Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6565303a3a2f34342d3434203d3e203438373532.roa
File: 326130373a323438363a6565303a3a2f34342d3434203d3e203438373532.roa (raw, json)
Hash identifier: IPSTfsSaL5yAHab4ZCjCFaTIt2KyTRIGUmrk2Ctg0DE=
Subject key identifier: FD:41:D2:99:9E:69:71:B2:87:F7:FF:70:47:EF:C7:89:07:03:F9:14
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 7C16B2B871C60B96C50093857BE741E68828EC91
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6565303a3a2f34342d3434203d3e203438373532.roa
Signing time: Tue 07 May 2024 01:10:11 +0000
ROA not before: Tue 07 May 2024 01:05:11 +0000
ROA not after: Tue 06 May 2025 01:10:11 +0000
asID: 48752
IP address blocks: 2a07:2486:ee0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:16:b2:b8:71:c6:0b:96:c5:00:93:85:7b:e7:41:e6:88:28:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 7 01:05:11 2024 GMT
Not After : May 6 01:10:11 2025 GMT
Subject: CN=FD41D2999E6971B287F7FF7047EFC7890703F914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:d2:65:0e:ee:46:cd:39:70:de:a7:2a:73:
52:ea:ff:df:3d:ca:87:9e:c1:d2:3c:d6:2b:0b:47:
56:56:c6:40:96:3f:d0:0d:e2:f1:4e:8f:5a:8f:13:
6b:d7:ff:58:2c:47:36:63:50:49:26:97:56:55:99:
7f:0f:88:24:31:82:3b:cf:b1:d5:a4:13:17:7e:af:
51:2f:ae:f0:8e:41:19:54:3d:8f:2d:49:84:ae:ee:
34:de:6a:b8:12:49:36:5b:90:91:c0:f3:fc:e6:2f:
97:da:45:b7:0d:e4:06:5b:28:71:d9:ba:36:68:b4:
f7:40:7c:e5:42:fa:de:b8:38:e4:4e:1f:77:e7:c3:
27:59:e8:01:a0:f2:69:c7:1d:88:ed:b7:32:f9:fd:
3c:a1:7c:bb:29:ae:a0:a1:c1:b0:32:6a:5a:6b:cb:
eb:27:70:9a:69:01:9c:4e:53:0d:2c:28:be:5a:74:
28:f7:64:7b:67:86:71:88:e4:87:56:2f:8b:6b:d1:
f7:b9:ad:65:c7:6a:f3:26:12:40:b7:be:0a:e0:bf:
4e:1a:78:ae:fd:50:a0:71:f2:a9:9b:5f:bc:b4:c9:
d1:e4:24:11:f6:0a:e3:c7:c7:35:d3:02:fe:b4:97:
dd:d7:1b:6f:f2:a3:d6:7b:f0:84:25:07:f6:a8:a6:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:D2:99:9E:69:71:B2:87:F7:FF:70:47:EF:C7:89:07:03:F9:14
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6565303a3a2f34342d3434203d3e203438373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ee0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:85:6f:46:de:58:ec:73:ea:87:52:b2:e0:99:b6:49:8f:7b:
04:f2:40:b9:77:8f:bf:ac:7d:64:53:75:d1:98:28:7b:28:7e:
69:3f:a5:fd:e2:5b:f2:86:6f:89:8d:fe:d7:60:ab:ef:90:76:
75:d8:4f:f2:2b:21:63:39:bc:5c:38:94:a0:e6:9c:d5:d2:16:
a1:5a:20:5f:8a:c6:ce:cd:fb:69:49:1f:ee:fe:b1:8d:46:b5:
ee:10:72:44:fc:76:25:c1:33:f8:42:39:6e:4c:eb:d4:d1:64:
ed:a1:d2:5f:42:7e:b4:50:60:ce:3f:0b:37:c9:69:42:24:49:
94:8d:fa:20:56:60:2a:98:23:17:8a:54:1a:ac:cf:8c:8a:82:
da:21:c9:20:0b:62:fb:4c:18:3d:4c:1f:6b:26:5e:49:b1:43:
04:a4:3f:79:85:06:d8:0b:be:68:7e:da:aa:59:e7:9e:43:33:
48:b1:83:d4:2a:63:fa:44:3f:c4:26:57:92:56:1a:29:8c:90:
6d:cc:5c:34:53:07:f1:bc:12:8f:47:a4:2c:8f:a1:be:90:10:
ed:ca:a7:ac:62:b3:95:b6:c1:f3:01:1d:d7:b7:06:fc:11:16:
a1:5e:73:84:02:a8:37:06:5c:78:c0:ea:2c:c3:90:49:36:bc:
93:cb:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:39 2025 by rpki-client