Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e20323032313937.roa
File: 326130373a323438363a6563303a3a2f34342d3438203d3e20323032313937.roa (raw, json)
Hash identifier: koo7AL033XTkbglSVTxPOBhbpDoYS5WwoXU4hS1s0tY=
Subject key identifier: E2:51:9D:6C:B0:BA:2D:1E:72:E0:16:F1:76:0C:CE:75:8F:13:F5:DA
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 64C45E67248C879D44262698F0451C6E215BC548
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e20323032313937.roa
Signing time: Sat 13 Apr 2024 17:21:57 +0000
ROA not before: Sat 13 Apr 2024 17:16:57 +0000
ROA not after: Sat 12 Apr 2025 17:21:57 +0000
asID: 202197
IP address blocks: 2a07:2486:ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c4:5e:67:24:8c:87:9d:44:26:26:98:f0:45:1c:6e:21:5b:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Apr 13 17:16:57 2024 GMT
Not After : Apr 12 17:21:57 2025 GMT
Subject: CN=E2519D6CB0BA2D1E72E016F1760CCE758F13F5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:54:b7:f9:ed:8b:cb:d6:d4:58:2d:90:a5:
99:6a:62:81:16:43:91:b7:02:89:db:5a:e5:b2:85:
5e:5a:10:74:06:ba:83:f4:69:3a:39:17:ea:14:a1:
89:b8:06:9d:9d:3b:3b:56:14:21:68:b6:50:ee:d0:
77:2e:bb:14:20:df:9a:86:5a:63:3c:4a:dc:8e:de:
0d:b5:be:49:2a:ed:7a:b7:a9:53:4f:bd:59:6b:ae:
90:6e:94:e6:62:c5:ef:a6:00:33:cb:79:c9:4c:cd:
a8:05:c7:e8:4d:2e:1f:35:f3:eb:b0:e1:d1:1b:3c:
7c:a2:f2:b6:cc:ed:cf:4f:60:72:6e:f3:fa:41:9e:
ec:f2:8c:07:d2:51:c0:25:9d:13:06:6a:f6:8c:ce:
e4:19:db:00:e4:94:25:60:a4:13:fd:41:7a:ee:81:
49:6d:55:7b:f5:53:0c:1c:cf:41:69:7e:5d:f5:4b:
c1:b3:ff:65:b5:be:46:9d:ce:d0:ef:43:f6:77:fb:
6d:f7:c9:46:94:93:7d:ad:7a:66:06:24:d2:c9:3e:
ce:4f:2d:d0:3b:72:85:23:5a:f7:e4:b7:3f:55:fb:
a2:64:1d:6d:6c:96:8a:bf:19:45:9f:c2:8f:43:a5:
ec:69:db:da:85:50:be:ce:67:15:ed:74:68:83:a4:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:9D:6C:B0:BA:2D:1E:72:E0:16:F1:76:0C:CE:75:8F:13:F5:DA
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e20323032313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
19:c3:a0:0d:8d:0c:9b:b5:28:99:17:89:a5:64:34:ad:f4:d7:
5e:8c:dd:7e:c4:b5:1b:d8:7e:cb:2b:43:ed:5c:da:99:f0:a0:
02:ef:4c:98:b0:b7:a9:5c:24:a3:21:5c:9a:bc:05:3c:e1:39:
d6:d7:32:9b:ff:d1:77:94:39:0c:e6:d0:fa:52:d0:48:de:e9:
03:85:d5:c5:25:6b:5b:98:5f:92:d3:13:f6:3b:58:c2:f0:20:
90:cf:b2:c4:f9:44:00:ea:5e:56:5d:1c:dc:21:d4:a6:5a:3d:
40:d4:55:4f:b6:e0:a2:ed:bc:e8:1e:8b:61:1b:4c:91:c7:2d:
1f:ae:c2:d7:fd:10:e1:09:21:ee:1f:fc:cf:f9:26:62:41:c6:
a5:69:cd:e0:0f:e5:c6:ce:34:6d:be:5e:d4:fb:40:20:3b:fb:
53:7f:5b:d6:e8:21:27:87:dc:93:22:c8:5e:89:3f:26:f8:ed:
6d:b8:7b:6b:11:58:5d:bd:7f:79:c0:a6:32:39:a6:3f:a6:a6:
17:a1:42:6d:1e:35:a1:6a:a7:bd:ee:51:81:97:67:67:93:22:
ac:06:4b:9e:3d:12:c8:14:2d:d3:cf:b3:f6:bc:5f:c7:84:b9:
3d:d2:9d:d9:ae:db:b1:6d:e1:92:b0:36:a8:bb:72:75:f4:9a:
c4:d6:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:11:27 2025 by rpki-client