Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e203438373532.roa
File: 326130373a323438363a6531303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier: 338z6YU083Rj1eWXBoJPGCxVgcy3DRzoLQaxDt4DVkM=
Subject key identifier: 03:11:D0:CC:CE:E6:55:19:78:1F:17:33:9F:3E:69:32:7D:82:65:01
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 375F465C014AC0FEBDB60BE33D7CEA0F1CEA590C
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e203438373532.roa
Signing time: Sat 04 May 2024 11:41:23 +0000
ROA not before: Sat 04 May 2024 11:36:23 +0000
ROA not after: Sat 03 May 2025 11:41:23 +0000
asID: 48752
IP address blocks: 2a07:2486:e10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5f:46:5c:01:4a:c0:fe:bd:b6:0b:e3:3d:7c:ea:0f:1c:ea:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 4 11:36:23 2024 GMT
Not After : May 3 11:41:23 2025 GMT
Subject: CN=0311D0CCCEE65519781F17339F3E69327D826501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:7c:48:e4:10:96:a6:8e:06:64:b5:a3:0c:
be:5a:a0:62:15:ba:0b:f6:4f:fe:65:36:5a:6a:39:
73:b1:98:75:b0:14:d3:63:32:fd:38:ef:3e:75:c1:
83:ef:65:4b:08:77:05:ea:07:22:99:31:c3:ee:2a:
ff:a7:f2:fb:78:ed:32:8a:3b:5a:07:b4:5c:1a:41:
fc:0f:74:a9:85:ff:c8:5a:a7:7a:72:4e:e4:f4:f9:
e8:41:50:26:8a:fc:a6:57:cf:ab:ac:76:7f:93:56:
d9:77:cd:69:7c:8b:9f:f9:3d:07:e5:a7:d9:48:e8:
96:26:34:f6:ec:40:49:9f:5b:5c:6e:90:37:de:98:
5f:ae:89:3e:49:4d:2e:82:47:fd:65:f3:56:be:1b:
d7:17:f4:69:78:24:77:c9:68:93:91:b9:94:5b:5c:
39:9c:87:fc:da:e6:d9:3b:5d:7f:83:15:98:d6:05:
e8:5d:b3:d4:c5:a9:a9:95:c9:54:23:55:b9:43:d7:
31:a1:9a:98:77:23:5f:fc:c6:ff:d8:a6:6f:59:00:
ba:9d:b4:f4:85:04:04:88:8d:75:76:9b:86:19:a2:
e5:3e:8a:50:52:22:e7:c7:b3:eb:69:80:fd:aa:3a:
e2:0b:64:79:fb:36:bc:22:de:b3:5e:00:6b:03:03:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:D0:CC:CE:E6:55:19:78:1F:17:33:9F:3E:69:32:7D:82:65:01
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6531303a3a2f34342d3438203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:e10::/44
Signature Algorithm: sha256WithRSAEncryption
53:09:11:1a:b2:7c:52:d3:33:f0:d8:62:25:5c:14:0e:90:09:
26:39:8e:8f:c3:ff:5f:7d:af:9b:40:09:a0:90:17:85:8b:09:
40:99:e1:fd:1b:2f:8b:e3:c1:1c:69:2a:90:ba:15:a9:bf:bd:
9e:7c:2a:af:ee:2e:42:25:93:92:04:fc:8c:ba:a2:a9:88:8c:
57:8a:6d:e4:4f:b4:0f:00:04:11:19:87:6c:47:a5:11:f1:0a:
df:75:a6:2e:63:e1:ec:55:88:d8:95:95:ac:43:03:1c:46:f4:
91:79:8b:bf:79:fb:a2:9e:ba:6a:37:9a:e0:28:23:d2:ea:60:
5a:cd:a8:e9:4f:42:81:bd:39:b1:ac:c8:b2:ba:9a:19:3c:48:
f4:0b:44:96:b3:60:37:06:e6:c4:bf:91:a0:e5:cf:71:96:4e:
0f:fc:4e:8e:bb:7d:9d:1f:1a:b5:a4:ab:81:05:0a:ab:f3:80:
58:79:a2:06:51:30:41:72:a1:d0:8f:88:91:0d:4c:78:22:02:
d3:99:1c:1f:3b:4d:27:6c:39:b9:3d:58:ff:61:50:b1:e0:76:
6a:16:a7:58:a3:74:5d:ca:99:de:3f:67:ec:bf:f3:1a:a0:ac:
ab:c1:61:f6:9a:09:54:c6:4a:5d:8c:3e:0f:44:80:4d:a6:7c:
ea:09:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:54 2025 by rpki-client