Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6562303a3a2f34342d3438203d3e203438373532.roa
File: 326130373a323438363a6562303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier: cct2jhjxuhlafmtgQJ7fDx/3DHnDzx3FFZlwNHWkglc=
Subject key identifier: E9:DE:91:BE:F9:9F:1F:A6:9A:85:BB:5B:59:DC:EB:06:8A:51:B3:B3
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 37DD478B574B8CEAAFC6C293310D04BBE4304C33
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6562303a3a2f34342d3438203d3e203438373532.roa
Signing time: Thu 11 Apr 2024 00:38:05 +0000
ROA not before: Thu 11 Apr 2024 00:33:05 +0000
ROA not after: Thu 10 Apr 2025 00:38:05 +0000
asID: 48752
IP address blocks: 2a07:2486:eb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:dd:47:8b:57:4b:8c:ea:af:c6:c2:93:31:0d:04:bb:e4:30:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Apr 11 00:33:05 2024 GMT
Not After : Apr 10 00:38:05 2025 GMT
Subject: CN=E9DE91BEF99F1FA69A85BB5B59DCEB068A51B3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:f2:5d:25:75:3d:7c:3c:79:11:ad:32:dd:
b8:9e:1d:25:33:9f:ae:cb:e9:c1:68:4c:88:5a:31:
cd:12:fb:69:02:de:b4:80:8a:2b:7b:79:73:87:af:
62:19:5e:4e:a3:ee:79:d3:a9:e4:7f:91:80:49:46:
dc:21:02:f4:0d:8f:8e:53:ab:a6:1a:78:68:d8:b4:
0e:44:85:c6:0a:34:e8:a3:61:da:64:13:81:f2:d5:
c2:06:68:ae:fb:5b:97:33:97:4e:0f:67:4d:6d:a0:
ca:54:5f:a6:ea:a8:e9:74:14:af:8c:77:8e:28:55:
c9:ca:1c:56:09:84:40:28:98:74:69:aa:fd:64:7f:
73:c9:7c:36:54:4b:59:bd:ac:46:67:9d:76:68:26:
00:4d:00:00:15:ea:1c:26:4d:ee:e8:1f:68:0e:8d:
85:5e:b6:22:5f:ed:84:bb:73:37:dc:bd:9c:d8:ee:
9a:d1:24:6b:62:f0:f5:87:da:54:3f:99:3c:91:51:
f1:88:67:99:4b:b3:ac:ff:6d:eb:ff:21:3f:7a:bf:
f5:18:3e:fa:60:e4:7d:a6:15:5a:c9:45:3b:ee:c3:
40:a8:87:a7:8d:db:5a:d0:1a:21:f4:6a:bf:aa:02:
c9:86:70:2b:bf:20:84:5d:1e:2b:e3:fa:16:d6:6e:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:91:BE:F9:9F:1F:A6:9A:85:BB:5B:59:DC:EB:06:8A:51:B3:B3
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6562303a3a2f34342d3438203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:eb0::/44
Signature Algorithm: sha256WithRSAEncryption
66:80:20:ef:ae:6d:36:f5:e3:92:a4:6f:34:96:68:a7:b2:0c:
0b:d2:9a:42:75:eb:81:eb:8d:f9:62:e6:a4:bc:24:e9:e1:19:
f0:5a:15:09:d5:c7:e5:d6:50:82:38:d4:29:f8:c4:45:2d:df:
43:59:6b:54:ba:b5:25:a6:f3:06:24:e9:fa:1c:7c:48:4f:85:
b8:05:80:62:d4:5e:fa:f2:4f:db:29:1b:5a:4c:1d:7b:53:b2:
f2:94:9d:07:86:10:dc:55:8f:62:72:b1:3e:e4:89:4e:5b:5e:
04:45:57:ef:8a:5a:93:b4:62:79:2a:08:80:21:9b:73:56:45:
5a:fb:e8:e7:3c:2c:32:7f:c8:ad:6e:71:79:5f:e9:d7:7f:f1:
ab:00:79:d1:a5:67:e4:5d:c3:ab:b9:4f:c7:d8:1b:5e:4e:49:
49:6b:b2:20:80:73:f8:a5:c0:6b:70:26:e0:9d:1f:2c:f4:b6:
fa:60:86:ea:b9:98:4e:9d:75:91:6e:fe:9f:fd:21:a0:d0:d6:
b9:dd:57:4b:c0:e9:d7:e3:a2:98:07:c6:5d:eb:96:b5:3d:7e:
7a:41:03:b6:65:27:d4:48:f0:3a:81:4b:11:11:24:4c:a5:57:
6b:04:5e:15:b1:b7:62:1b:d3:c0:26:1f:f0:28:c7:d6:4a:ee:
ce:f0:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:43 2025 by rpki-client