Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a643a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: 280iJPhpkndb9tx0BRX8E20z8jbpo3EDBkS4cGbufP0=
Subject key identifier: 0C:D6:38:42:A7:1B:85:84:01:97:ED:48:C9:B8:09:7B:84:E6:8A:92
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 7A225E28E085D5510217374E51E3A1CDBECB927A
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e203239383032.roa
Signing time: Mon 12 Feb 2024 16:00:48 +0000
ROA not before: Mon 12 Feb 2024 15:55:48 +0000
ROA not after: Mon 10 Feb 2025 16:00:48 +0000
asID: 29802
IP address blocks: 2a13:9500:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:22:5e:28:e0:85:d5:51:02:17:37:4e:51:e3:a1:cd:be:cb:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Feb 12 15:55:48 2024 GMT
Not After : Feb 10 16:00:48 2025 GMT
Subject: CN=0CD63842A71B85840197ED48C9B8097B84E68A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:8f:c5:19:c6:dd:5e:8a:0f:d4:8e:65:75:
5b:6c:40:6c:73:92:50:5b:fe:9a:76:11:8c:22:53:
67:8c:6c:a8:37:32:6d:53:c8:a1:76:a9:97:94:45:
d8:65:72:ab:d9:ec:af:39:16:fd:a3:dc:76:9f:8b:
89:eb:e9:cb:ec:6b:39:19:2b:4e:44:04:0c:b7:1d:
7d:e1:dd:b5:f8:ed:a9:eb:ae:bc:c4:b3:c4:f4:b9:
b2:42:3b:85:a6:5d:2a:b9:9a:fe:79:e1:a6:8a:cf:
a4:ca:ba:d5:a2:9d:e6:48:55:86:7c:3e:a6:f1:4e:
32:ea:af:58:33:b4:5a:1b:82:75:40:4f:07:1e:ac:
20:1a:26:db:da:a5:b4:01:79:9b:85:01:60:a5:8f:
a6:c2:ad:da:44:09:00:76:a6:75:c3:e3:0b:71:90:
01:f6:be:eb:10:e8:5d:4d:4f:74:d8:1a:86:24:79:
e1:0b:7a:6e:7f:13:a4:eb:d3:cb:e8:95:91:e0:ff:
d6:d9:00:41:1c:17:c4:75:3e:a5:4d:b0:fc:84:35:
3d:4e:c6:4d:6d:38:90:6d:84:1f:b0:15:1f:66:20:
cb:d3:9d:ad:1e:8a:4f:88:d7:58:64:0b:3e:93:f1:
d6:e8:54:0b:9b:a5:a2:87:0c:ae:64:5b:3d:6f:ff:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D6:38:42:A7:1B:85:84:01:97:ED:48:C9:B8:09:7B:84:E6:8A:92
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f8:83:ef:13:22:be:f4:a2:27:c3:c7:56:51:61:aa:f1:7a:
e2:3b:83:8b:a5:57:d1:89:29:d1:c9:51:b4:69:c6:d9:dd:51:
80:d1:29:13:35:b0:59:3f:49:1c:f0:f2:6b:91:3c:e8:5c:6f:
0e:ef:c4:c5:db:27:37:63:47:d3:ae:c5:58:df:16:38:46:49:
dd:68:3a:e8:50:9b:b8:fc:9a:27:28:b1:81:81:24:cf:46:2f:
eb:1e:b3:74:f7:d7:f7:da:49:88:ea:3a:e4:48:18:68:0c:ed:
e6:96:08:5a:53:76:31:53:01:1f:86:f7:87:f2:d3:58:ef:b6:
4c:13:be:cd:a5:95:bf:b4:c1:6d:e4:b4:7e:24:10:9a:a2:86:
d0:61:91:72:59:5e:2e:85:df:92:86:d1:a1:15:71:c7:d9:c1:
7e:ca:05:e9:92:da:40:a4:05:94:db:8c:27:92:ee:f3:5e:02:
a5:8a:49:59:76:28:d6:7f:5c:d6:72:32:44:74:c7:e3:11:a3:
e7:e0:17:ad:4b:6e:46:7f:7f:91:5f:cf:61:ec:46:a7:c4:81:
29:69:07:78:d8:25:87:9d:b5:53:ab:03:2f:1f:39:f4:63:35:
2e:42:7f:2b:fd:81:68:3f:bc:a2:a2:bd:49:0f:ed:82:f5:60:
72:dd:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:41 2025 by rpki-client