Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: oN9VoM3rNEEoTYI6Wtk2cucHky6XsdhQeZJ0h2Ny6TE=
Subject key identifier: 1A:3A:13:F5:14:19:E0:A7:B4:97:7F:A4:3C:C7:51:DF:63:57:D2:03
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 6F8A95C95E159B968B870AD12C764949F508655C
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
Signing time: Tue 11 Jun 2024 10:02:04 +0000
ROA not before: Tue 11 Jun 2024 09:57:04 +0000
ROA not after: Tue 10 Jun 2025 10:02:04 +0000
asID: 396356
IP address blocks: 2a13:9500:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8a:95:c9:5e:15:9b:96:8b:87:0a:d1:2c:76:49:49:f5:08:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 11 09:57:04 2024 GMT
Not After : Jun 10 10:02:04 2025 GMT
Subject: CN=1A3A13F51419E0A7B4977FA43CC751DF6357D203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:f1:ca:9c:76:ed:b0:70:46:d0:a0:cb:61:
25:b7:e6:c2:c6:76:2c:f6:a3:2a:0a:95:f8:b3:24:
03:08:89:0c:77:a1:8b:1f:29:91:4d:65:ed:67:59:
13:90:be:fd:99:d4:65:b1:b3:99:54:bc:8b:09:64:
1e:5b:bc:6c:7c:6b:43:21:55:56:a9:b7:4d:43:69:
ff:02:54:0b:db:8c:22:c5:86:2e:cb:da:15:d9:09:
d5:15:ba:56:1f:66:ed:2e:2e:f6:63:bf:f9:72:fe:
f5:63:8c:eb:bd:9e:e5:df:a8:b7:66:6a:98:22:96:
13:a8:c4:77:6a:16:f3:ea:75:59:c3:c6:3a:01:6c:
1b:04:2a:1f:cc:8f:7b:07:34:ca:1f:72:d0:e9:fb:
0e:91:40:23:17:89:9b:83:b3:35:3e:91:bc:da:dd:
32:30:43:76:3f:52:02:8d:f8:e0:2c:30:be:16:aa:
ad:0e:0f:65:bd:24:e5:7b:12:03:50:af:74:be:bf:
17:97:cd:9c:7c:cc:7b:72:e5:e2:bf:36:4e:d6:3b:
a1:ec:03:28:f9:62:94:0e:38:b2:a4:d4:3b:48:76:
87:c6:36:79:e1:b7:81:bb:90:11:b5:bb:40:42:77:
82:33:63:a9:73:61:00:6f:17:5d:e7:05:73:e3:c8:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:13:F5:14:19:E0:A7:B4:97:7F:A4:3C:C7:51:DF:63:57:D2:03
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31643a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b5:2b:fb:00:50:90:4e:7b:5f:e6:8f:d1:7d:71:c0:c4:0d:
78:c3:26:52:96:ce:bc:0f:42:ef:f7:a2:d8:d5:9c:d5:6c:fb:
02:23:05:df:eb:9b:e4:05:0a:8c:b9:25:51:a1:95:83:09:8a:
5d:18:f7:7b:bc:3e:62:d7:a4:33:18:09:b4:58:c0:67:b4:41:
84:83:c5:fb:31:27:88:39:72:80:97:52:4f:45:04:a6:24:19:
9e:14:7c:54:4f:32:f2:17:99:91:23:a2:4e:8d:0d:1c:83:b4:
59:85:4f:86:07:24:48:e7:2d:30:a5:4c:1e:1f:2f:c8:ae:6b:
fd:8d:ff:3b:c3:b7:46:dd:cf:1d:e9:fb:c6:a8:7b:3e:e0:ad:
c0:0d:4a:64:9f:2a:cf:08:66:a0:79:ad:97:23:c5:4b:99:c3:
11:d5:68:6d:40:84:e5:f0:f8:86:39:c1:47:9e:a4:71:62:3e:
df:4d:69:63:ba:a4:fb:ad:61:c9:14:28:0e:dd:eb:75:0c:f7:
aa:7a:3d:f0:94:0b:47:6d:0c:b2:b0:77:4b:db:c1:a4:36:fe:
c1:b7:d8:23:50:98:d5:1d:53:d2:9d:b9:64:37:59:63:c7:ee:
fd:cd:60:af:11:9e:6f:10:4a:fa:ae:48:93:cb:7a:81:5d:ea:
96:25:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:20 2025 by rpki-client