Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a393a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a393a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: T6JorbqetXJCqMOSx6P1EZqoGI448G9NWx8TSOx7WsQ=
Subject key identifier: 60:ED:56:05:A6:CE:66:33:4E:96:8D:B6:1F:A1:4F:34:03:E8:E7:91
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 7E0CBFBB3B965ADE91C1A9E948C2AD0E0249821E
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a393a3a2f34382d3438203d3e203239383032.roa
Signing time: Tue 03 Dec 2024 11:43:28 +0000
ROA not before: Tue 03 Dec 2024 11:38:28 +0000
ROA not after: Tue 02 Dec 2025 11:43:28 +0000
asID: 29802
IP address blocks: 2a13:9500:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0c:bf:bb:3b:96:5a:de:91:c1:a9:e9:48:c2:ad:0e:02:49:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 3 11:38:28 2024 GMT
Not After : Dec 2 11:43:28 2025 GMT
Subject: CN=60ED5605A6CE66334E968DB61FA14F3403E8E791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:2a:86:a1:4a:c8:83:f3:6b:23:04:75:bc:
3e:ef:0a:5b:f0:6b:10:2e:4a:d6:db:34:d0:4f:d8:
33:57:5e:e6:e2:5d:d2:6f:d7:f7:1c:32:97:4e:22:
b9:eb:01:18:08:94:a5:21:50:5f:2c:5b:66:09:42:
72:89:45:83:8b:41:bd:0f:74:f9:81:52:ff:ae:f6:
33:d3:1a:02:cc:52:18:34:9c:c5:20:23:ba:ca:10:
36:6d:e5:8c:b6:4f:d0:cd:54:42:3c:c5:50:07:4b:
26:37:02:93:bc:31:0e:2d:df:0d:6c:69:bc:cb:d5:
a8:85:3a:69:f2:fa:b3:49:cd:08:16:80:fb:b0:a7:
39:39:84:e5:b9:5a:db:a6:2d:d1:d4:83:c4:52:9a:
0c:99:c6:8a:fa:59:9f:70:55:4f:62:dd:3e:68:b6:
0b:5a:37:11:08:7f:3f:93:9e:a8:8d:57:ad:99:93:
5b:57:74:19:58:f9:6a:b7:bc:7c:96:e4:5f:43:84:
0d:af:cd:b5:19:90:bd:1d:a4:be:46:0d:17:dd:bc:
54:92:68:37:4e:79:da:f5:dd:74:74:b7:03:ab:5f:
e7:4c:bb:54:29:ba:7c:c5:1d:f2:80:1c:51:32:48:
e0:5c:24:5a:45:89:70:00:e0:1f:93:72:28:06:92:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:56:05:A6:CE:66:33:4E:96:8D:B6:1F:A1:4F:34:03:E8:E7:91
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a393a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:9::/48
Signature Algorithm: sha256WithRSAEncryption
79:82:5e:cf:c1:0c:e2:13:80:67:ba:bd:f1:68:0b:af:84:1c:
90:c2:c7:d7:9c:04:52:1b:c7:6b:8e:c7:f2:e6:1a:ce:88:7f:
75:60:e3:b3:9c:79:5d:46:bf:24:1b:5c:aa:73:2e:d5:b6:ac:
29:35:7c:bf:da:1e:c4:d0:94:39:4a:d9:8d:b7:cb:93:d8:09:
6d:69:b4:b5:f4:1e:6f:da:9c:cf:2d:eb:3f:2c:8b:dc:3b:d8:
f3:3e:91:e9:19:53:31:e0:b6:c3:ca:48:56:3c:0a:71:f2:c1:
32:c0:ae:86:62:ea:b4:27:fb:01:66:ff:c7:93:a1:64:4f:99:
57:57:e5:41:a6:60:6c:97:f8:37:57:6b:1f:13:13:fc:4b:75:
85:fa:49:7f:64:5a:dc:04:c4:38:4e:93:5d:a5:68:37:1e:7a:
59:7c:c0:a3:b4:de:74:95:98:18:be:a2:19:ee:20:21:1c:35:
4c:41:53:e3:6a:e0:11:3f:73:4d:1f:44:e6:b4:68:69:6f:d6:
7a:67:1a:08:4e:1e:f2:5f:ec:4e:00:3d:08:14:88:80:d8:bb:
04:ad:76:a1:2b:e8:84:cc:f7:a4:c4:15:27:5c:91:e4:a1:41:
08:3f:37:d3:f8:9b:48:09:b2:0a:2e:c5:dc:cc:86:73:49:7d:
1a:06:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:42 2025 by rpki-client