Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a363a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a363a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: +pqhxc20aIu+3RKACHIWkI0VcgZVW2ZMO9BHaAlasIw=
Subject key identifier: 87:CF:A9:5A:3E:C2:AF:BA:0A:7C:EB:4F:01:98:3D:66:84:E2:DD:01
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 0EA737F9378E3344AC5695C4E30A5DE0820A1349
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a363a3a2f34382d3438203d3e203239383032.roa
Signing time: Tue 03 Dec 2024 11:43:28 +0000
ROA not before: Tue 03 Dec 2024 11:38:28 +0000
ROA not after: Tue 02 Dec 2025 11:43:28 +0000
asID: 29802
IP address blocks: 2a13:9500:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a7:37:f9:37:8e:33:44:ac:56:95:c4:e3:0a:5d:e0:82:0a:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 3 11:38:28 2024 GMT
Not After : Dec 2 11:43:28 2025 GMT
Subject: CN=87CFA95A3EC2AFBA0A7CEB4F01983D6684E2DD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:bb:12:25:b0:ac:aa:44:13:bd:67:6e:85:
53:b1:91:ad:6d:7c:38:13:e3:11:b8:79:08:c8:24:
dd:06:7b:51:59:ba:b4:6e:d2:f2:58:36:5d:d4:88:
5f:32:36:2a:d3:a5:b6:62:0f:f0:7e:8e:65:e1:1e:
9e:c2:00:e3:4c:d1:79:dc:b6:fc:e9:4d:d9:2c:fa:
89:f3:14:37:84:aa:3b:e3:8c:55:d1:f7:8b:02:87:
f8:a2:21:49:72:15:d6:13:e1:a4:2c:39:45:02:6e:
2c:30:54:9a:c5:66:9f:f3:5f:7e:67:6a:5b:6b:95:
b9:97:06:f4:05:1e:f6:6f:88:fa:d9:d8:50:5f:ad:
e0:ba:7d:b3:d7:3e:1e:d1:1f:79:b5:1e:93:94:49:
da:4a:7d:c9:b8:f4:52:d5:58:42:50:79:e3:75:4a:
c5:f1:50:26:94:10:93:ff:9d:6c:12:7d:cf:98:a0:
c1:9f:c7:55:bf:08:13:ec:35:90:5f:59:7f:d5:d8:
74:f2:ba:06:05:27:b6:4d:e2:08:93:fe:bb:c7:9f:
37:57:c4:e9:ae:6a:6d:6f:30:fe:f7:2b:13:32:8b:
ef:56:7a:fb:d5:01:b9:4d:fd:2a:1c:16:84:15:7f:
bd:e9:81:12:82:a1:ef:cf:0c:72:c3:ab:72:0a:6b:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:A9:5A:3E:C2:AF:BA:0A:7C:EB:4F:01:98:3D:66:84:E2:DD:01
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a363a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6::/48
Signature Algorithm: sha256WithRSAEncryption
34:c1:06:38:fb:0e:6c:5d:89:ea:a3:9b:f8:9c:9a:02:fe:cc:
b5:4e:ba:87:cd:76:21:bc:32:fa:8c:98:00:ea:9d:12:94:41:
be:6f:6b:d5:5f:11:19:2c:f4:9d:21:3c:ad:8e:1a:37:4c:40:
b6:5d:f6:f7:b2:ca:c4:f8:b5:7a:1e:c3:3e:76:01:9a:9d:19:
f0:89:a2:72:aa:56:9b:57:b9:13:90:f6:65:72:d8:ce:81:87:
58:b2:58:62:34:0b:98:8e:29:dc:6b:1e:34:a0:21:5c:8b:ab:
91:35:b6:d9:3d:fa:56:7e:5b:77:5c:2e:31:31:6c:f9:ee:c8:
31:6d:d0:28:ae:af:2a:4e:c9:db:eb:4a:8c:04:bd:dc:96:7f:
47:4a:23:5d:f8:05:e9:77:a3:cf:8d:85:fd:7a:1e:45:c3:e7:
34:4c:12:81:37:3c:25:fc:36:e4:cd:72:ae:f1:d0:f3:28:4d:
9a:11:32:84:d5:57:5c:16:06:0d:1d:7b:f6:88:97:40:69:ed:
48:17:b0:aa:69:57:b5:29:1d:ea:45:8c:0c:d0:42:df:a2:22:
f4:ff:1d:99:86:6e:74:5f:c6:ae:7c:e5:62:dd:8e:ae:20:dd:
6d:35:ed:d8:20:23:43:a9:02:a1:63:03:0b:f6:ee:b5:c6:e5:
db:3a:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:45 2025 by rpki-client