Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a373a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a373a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: s624MR16EMFtsOxw+P8VZud5x0XDByymDnbHc59w5Ks=
Subject key identifier: 09:76:19:16:FF:81:8D:72:CE:0B:0B:00:05:D5:2C:7C:90:F2:71:2F
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 6A99E870556B3B09819D244EDB49CA20BC6FD92E
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a373a3a2f34382d3438203d3e203239383032.roa
Signing time: Tue 03 Dec 2024 11:43:28 +0000
ROA not before: Tue 03 Dec 2024 11:38:28 +0000
ROA not after: Tue 02 Dec 2025 11:43:28 +0000
asID: 29802
IP address blocks: 2a13:9500:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:99:e8:70:55:6b:3b:09:81:9d:24:4e:db:49:ca:20:bc:6f:d9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 3 11:38:28 2024 GMT
Not After : Dec 2 11:43:28 2025 GMT
Subject: CN=09761916FF818D72CE0B0B0005D52C7C90F2712F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:00:81:42:38:05:13:47:87:4f:d8:41:72:
b8:9a:f2:e9:38:c5:98:59:2f:6a:30:51:40:bd:fd:
91:df:ed:af:b5:96:5f:b4:2e:59:e1:e1:ff:96:ab:
3c:5f:dc:9e:3f:96:fd:fa:1b:7b:4a:55:92:30:81:
13:6e:81:ff:45:f2:d4:7e:15:ee:6b:8a:9d:a3:b5:
26:7e:63:c6:ad:75:1a:f6:50:08:9c:51:2f:ab:19:
d8:48:1d:83:e2:ea:b0:8f:01:07:fd:8d:3d:0d:5a:
db:c6:8f:f3:f9:c3:66:80:cf:96:32:f7:9e:7d:00:
9a:b2:00:67:ef:10:64:33:d3:32:1f:1f:af:0b:7e:
d5:84:16:33:65:fe:f3:f4:36:83:8f:e0:7b:cb:9f:
f4:f3:5f:f1:7d:29:b4:83:eb:63:63:7d:96:35:53:
8f:8c:c2:33:ac:76:81:82:9f:59:d9:b8:a3:c2:cb:
5d:b4:08:77:b0:eb:a2:50:ec:60:86:1f:35:f3:ae:
11:6f:b5:b3:1f:ed:6f:43:8e:21:7f:a7:18:52:44:
cc:ef:4f:be:d0:d6:a6:89:39:72:bd:8b:b4:95:82:
ab:ae:0e:9f:3a:45:07:12:49:da:84:13:8f:0c:1e:
e6:b4:59:b2:33:39:92:b9:79:a2:46:a8:7d:67:d3:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:19:16:FF:81:8D:72:CE:0B:0B:00:05:D5:2C:7C:90:F2:71:2F
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a373a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:7::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e0:2f:c6:12:26:bb:5c:1d:b0:02:9e:ee:1a:4f:7e:be:9c:
9d:21:53:d0:9b:f9:d7:80:5a:1a:fd:0b:5d:a7:66:81:97:64:
c1:13:8e:08:a6:e8:1e:9c:2d:a7:d4:22:c4:6d:68:1d:e8:a3:
19:52:0b:de:e3:dd:f2:79:31:9d:98:60:30:31:b6:47:aa:2d:
e1:f7:d3:c0:65:7a:0d:2a:aa:8f:35:fd:db:1a:65:cf:b1:da:
27:eb:87:d6:36:07:b2:75:d1:ec:2a:d8:c7:9a:55:e3:79:ae:
a8:55:83:c0:8b:96:01:b2:fe:c7:f5:51:86:94:a6:18:22:24:
e4:2f:6c:c7:d3:a7:11:ea:16:b1:36:0a:46:7f:07:ab:a6:5d:
61:a1:56:3a:2b:2e:f4:52:76:f8:47:6d:1c:79:62:ac:3d:03:
19:8a:68:f4:6e:79:0f:81:98:96:75:79:20:11:05:ca:2e:a0:
a4:4d:4c:2f:b8:2c:37:ee:ee:d9:3a:46:4b:e1:3c:2c:99:f4:
35:ed:53:4f:49:45:cb:1e:1e:aa:14:db:ef:6c:24:8d:ab:7a:
3c:ee:06:44:fd:d1:00:78:fd:b2:d2:57:98:05:56:06:23:1f:
06:c3:06:05:d9:a6:be:c7:0d:f8:d0:5c:b9:4e:2e:01:4c:1c:
7f:e4:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:26 2025 by rpki-client