Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: JmOIfviK1vw9IQg4BZzFlm8G4kAe6Bw2iLMVA273has=
Subject key identifier: AE:DE:E9:9D:E3:C8:B8:2E:A8:D3:30:F0:35:C3:92:56:3F:21:A9:EA
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 1899D64034DA9AF981C65DE399E4153A4033C29A
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
Signing time: Tue 03 Dec 2024 11:43:28 +0000
ROA not before: Tue 03 Dec 2024 11:38:28 +0000
ROA not after: Tue 02 Dec 2025 11:43:28 +0000
asID: 29802
IP address blocks: 2a13:9500:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:99:d6:40:34:da:9a:f9:81:c6:5d:e3:99:e4:15:3a:40:33:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 3 11:38:28 2024 GMT
Not After : Dec 2 11:43:28 2025 GMT
Subject: CN=AEDEE99DE3C8B82EA8D330F035C392563F21A9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:db:e1:d6:80:a4:de:43:67:6a:9d:7b:af:
cf:5d:77:62:7a:e2:8f:fe:38:94:af:6b:79:65:58:
0a:4a:93:4f:b0:05:13:97:7e:66:e3:5a:bd:a3:a1:
53:15:83:26:a4:fd:2a:c0:07:0d:76:c7:be:a0:c9:
7d:b7:90:00:03:95:2d:52:ac:6c:7e:75:60:9c:65:
0d:32:14:70:59:ff:2e:5a:ba:72:9b:c4:a6:c8:43:
0e:ef:97:31:43:a4:7a:6a:54:f0:ba:da:08:aa:78:
ed:88:23:d8:6a:e0:6d:64:d9:54:fd:25:16:7c:9c:
33:79:f0:f1:bf:4d:eb:23:98:1c:11:78:bd:cc:3c:
74:0d:9d:c3:3d:5b:1b:d3:2c:a5:b3:44:02:78:a9:
50:98:1f:c5:be:66:5e:3f:61:27:37:63:8e:85:ab:
bc:65:3d:fe:07:ce:14:33:96:f4:cb:a2:f5:ff:a5:
a3:c9:99:08:8c:0c:d3:d4:a1:bf:c1:e1:01:7b:16:
7d:9e:95:c8:76:39:6d:65:cf:e9:42:1a:d4:02:66:
1d:28:be:6f:6c:01:04:79:25:f1:ed:64:3b:56:95:
15:25:54:d0:cd:06:b4:b5:73:37:08:2e:4f:38:ec:
a9:49:0f:e6:bf:7a:c3:ee:bd:b3:3f:51:47:e7:c2:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:E9:9D:E3:C8:B8:2E:A8:D3:30:F0:35:C3:92:56:3F:21:A9:EA
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31303a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:10::/48
Signature Algorithm: sha256WithRSAEncryption
2b:3d:fc:24:93:b5:40:f8:cd:ca:79:63:66:c8:5f:73:9f:8c:
fa:1c:c4:12:e5:42:be:42:ef:57:d2:71:cc:a9:c2:47:11:b7:
29:8f:d3:0f:42:b2:06:30:7c:87:a3:26:5e:4a:d6:1a:fa:1b:
60:e4:82:1e:5e:41:88:78:02:16:95:b4:59:4d:c1:c6:f5:3f:
78:85:c7:c0:41:9a:1f:04:2f:f9:da:99:7f:ae:98:a9:ab:19:
b2:b0:63:76:93:92:6b:8b:3c:ce:cc:bc:c2:47:c0:00:e3:02:
df:f5:1a:89:ef:e5:55:c8:4f:cb:d7:6d:29:60:b8:84:81:31:
7d:30:2b:69:5e:37:2d:7b:32:aa:c2:1a:27:74:7d:2e:5c:eb:
ca:7f:3e:99:f6:c3:d3:58:91:84:76:98:83:b9:a7:fc:b1:ba:
3c:01:6a:d3:9b:02:b4:8c:4a:1f:71:bd:85:d9:27:e0:f1:76:
9b:c2:f4:ed:1d:37:da:d9:74:29:16:e2:f0:4d:81:a4:33:d9:
bd:fb:b5:4c:1c:78:35:e6:10:9a:46:a0:38:2a:d7:4e:aa:82:
eb:ae:98:62:5a:26:dc:75:23:5d:69:0c:88:b3:8b:a9:6b:5c:
55:57:8f:a1:37:bb:d7:7e:4a:49:9f:6a:42:8b:d9:4e:35:af:
2b:08:09:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:17 2025 by rpki-client