Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3438203d3e203438373532.roa
File: 326130373a323438363a6530303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier: zV4vo1TKDbYsZPjgUvdOsm1AOD6kynRRGZH33uaQqHc=
Subject key identifier: 12:9E:19:7A:6C:14:0A:52:0C:F1:27:2A:AE:5E:92:8A:7E:66:12:92
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 78E18086B8F54859C8C380EC3CF4699BFC53263C
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3438203d3e203438373532.roa
Signing time: Wed 10 Apr 2024 21:23:30 +0000
ROA not before: Wed 10 Apr 2024 21:18:30 +0000
ROA not after: Wed 09 Apr 2025 21:23:30 +0000
asID: 48752
IP address blocks: 2a07:2486:e00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e1:80:86:b8:f5:48:59:c8:c3:80:ec:3c:f4:69:9b:fc:53:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Apr 10 21:18:30 2024 GMT
Not After : Apr 9 21:23:30 2025 GMT
Subject: CN=129E197A6C140A520CF1272AAE5E928A7E661292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:23:b6:7a:41:f8:07:8b:0b:55:49:e1:7e:
24:bb:85:91:01:e9:04:71:06:6a:e0:7a:f0:cc:c4:
dc:72:43:96:0e:d0:2c:d7:0e:75:b5:18:f7:4d:eb:
55:3a:e3:53:57:7f:72:81:99:c7:43:9d:77:5f:b4:
f6:4c:2d:e6:7d:45:ff:f0:c3:b9:72:65:f3:a0:4f:
ad:5e:93:d5:26:76:9a:99:04:26:78:72:c3:d8:a4:
33:51:53:3b:23:fd:e2:d0:ce:c9:8b:bf:56:c9:c4:
02:91:15:e8:66:16:34:e6:09:3c:11:a6:7c:a3:d4:
15:40:65:cf:1d:49:ac:3a:6b:8c:39:dc:ed:60:74:
17:40:15:ca:82:fa:1d:cf:91:c9:3c:c2:9d:32:42:
03:60:43:ce:12:25:66:30:a2:23:09:18:48:3d:92:
75:25:8f:06:1e:17:a8:85:c5:3d:54:8c:f3:67:5e:
5d:79:c8:60:96:b2:ca:56:a6:92:9e:a9:40:06:bc:
f9:91:d4:9e:c7:eb:4d:32:ea:c7:6f:53:60:57:62:
c5:be:ac:4c:66:08:04:cd:48:d8:d0:12:73:8b:08:
ec:03:b9:53:2a:d3:03:72:8c:93:8a:dc:7d:6d:3a:
50:63:63:87:d7:9d:b1:b9:1d:54:10:03:e8:16:ff:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:19:7A:6C:14:0A:52:0C:F1:27:2A:AE:5E:92:8A:7E:66:12:92
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6530303a3a2f34342d3438203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:e00::/44
Signature Algorithm: sha256WithRSAEncryption
14:b4:d6:ef:df:ee:35:6f:d9:1d:b5:a1:c8:26:d2:98:7f:c5:
97:4b:fe:e0:cc:12:c8:71:fb:94:be:ad:d8:7d:43:43:8b:e2:
ff:56:21:76:c6:29:16:2c:fc:19:34:1a:68:be:9b:9b:77:cb:
74:ec:d1:67:2f:b0:9a:29:f6:2a:65:b9:53:35:3b:49:7a:85:
6e:d2:c0:83:be:03:65:35:61:68:8e:20:44:8d:ca:7a:6c:ac:
9a:4a:d9:ee:c9:88:e9:90:4a:8c:e3:44:2c:67:fd:72:8a:09:
da:da:d2:c4:24:43:79:3c:ff:4e:6a:05:97:ff:7a:e3:fe:3a:
c2:df:d2:06:33:6d:66:bc:b4:21:7f:25:0e:38:2a:be:55:32:
bb:65:81:ab:2d:8b:64:a8:46:45:a8:15:df:41:69:e2:9f:57:
c8:40:ce:bc:db:95:62:5c:94:8f:de:5f:53:8c:aa:1f:77:04:
b7:ea:b3:1e:7d:f0:e3:ef:3e:0d:aa:fa:e0:09:b8:86:99:a3:
97:81:e6:a0:31:3c:39:06:9c:33:2e:32:ca:44:04:a1:c7:0e:
57:6d:6e:6d:88:27:e9:80:90:b0:7e:61:b9:16:b5:38:5a:89:
85:78:56:1d:ce:73:fe:f8:fb:4f:29:e8:b6:42:3c:10:bf:b9:
9a:7c:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:07 2025 by rpki-client