Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203438373532.roa
File: 326130373a323438363a6563303a3a2f34342d3434203d3e203438373532.roa (raw, json)
Hash identifier: ITjtohmRBu7Qw13Itg2keZHQu7CuBMdYrFWFWw3kpy8=
Subject key identifier: BA:F2:5E:FE:A4:F2:EE:B7:ED:C8:06:11:F6:75:8F:1C:23:5F:C3:FB
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 454051FBE49B8D992BB9E6E046F80560A445A7AF
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203438373532.roa
Signing time: Tue 07 May 2024 00:54:34 +0000
ROA not before: Tue 07 May 2024 00:49:34 +0000
ROA not after: Tue 06 May 2025 00:54:34 +0000
asID: 48752
IP address blocks: 2a07:2486:ec0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:40:51:fb:e4:9b:8d:99:2b:b9:e6:e0:46:f8:05:60:a4:45:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 7 00:49:34 2024 GMT
Not After : May 6 00:54:34 2025 GMT
Subject: CN=BAF25EFEA4F2EEB7EDC80611F6758F1C235FC3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:32:af:c5:d9:fd:df:f4:1e:39:76:98:dc:
d0:27:d6:81:9a:f5:ea:73:7b:db:90:8d:e8:cf:19:
d7:b0:75:b0:a5:bd:e1:fa:83:70:37:06:11:5e:97:
3c:79:72:9e:a6:e1:65:1a:ca:af:d4:e2:06:1c:5a:
33:34:80:dd:ac:49:14:91:66:96:8e:36:28:31:7a:
af:20:fc:45:fa:56:85:05:b9:9f:89:d7:6d:dd:45:
e9:7a:15:5c:44:6d:9f:8a:0b:f9:1a:91:53:33:d7:
9c:11:e4:e2:41:2b:fb:2d:d6:8a:45:aa:e6:c5:72:
35:64:64:cc:30:c2:f3:8c:67:96:be:1a:86:4e:32:
b2:d4:0b:30:02:c7:07:96:5e:14:60:a9:96:47:4e:
dd:48:b2:2f:58:de:67:69:f7:28:f0:85:b0:64:67:
ab:15:46:e9:b3:a0:af:94:8c:b9:0b:58:53:96:f9:
29:bf:80:9f:72:7d:c6:3c:8a:d9:45:b5:e2:98:a6:
3e:ac:ea:3a:6d:16:0c:9c:65:9c:31:19:5c:6b:8b:
fa:7b:f8:3e:fd:40:18:19:b9:2a:2b:06:64:a6:06:
0a:11:9f:2b:07:39:9a:09:db:c3:18:ff:03:e0:e4:
9a:d7:54:d6:31:ae:a6:a6:89:d6:6e:37:ca:3c:db:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:5E:FE:A4:F2:EE:B7:ED:C8:06:11:F6:75:8F:1C:23:5F:C3:FB
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3434203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
84:6b:3f:6c:1c:33:3a:86:84:c6:bc:c3:0a:af:53:a7:12:30:
a7:59:1f:38:34:bd:8c:eb:e4:86:4f:ef:1a:dc:8d:2a:30:c2:
e7:25:c2:d1:ed:a9:ef:1e:ef:7e:c5:50:ca:7f:57:98:d4:93:
42:39:bb:2a:fd:35:08:37:ca:af:b5:ce:82:90:3f:48:08:8d:
68:be:3c:05:45:02:bf:7b:c4:de:ae:b8:0a:e6:37:16:55:b6:
66:4e:aa:99:dd:8e:23:fc:4a:85:c4:08:0a:07:6e:90:8b:f8:
c9:2b:a7:32:a0:b1:e3:a4:43:6b:2d:8a:63:84:f7:97:20:67:
4c:7c:ff:4b:7e:6d:09:24:be:e4:c7:7c:77:f1:07:be:59:fc:
7f:af:ed:9c:b3:6e:9a:29:c8:2e:84:2c:9e:90:7d:ce:a7:3b:
3b:3c:12:76:7b:18:6a:0e:62:72:c7:c3:63:be:c6:d8:61:40:
b2:63:0c:42:95:f0:c6:e0:4c:82:78:79:1c:0e:93:1c:f1:82:
e4:31:da:b9:b1:56:e8:56:14:7e:c6:bf:f2:35:98:20:a1:7f:
0a:a1:43:9a:91:b0:71:ef:83:cc:46:0c:9c:1f:76:11:a4:3c:
24:05:bc:b2:1a:e4:d5:7b:e7:c0:e5:ac:cb:da:5f:7b:a2:81:
94:82:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 22:19:58 2024 by rpki-client on console-fra.rpki-client.org