dfc7:ca00::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5f:66:7f:7e:3b:17:6c:69:bc:7c:0e:ad:d0:0d:f2:0c:61:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6523E1C9781A34EC2BE5316C06F044E9BB64
Validity
Not Before: May 16 04:49:52 2023 GMT
Not After : May 14 04:54:52 2024 GMT
Subject: CN=CB06E130BE978C701D1242F82D45CC34A89D50DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:44:d4:25:37:78:52:18:6a:ed:a2:0f:3c:5d:
5a:e3:ae:12:77:8c:a8:90:e5:5e:3d:9b:75:4a:95:
3e:e7:c9:06:83:c2:a2:ec:98:a5:1d:3e:8d:c9:8b:
ff:75:6d:fa:89:6d:6d:9a:49:99:fe:ce:e5:5a:91:
29:2f:b8:49:d8:5c:9e:2b:3f:72:76:79:c2:4d:ce:
03:ae:5e:c8:ae:5b:e3:a2:48:33:3e:7f:9b:c1:e2:
86:b8:10:dc:8a:82:cb:29:64:ed:c7:e9:be:b6:2b:
a0:ba:5c:4e:d0:97:15:9a:18:bb:f4:cd:5d:d4:d5:
76:20:ee:dc:c5:57:b9:98:ef:78:d5:fe:52:c4:78:
bc:d6:ab:cf:00:13:dd:c0:31:a0:38:ef:79:a8:cb:
58:47:89:e0:f4:9c:ba:10:ce:d2:ea:84:8d:c8:3e:
46:4a:d9:dd:5e:3f:5f:1d:e6:1a:19:3c:51:b8:eb:
2d:df:6f:f2:05:80:31:4d:bc:c1:10:df:d8:6b:ac:
eb:f7:7b:a8:6c:9c:10:f7:8b:98:66:0a:95:0b:a5:
bc:84:a4:68:d0:5b:2e:42:2b:d6:16:64:06:55:13:
10:78:6c:6e:2f:2e:19:c6:a6:e2:9f:48:ed:41:be:
9a:67:88:d0:50:31:e8:7f:28:6a:67:74:9e:8e:46:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:E1:30:BE:97:8C:70:1D:12:42:F8:2D:45:CC:34:A8:9D:50:DD
X509v3 Authority Key Identifier:
keyid:A9:1B:65:23:E1:C9:78:1A:34:EC:2B:E5:31:6C:06:F0:44:E9:BB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS205432/0/A91B6523E1C9781A34EC2BE5316C06F044E9BB64.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/1/326130353a646663373a636130303a3a2f33392d3438203d3e20323131313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:ca00::/39
Signature Algorithm: sha256WithRSAEncryption
8b:52:4b:e7:1e:36:85:bb:fb:e3:7e:33:90:d3:a7:fb:1d:b4:
ac:8f:ca:13:3d:3b:ae:0b:dd:ab:13:c9:70:68:06:51:17:b8:
cb:f7:22:93:82:fb:d8:64:dc:86:c0:aa:c4:52:52:df:5e:4c:
5e:d1:80:8d:ff:1a:b5:dc:92:38:c0:84:0b:39:67:0c:5f:12:
d0:0a:77:7e:62:47:e9:e4:f5:c1:36:72:14:0e:ea:f0:f7:be:
f0:b5:a0:5d:ac:09:4a:f7:24:dd:f8:a7:5e:44:50:e5:22:67:
e9:90:29:35:21:d6:a9:bf:7d:79:a1:37:cb:74:6d:65:b2:48:
eb:bd:dc:36:7f:ac:2e:19:9b:ad:8f:90:6c:4c:dc:a4:95:b2:
6f:48:3a:38:5b:21:67:62:fe:92:51:7b:2a:78:cb:c3:18:fa:
49:9b:e1:be:e4:66:75:e1:22:cb:aa:2b:09:cd:00:bf:c0:f6:
04:c4:fd:de:2c:f3:83:90:f8:3d:0c:e9:05:64:ea:51:4e:7c:
7a:4e:34:be:66:ec:67:41:a3:9d:05:2c:d4:39:b7:b5:3a:ab:
b8:6f:2f:b0:eb:ce:a9:6a:83:60:4d:cd:ef:02:ad:f8:a4:ef:
0f:29:38:7a:f1:70:d4:c7:0f:f6:7e:b6:93:52:36:1e:3b:e0:
d9:9a:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:57 2025 by rpki-client