Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e20323032313937.roa
File: 326130373a323438363a6563303a3a2f34342d3434203d3e20323032313937.roa (raw, json)
Hash identifier: ETMhcQNefry+cQxQCxh+9IxpFP23nC7tdp2lCmpNvpk=
Subject key identifier: 10:6F:21:BE:A3:71:50:CC:F4:F1:E2:F0:64:67:14:D3:7F:30:47:41
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 3BBCF4484EAEE522C2343226BFBC4927061A9BA9
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e20323032313937.roa
Signing time: Tue 07 May 2024 00:54:47 +0000
ROA not before: Tue 07 May 2024 00:49:47 +0000
ROA not after: Tue 06 May 2025 00:54:47 +0000
asID: 202197
IP address blocks: 2a07:2486:ec0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bc:f4:48:4e:ae:e5:22:c2:34:32:26:bf:bc:49:27:06:1a:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 7 00:49:47 2024 GMT
Not After : May 6 00:54:47 2025 GMT
Subject: CN=106F21BEA37150CCF4F1E2F0646714D37F304741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:5f:0a:c0:09:05:0e:1d:ef:a6:d5:19:a7:
87:19:c5:46:d0:c1:f6:8c:c1:32:f1:4a:48:70:18:
aa:d5:22:4b:51:0a:b4:68:1e:6f:d2:d0:18:fa:6a:
0e:7f:e4:6c:7b:87:9f:11:0d:4e:e6:a1:8d:76:07:
bb:7b:0d:a6:9c:9d:85:32:65:d6:bf:ae:d7:13:e0:
65:21:5b:a3:f5:e0:6d:77:c0:67:0c:78:37:95:e2:
d6:51:78:7b:c7:8d:e8:8e:8e:56:25:de:6a:69:47:
8e:67:ec:3d:80:55:f2:c6:1f:00:ea:4b:b1:3f:96:
cd:37:c5:ca:bc:13:2a:a1:ca:82:e9:55:16:d1:61:
f8:19:2f:db:e4:96:f6:18:35:6e:b6:32:70:72:08:
a6:98:f5:15:1c:97:64:68:4e:62:87:72:da:e9:01:
a3:ce:0a:8c:8e:f1:c7:7a:79:02:8a:af:49:40:69:
5d:3b:2f:5a:46:e6:63:8f:33:3f:e9:2e:6d:ae:df:
ed:cc:3a:bf:70:b7:19:b5:6f:b7:1f:59:cb:fe:73:
6d:ca:bd:b5:08:c9:dc:25:66:48:98:d9:e8:05:28:
da:48:a5:71:c5:41:c2:60:d5:33:bf:62:52:0b:bd:
64:e9:af:a0:34:25:f1:7e:bf:76:10:6d:87:3a:33:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6F:21:BE:A3:71:50:CC:F4:F1:E2:F0:64:67:14:D3:7F:30:47:41
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e20323032313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:3b:34:8f:fe:9d:7c:ea:25:fb:95:e7:be:1c:61:22:7f:d7:
a2:52:20:4a:fd:a3:cc:e9:9a:06:bf:68:52:47:19:ff:3d:da:
c4:01:ca:7d:8b:2c:35:db:bf:69:11:33:0c:ea:5b:7b:fd:f3:
6e:f1:df:56:38:cd:71:3d:c0:b2:11:a9:37:1a:20:a1:6d:ae:
73:24:7c:c9:74:df:6c:f7:a6:b0:7b:8a:8b:15:41:45:ad:09:
0a:39:a4:3f:4c:69:4c:4d:e1:d4:ad:34:41:c6:74:1c:57:83:
6e:16:4b:34:b0:28:d2:53:b4:ce:da:f5:a7:a9:4a:a0:e8:4f:
12:30:c2:97:80:56:7a:5d:b2:08:d0:db:1d:93:78:9a:d7:3c:
75:88:a3:d8:37:b4:ba:fc:60:bb:f7:1f:b9:a2:78:90:c0:22:
73:cf:6e:6e:41:5e:84:86:3d:62:6e:41:5a:7f:40:6b:28:26:
e3:88:32:90:72:d7:a1:12:3c:2c:d6:73:21:62:55:0f:63:a9:
a9:43:ba:66:bc:d3:26:b4:13:37:de:65:45:fc:d9:3c:a6:e4:
ce:3b:0b:9d:4e:1d:60:4f:0c:09:d9:09:37:fb:82:0d:04:14:
2e:d7:7b:4a:c1:b1:d1:36:9e:ac:42:cc:77:d5:1a:a9:a5:e5:
02:8d:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:25 2025 by rpki-client