Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203332393433.roa
File: 326130373a323438363a6563303a3a2f34342d3434203d3e203332393433.roa (raw, json)
Hash identifier: WkOYG8PsnBKNc2T7Uda7FD7iE61U6OXDXdCLL98RL9A=
Subject key identifier: 2E:B4:DC:18:16:1A:04:C1:D3:7C:64:00:08:BB:C1:48:EC:0C:8F:FB
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 13C040AE3557EB75711544992A0F039368A47B2E
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203332393433.roa
Signing time: Tue 07 May 2024 00:54:28 +0000
ROA not before: Tue 07 May 2024 00:49:28 +0000
ROA not after: Tue 06 May 2025 00:54:28 +0000
asID: 32943
IP address blocks: 2a07:2486:ec0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c0:40:ae:35:57:eb:75:71:15:44:99:2a:0f:03:93:68:a4:7b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 7 00:49:28 2024 GMT
Not After : May 6 00:54:28 2025 GMT
Subject: CN=2EB4DC18161A04C1D37C640008BBC148EC0C8FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:9a:cd:9c:a4:f0:3a:be:68:de:7a:25:5d:
be:e8:36:fa:38:51:8a:b8:80:2d:69:8e:07:46:5d:
4a:8e:49:a3:b8:b7:ca:1b:24:e3:16:6d:5b:2a:0f:
32:ca:62:53:14:1c:f5:bf:cc:9e:67:0e:58:a5:71:
e1:3c:6f:3d:98:23:c3:ba:81:ed:ec:86:a6:d9:20:
98:5d:df:cf:7a:da:3c:9c:cd:d3:e7:2f:fd:5a:d9:
c3:6b:1c:c1:23:d6:1d:da:a0:66:cb:ea:8e:f5:9e:
8d:4e:03:1a:a7:03:a6:25:ce:62:86:d1:b7:b8:45:
74:ff:91:b8:88:9a:89:73:c6:9c:52:82:95:c3:94:
94:a4:c5:d6:f9:c0:ea:e8:f9:d1:52:31:ce:4d:27:
97:2e:a4:ef:86:56:97:41:88:f2:88:2c:5c:73:95:
94:48:35:cf:c8:d1:4d:7b:0e:25:4d:3e:f1:d2:c5:
f3:9a:6e:d9:65:9d:e5:ba:d0:5c:4b:b1:34:46:0d:
82:a4:3e:a8:24:9b:46:98:95:62:16:d1:90:02:24:
9f:f2:50:a1:35:a6:59:53:1c:6f:8b:6b:76:b4:da:
18:85:36:93:76:e7:30:6a:91:b6:e0:6d:7e:d5:9f:
df:d1:83:a6:e6:6c:aa:ac:e0:db:1d:68:bd:91:14:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:DC:18:16:1A:04:C1:D3:7C:64:00:08:BB:C1:48:EC:0C:8F:FB
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203332393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
1c:61:10:ac:7e:df:fb:a4:6e:0f:57:9d:87:8e:ae:43:f2:05:
ac:43:fb:1c:9e:fd:71:d6:0f:c2:1c:1a:57:ee:e7:46:dd:33:
98:1a:65:6c:39:b6:77:ee:df:23:27:cf:d3:48:5a:6a:3c:5f:
ae:80:93:89:50:6a:39:75:02:2e:c6:f9:02:55:f9:b5:1b:43:
fe:4f:eb:b5:b5:6b:e8:e6:8e:d6:25:36:f9:72:87:c9:83:36:
db:72:35:3e:8b:3f:c5:6c:0d:06:09:0c:7f:98:d4:77:4a:0a:
1a:5e:96:c5:3d:57:ba:dd:95:86:80:c1:ba:8e:33:6f:87:57:
8f:b4:ee:cc:37:b8:69:80:30:19:62:3d:40:c8:77:54:90:44:
c7:91:47:c9:da:aa:6a:2f:c0:32:3c:c8:c8:26:a6:10:57:9a:
9e:c9:a1:34:e2:45:25:9a:67:18:52:b6:df:ff:27:3b:d0:24:
30:86:7e:77:53:85:52:34:22:2c:d2:75:a9:85:b0:75:c7:c6:
af:b3:d4:a2:57:e9:91:c3:62:15:dd:c6:70:f8:76:34:6d:7f:
03:6e:b0:48:fb:6c:28:2e:17:d7:b6:0f:54:7e:7a:d3:6c:e7:
33:7f:b1:f7:82:c9:2a:17:c4:c6:14:8b:31:20:6b:b5:3c:cc:
de:3b:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:03:33 2025 by rpki-client