Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: imRtRZB2ogLhGMphPB2IrosqyCyU7PlUIKMBK6hCI30=
Subject key identifier: 8F:C8:03:CC:55:4A:12:0E:4C:83:7A:C0:8D:36:D2:DC:FE:B9:59:BD
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 3BE2A173086DAF04112F4A90C66F886E4587E2F8
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
Signing time: Tue 11 Jun 2024 10:02:03 +0000
ROA not before: Tue 11 Jun 2024 09:57:03 +0000
ROA not after: Tue 10 Jun 2025 10:02:03 +0000
asID: 396356
IP address blocks: 2a13:9500:1f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e2:a1:73:08:6d:af:04:11:2f:4a:90:c6:6f:88:6e:45:87:e2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 11 09:57:03 2024 GMT
Not After : Jun 10 10:02:03 2025 GMT
Subject: CN=8FC803CC554A120E4C837AC08D36D2DCFEB959BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:54:cd:dd:4f:a4:43:f7:ce:77:a0:5e:a9:
f0:b5:23:52:27:64:dd:17:47:e8:1c:bb:2e:9a:ff:
f9:21:6a:2c:3a:57:fb:cf:3c:87:7b:68:ab:da:48:
97:db:43:35:fe:04:ab:ea:6d:fc:4f:f4:c1:3c:99:
a8:c1:38:5f:c6:b8:bb:02:af:4d:86:aa:7f:d5:00:
8f:70:4a:d9:c8:de:f9:69:e4:95:4f:01:74:1b:8e:
3f:1e:00:46:6b:d7:48:7c:e5:0f:2e:49:19:8e:92:
b9:08:a7:51:ba:cd:20:ff:e5:59:49:f5:10:42:8a:
2b:97:33:f5:a8:fa:2a:b8:6c:24:ad:2a:ea:d4:67:
02:5c:79:e3:d6:c6:70:c9:d7:ef:1a:13:f1:79:13:
9f:52:18:b2:81:a9:aa:2c:15:0f:d2:7a:eb:94:cd:
46:c8:37:10:d1:d3:37:45:03:8e:c2:71:81:fb:13:
c7:a0:03:69:f7:c8:5d:fd:26:a7:32:84:b6:9e:7d:
76:e6:2e:76:6c:51:b9:1e:da:2d:a5:f0:6e:d6:ba:
15:dc:3c:57:08:6e:c0:ea:1c:5c:95:12:3b:0b:a9:
53:e3:d2:0f:a3:23:65:7f:74:6f:44:e8:74:3c:ef:
07:76:7a:0b:22:89:70:fc:37:50:b7:c6:d1:32:8c:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:03:CC:55:4A:12:0E:4C:83:7A:C0:8D:36:D2:DC:FE:B9:59:BD
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31663a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1f::/48
Signature Algorithm: sha256WithRSAEncryption
4a:67:3f:14:30:f1:56:79:b9:75:a5:e5:a2:0c:d9:11:2b:30:
8c:fe:52:c1:e5:a2:ba:a3:20:df:69:18:19:b2:d7:bc:02:fe:
e7:ae:c1:89:c7:cc:fb:1b:04:ae:79:2d:3b:45:4d:ed:b6:61:
57:b5:50:b2:0b:f1:5f:b1:b5:b0:9e:d6:f6:eb:49:3b:88:7b:
ff:21:98:19:61:ef:ba:11:86:18:73:e5:81:c6:e9:bf:4e:ed:
dc:d3:fa:24:76:b3:69:2a:79:e0:cb:0e:67:1d:0a:4c:37:16:
08:99:40:ee:70:4d:4a:58:0e:9f:7c:c2:e4:a1:3c:ce:0b:a0:
54:54:4d:f2:2f:4c:15:b1:75:a8:be:28:c7:c1:8f:04:cf:b4:
38:63:d7:f5:5c:08:64:8e:a3:91:68:31:12:9c:a0:d3:65:b9:
40:cd:ce:98:9b:74:77:bd:f0:bd:40:d1:d0:0f:59:ea:72:6e:
32:57:f7:77:a0:94:8a:0c:b8:92:1c:7c:67:3e:0c:d2:1f:df:
ff:24:da:3b:42:07:c3:8f:88:19:74:58:01:64:26:ab:96:2c:
77:3b:38:7b:71:fd:ce:bf:c8:2a:7b:36:f7:37:12:43:51:73:
36:9f:21:a6:f5:f4:41:17:d2:6d:03:81:69:08:68:c8:9c:37:
4d:26:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:10 2025 by rpki-client