Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e203539343439.roa
File: 326130373a323438363a6566303a3a2f34342d3438203d3e203539343439.roa (raw, json)
Hash identifier: u5UFM+e9kDgDQDZPDncHmI41i6cp2aoScUiSv2X5uhI=
Subject key identifier: C4:EB:97:F9:F5:43:D1:4B:8B:41:CB:27:AF:31:0C:E6:79:8F:DF:4B
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 150AD3C62EB8A628A047279B418A8852A66948EC
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e203539343439.roa
Signing time: Sat 04 May 2024 13:42:16 +0000
ROA not before: Sat 04 May 2024 13:37:16 +0000
ROA not after: Sat 03 May 2025 13:42:16 +0000
asID: 59449
IP address blocks: 2a07:2486:ef0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0a:d3:c6:2e:b8:a6:28:a0:47:27:9b:41:8a:88:52:a6:69:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: May 4 13:37:16 2024 GMT
Not After : May 3 13:42:16 2025 GMT
Subject: CN=C4EB97F9F543D14B8B41CB27AF310CE6798FDF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:23:5b:9e:56:10:d9:92:e1:13:93:f2:f2:54:
0a:8e:26:77:99:c2:4c:f6:e9:44:28:20:19:b0:05:
1c:a0:b6:8a:bf:47:42:ab:87:ed:2d:64:6c:ae:1d:
51:a4:7a:6d:1c:c9:da:f0:ad:d0:cf:cc:74:38:ae:
e4:86:67:67:81:0f:87:b6:36:f9:7c:e3:e6:7d:bd:
0d:3d:b3:f4:0a:e9:5d:67:82:7d:ff:ae:3c:ae:67:
0b:56:c0:89:ed:29:c9:b0:1f:7e:c6:ea:d3:be:34:
a3:5c:91:74:15:30:51:40:e0:fb:f3:34:aa:5f:ad:
3c:e2:3a:56:2d:3c:bd:eb:ac:3f:df:f3:11:55:f1:
28:5b:48:83:13:b5:c2:34:cb:59:ac:a1:dc:50:b5:
55:f0:04:91:8d:10:64:21:28:4a:6c:90:b7:2e:28:
d6:4d:c5:4e:d8:7b:d8:eb:41:53:97:29:f5:6d:c8:
4a:66:08:df:e1:8e:64:21:46:dd:9d:31:2d:79:10:
61:f7:17:0c:22:e2:54:42:ff:a1:ab:34:62:b7:63:
aa:15:87:96:4b:30:2d:4a:a0:7f:0f:f4:b3:e4:2b:
82:aa:cf:1f:cc:4b:4e:98:f6:63:f4:c0:cc:68:5f:
54:6c:a2:f8:1e:38:bf:1e:e2:25:31:9c:0f:2f:f1:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:97:F9:F5:43:D1:4B:8B:41:CB:27:AF:31:0C:E6:79:8F:DF:4B
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e203539343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ef0::/44
Signature Algorithm: sha256WithRSAEncryption
7f:d8:ca:8b:67:fa:11:de:60:cc:f8:b0:9a:87:d7:de:6d:bd:
4d:7c:4e:60:a7:0d:b9:b7:76:29:a4:f5:52:93:ef:e7:87:85:
8e:3e:97:4d:c2:15:a9:45:67:45:01:9e:46:7e:83:52:00:26:
de:86:31:41:41:d9:1a:5f:56:f3:37:16:5b:9b:b8:b2:1d:6b:
e8:5e:ff:7e:65:91:22:16:2f:44:be:1d:bf:16:d2:a2:fc:40:
27:75:cf:c1:79:28:0f:38:32:46:df:93:07:d1:c8:62:3c:bb:
5c:5d:5b:cc:27:25:f7:ad:7f:95:12:ae:18:97:94:49:34:29:
6c:71:c5:07:5f:7f:f8:b7:24:ab:1b:3e:8d:38:7c:0e:83:1c:
de:f4:c3:5c:3d:ec:14:3f:d8:a7:26:6a:5b:76:07:6c:39:7b:
e1:fe:c9:30:f4:65:a6:db:0a:21:d3:30:98:30:8a:ec:2c:4e:
82:e5:78:00:1a:d2:36:6c:a4:0b:c2:47:4f:37:0a:fa:c4:8f:
e6:a7:10:e4:69:36:a4:a8:c0:4e:60:53:dc:8a:ef:01:1b:46:
29:b6:e2:6d:e9:aa:fd:fa:6b:39:79:87:cc:60:4a:34:05:e3:
17:3d:18:28:9f:53:0e:78:4d:34:16:8e:0c:d1:0b:ae:4b:7b:
86:ce:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:40 2025 by rpki-client