Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: VZ7EDqLdGwlswHGtXvf7LUWC/agWHxDSIdxAaw25zN0=
Subject key identifier: 68:89:72:85:1C:D4:B4:7B:34:83:75:9C:81:65:A4:0B:97:41:50:D3
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 1EC96048ED438EC0F0B2F258FEF83163EB5C1F46
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e203239383032.roa
Signing time: Tue 03 Dec 2024 11:43:28 +0000
ROA not before: Tue 03 Dec 2024 11:38:28 +0000
ROA not after: Tue 02 Dec 2025 11:43:28 +0000
asID: 29802
IP address blocks: 2a13:9500:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c9:60:48:ed:43:8e:c0:f0:b2:f2:58:fe:f8:31:63:eb:5c:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 3 11:38:28 2024 GMT
Not After : Dec 2 11:43:28 2025 GMT
Subject: CN=688972851CD4B47B3483759C8165A40B974150D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:c7:4d:1e:c9:a1:81:f4:b2:f2:ab:51:78:
c1:a2:fb:c1:40:b1:f7:73:04:05:1d:29:51:05:2b:
6c:b7:b1:0a:2b:1b:90:ce:9e:f7:0f:34:d0:2d:dd:
58:3a:94:69:37:91:3c:7f:39:61:93:85:68:e0:bf:
37:77:21:54:75:0d:4e:ee:31:d0:14:55:0a:6b:3c:
46:8c:87:d7:37:5b:f1:32:71:64:40:98:1f:3d:4e:
2b:55:b2:63:3e:26:c3:64:eb:61:22:c1:fc:30:70:
93:0a:ed:e1:86:16:a5:10:ad:69:68:bd:e7:0b:a0:
c5:65:07:eb:84:ad:9d:5f:2e:8b:14:0f:a3:89:a9:
56:c4:0d:e4:20:89:fb:0c:26:46:f4:a3:61:07:4b:
ad:dd:cc:9b:02:a8:65:37:3c:bd:d7:4c:15:79:cd:
6b:46:c1:1b:61:54:de:44:8e:9b:92:bd:60:e5:e7:
46:66:1d:58:80:bb:b9:5c:86:83:83:51:64:1d:35:
69:7c:4e:f3:a0:c8:70:a7:dd:a8:d6:c5:0d:9e:65:
47:03:1a:3f:a9:20:5b:76:18:09:ce:fd:a8:45:22:
c5:57:42:b3:1e:2a:bb:9d:86:c2:8e:33:46:13:8d:
26:48:4d:97:80:c3:c6:1b:bf:64:0f:95:77:6a:dd:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:72:85:1C:D4:B4:7B:34:83:75:9C:81:65:A4:0B:97:41:50:D3
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8::/48
Signature Algorithm: sha256WithRSAEncryption
90:56:d6:c9:8f:7b:eb:c4:48:0f:c9:dc:1b:92:97:7b:eb:40:
3a:35:46:91:36:68:bf:f4:dd:ce:9e:d2:7f:d0:6c:11:c5:35:
c6:8b:25:b0:80:38:92:ac:80:56:2a:a7:6f:9a:09:54:85:44:
9a:7e:be:e0:1b:9d:63:1a:81:7b:c2:90:e2:d4:50:37:cf:1d:
38:cd:73:5f:db:e4:00:02:0d:2b:a4:43:cb:a8:aa:64:ec:32:
ba:07:02:7d:e6:75:d7:48:4a:ac:a6:33:6c:ea:c2:38:a1:4e:
29:0d:c6:19:54:81:6c:d2:32:ce:dc:12:06:f3:bc:61:d7:b6:
71:2a:cd:0d:0b:76:82:fe:e6:c7:97:ff:5d:af:13:a4:e1:b7:
ea:7e:55:da:6b:9a:65:a5:d6:ec:be:b2:ac:16:d6:41:98:53:
fa:30:d2:0f:01:e7:6f:57:0e:66:78:3d:85:6e:cd:ab:a7:95:
78:bc:68:b3:aa:c7:3a:96:6b:6e:92:4c:35:23:79:81:50:10:
d2:62:e9:8b:37:56:a7:70:dc:06:72:37:66:0a:ee:bd:b1:4e:
6e:e0:88:df:2f:5e:0e:13:39:0c:f6:c1:bf:df:99:eb:f8:df:
94:21:a4:43:5d:14:b1:83:11:be:7b:f6:b3:cf:25:06:8e:7c:
7c:74:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:08 2025 by rpki-client