Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa
File: 326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa (raw, json)
Hash identifier: hseuYSraXEZSRzxdMks6tQ9NPMbXIJG+SWKAnXoVeNk=
Subject key identifier: 3F:83:6B:AE:29:7D:30:C2:26:CD:E2:83:ED:24:52:C5:66:6C:F1:21
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 12CF778FCA37E582EF0F3393B02ADD5319836285
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa
Signing time: Sat 04 May 2024 12:50:21 +0000
ROA not before: Sat 04 May 2024 12:45:21 +0000
ROA not after: Sat 03 May 2025 12:50:21 +0000
asID: 198923
IP address blocks: 2a07:2486:ef0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cf:77:8f:ca:37:e5:82:ef:0f:33:93:b0:2a:dd:53:19:83:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 4 12:45:21 2024 GMT
Not After : May 3 12:50:21 2025 GMT
Subject: CN=3F836BAE297D30C226CDE283ED2452C5666CF121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:37:76:15:b4:60:83:0c:d2:8d:93:01:75:
d5:00:9c:81:5e:ac:f9:00:3b:50:b9:53:a8:17:be:
3a:fa:5a:71:1c:a7:8f:de:6c:5e:b1:64:1b:be:81:
bb:43:ae:9a:11:f6:31:7e:80:67:68:35:1b:04:c4:
e6:4a:33:80:38:85:78:7b:13:94:d5:f0:64:9d:34:
97:1b:81:ce:96:d2:b5:f4:1d:71:de:41:80:28:82:
fe:0b:cb:9a:19:cd:e6:c2:5e:c9:24:3f:95:ea:a0:
df:b8:66:52:8a:8c:11:57:72:f7:e7:7d:96:60:5f:
14:73:1b:c3:49:a5:a9:37:91:62:75:e3:aa:55:38:
56:3f:cc:76:c3:77:f1:3f:89:a6:8c:6e:41:7e:2f:
31:d4:4a:f1:0e:6b:b7:bc:36:58:3c:fe:05:5f:4d:
95:1e:89:13:06:74:5e:ff:7b:fc:96:47:e0:23:a8:
ae:71:ea:5e:36:8f:c3:16:31:3a:70:b3:dd:b5:b9:
23:1e:92:07:51:70:50:a8:b1:01:d5:dc:4b:d6:bc:
74:77:5e:70:9a:0e:f9:06:f8:4e:71:e2:8b:9c:09:
6b:8a:c2:7b:da:86:4d:31:c1:42:70:1a:d9:d7:41:
66:69:f6:ba:e8:52:ce:1a:ce:ff:40:7f:81:1b:79:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:83:6B:AE:29:7D:30:C2:26:CD:E2:83:ED:24:52:C5:66:6C:F1:21
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ef0::/44
Signature Algorithm: sha256WithRSAEncryption
56:b2:c1:fd:f9:41:6d:98:a9:ea:15:7f:58:e2:7c:95:77:e2:
5a:db:d6:24:41:32:8b:a4:2d:27:1a:de:b4:b2:fd:25:2d:51:
c0:04:78:59:b1:8f:5e:62:eb:2f:c2:a0:1b:97:4f:e4:a5:c4:
28:c5:e6:a0:71:38:6a:ad:34:39:2c:de:f9:b2:73:1a:16:a6:
07:bc:39:26:3a:d3:9e:70:6a:ef:16:90:a9:88:09:bb:25:e8:
70:e5:af:fc:d7:fa:a7:e8:f3:0e:7d:73:76:c0:7c:19:be:09:
8b:59:e2:e0:94:46:08:f5:e5:66:37:f3:52:07:d9:9b:2d:c1:
c5:ae:f2:12:02:b9:85:e1:82:82:95:38:ff:08:bf:6f:9e:b1:
0d:16:ca:72:cb:77:70:b5:f8:ac:95:89:81:17:cb:96:08:58:
76:19:00:7e:96:49:35:08:17:44:60:00:a9:9f:64:91:55:4f:
37:03:27:cf:9f:38:9f:09:3c:8f:9d:dc:3b:e3:f9:be:ce:85:
92:3a:42:c5:ed:5b:fe:1f:f1:5f:a6:25:62:66:2d:4a:0a:16:
3a:ca:ef:ff:4c:23:12:67:51:cd:d1:f6:63:5c:b4:96:bf:3b:
32:cc:54:1b:26:a4:77:41:49:40:f1:65:3c:1a:67:f9:2b:23:
74:98:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:28 2025 by rpki-client