Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e203438373532.roa
File: 326130373a323438363a6563303a3a2f34342d3438203d3e203438373532.roa (raw, json)
Hash identifier: UJQbE9TbZcoCs9g1Lwp9GEIDoqT+JLBxEWw7Rw+eQPA=
Subject key identifier: F9:16:79:0D:CA:97:83:B4:56:B0:C2:BE:C9:55:89:23:13:5F:8B:42
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 6BE67676CD8E1CE49BD1480218C5532F552A2A2C
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e203438373532.roa
Signing time: Sat 13 Apr 2024 17:21:44 +0000
ROA not before: Sat 13 Apr 2024 17:16:44 +0000
ROA not after: Sat 12 Apr 2025 17:21:44 +0000
asID: 48752
IP address blocks: 2a07:2486:ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e6:76:76:cd:8e:1c:e4:9b:d1:48:02:18:c5:53:2f:55:2a:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Apr 13 17:16:44 2024 GMT
Not After : Apr 12 17:21:44 2025 GMT
Subject: CN=F916790DCA9783B456B0C2BEC9558923135F8B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:a4:ce:13:0a:ae:bb:fc:b8:42:4c:de:41:
b4:15:c5:25:89:d1:ec:b1:4e:0c:2d:f8:39:df:be:
34:31:b1:ac:4f:ff:7b:37:a3:59:5a:3b:d1:b4:6c:
c6:02:53:4f:7e:47:06:2d:ea:e4:e5:10:7f:c7:0d:
da:51:41:35:2b:a3:d1:69:1d:7d:3e:76:b6:09:b3:
80:e1:96:82:56:eb:39:d8:90:a5:3b:c4:cf:5b:c4:
29:84:88:fb:e8:26:f0:95:a7:0b:3c:5c:8d:09:53:
8a:dd:7e:04:78:6d:f3:48:8c:6a:49:d6:99:16:74:
68:84:e6:30:a0:41:ee:0d:60:ab:df:62:ac:57:3c:
39:05:c9:65:23:62:0a:f7:2b:53:47:69:5b:a1:6f:
e4:e1:2a:be:c7:a4:a4:40:77:21:2d:46:67:bd:70:
bd:26:08:53:54:08:20:02:07:32:84:ff:b1:25:a4:
c2:c5:30:8c:52:6c:e5:fd:50:7d:f4:0b:30:1c:b4:
1c:b8:6c:01:76:2b:c8:e4:63:44:6c:50:f2:d1:ec:
69:c5:e9:50:4d:d8:50:f5:6e:a0:de:85:40:15:87:
b5:92:1a:52:4c:33:68:ff:0c:38:96:e3:15:b7:91:
84:8b:ee:46:ff:1e:31:49:5c:6e:f2:c2:48:4d:fd:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:79:0D:CA:97:83:B4:56:B0:C2:BE:C9:55:89:23:13:5F:8B:42
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6563303a3a2f34342d3438203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
14:11:88:3e:b8:e3:49:07:cb:0a:9b:11:48:4b:0c:c8:f6:e1:
a7:3b:3b:67:5f:c4:32:b6:01:2c:02:f4:6a:f3:15:e2:53:5a:
82:bc:07:f8:1c:21:ef:da:9e:a9:48:98:b2:ba:8b:5e:f6:ba:
f0:d9:bb:4a:81:7c:f7:48:73:76:88:12:7b:e2:ea:0d:34:2e:
43:ab:c7:fb:49:92:69:60:43:64:95:48:ef:bd:27:b5:90:53:
53:b4:1d:c0:66:ad:72:a8:6e:ee:d9:87:11:d9:74:eb:4a:b8:
9a:1c:aa:50:86:06:cf:22:10:d1:24:db:21:8b:c2:75:9d:25:
37:a5:02:a3:6a:f0:e1:6f:6a:ae:a9:49:18:46:c3:5c:57:d5:
32:30:41:00:7d:a5:d4:ea:72:38:13:ca:ac:fe:05:44:ff:7b:
e5:ec:1f:f9:a5:0d:42:21:98:5d:5d:64:76:b2:82:3d:97:67:
51:c9:0f:ac:52:67:b4:2a:c8:10:b8:b3:47:37:c6:4e:73:ee:
34:60:a1:1e:f5:0a:f4:6c:dd:aa:3d:9e:19:2e:ad:62:a2:8b:
db:a9:3f:69:93:a2:12:87:97:20:2f:6a:7b:20:79:ea:e2:2e:
fe:c2:d8:e0:d8:ef:cc:8d:c9:c2:c4:ac:ca:21:e7:97:d8:47:
c0:27:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:40 2025 by rpki-client