Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa
File: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (raw, json)
Hash identifier: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=
Subject key identifier: CF:D9:FD:A5:F5:A4:AD:C9:E0:3A:19:38:19:50:C0:D9:B4:F5:79:68
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 609CA9052C5A4944041D8B3B335B7E8F7D45330A
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa
Signing time: Sat 03 Aug 2024 02:20:24 +0000
ROA not before: Sat 03 Aug 2024 02:15:24 +0000
ROA not after: Sat 02 Aug 2025 02:20:24 +0000
asID: 205463
IP address blocks: 2a0f:85c1:7f1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9c:a9:05:2c:5a:49:44:04:1d:8b:3b:33:5b:7e:8f:7d:45:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Aug 3 02:15:24 2024 GMT
Not After : Aug 2 02:20:24 2025 GMT
Subject: CN=CFD9FDA5F5A4ADC9E03A19381950C0D9B4F57968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:e7:14:61:32:1d:bf:c4:d5:a2:f7:fc:18:
49:5d:be:27:2f:ce:24:f8:62:12:6b:00:90:8b:f9:
03:37:b2:21:3c:08:ed:11:2a:e3:88:75:f4:1d:94:
dd:6a:63:f0:25:e6:31:27:64:91:c5:9a:cb:58:4b:
6f:6b:41:4a:17:98:02:da:6d:ab:25:51:14:29:20:
f0:c5:b6:e7:9c:98:52:9d:d7:01:a5:28:3f:f7:93:
ef:47:50:59:d5:f7:e6:d1:78:fb:d4:d4:0c:b5:1b:
28:f5:88:83:a1:60:67:27:94:74:50:c7:d9:fa:1d:
d6:9d:00:7b:ad:da:c3:3d:3c:fa:c8:6c:d9:16:68:
8c:d4:50:9d:ba:77:56:98:74:98:71:73:fa:cd:f5:
17:e0:2b:dd:16:b6:a9:d3:62:d6:a1:4a:f6:37:5f:
67:d4:11:55:ea:46:7a:2e:18:e5:ea:d7:ba:69:eb:
23:9d:60:5f:62:c5:56:72:8e:60:c6:68:e1:c6:ef:
7d:80:e2:83:a7:43:6d:6e:c5:fd:8d:ef:f9:1e:a2:
7c:64:5e:76:33:8f:15:55:f8:e0:43:8b:d8:99:50:
9c:31:3b:80:db:7f:94:62:34:f8:0d:d3:53:05:f1:
b5:59:38:36:15:4c:dc:6c:8d:d9:ff:74:bf:20:f3:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:FD:A5:F5:A4:AD:C9:E0:3A:19:38:19:50:C0:D9:B4:F5:79:68
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:7f1::/48
Signature Algorithm: sha256WithRSAEncryption
20:13:39:d8:3f:e4:5c:f4:4e:5f:50:87:77:31:aa:c4:67:8b:
0e:6d:5d:cc:bf:56:be:68:22:d9:00:6e:1a:b3:01:33:42:1f:
db:09:ca:2f:0d:de:09:97:5d:64:46:a5:47:68:15:cc:68:b3:
bc:63:8f:00:0a:85:0b:08:40:30:79:9c:4a:09:8f:e6:cf:96:
1b:30:c5:3c:cd:e4:92:7e:ce:82:cc:3b:98:68:27:f5:dc:6b:
bb:c0:29:3e:b9:eb:07:79:3f:27:99:39:27:5b:0c:29:ce:d8:
3e:e0:ad:c1:38:f9:4d:93:ea:a9:68:35:57:20:6e:96:60:b1:
c6:af:84:da:d1:bd:67:23:eb:53:c3:50:a1:e6:b2:b9:d6:c2:
10:7a:fe:84:37:3b:bc:ce:15:b7:34:aa:85:23:df:b8:46:78:
d7:a4:14:b5:bf:e0:a8:d1:8d:a1:e0:15:50:51:0f:3c:87:f2:
b8:1f:1a:58:b3:7f:0a:e8:64:5c:17:7e:19:21:b7:0a:de:45:
39:dd:f9:55:22:d5:e2:a1:00:29:d7:6b:4a:50:26:28:9c:0f:
f1:34:24:14:5f:98:c9:91:d6:e9:4b:3b:34:62:59:a3:6d:83:
fa:05:d1:d0:11:b5:39:68:da:27:20:2c:4e:83:6e:c7:2c:17:
df:4b:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 10:37:16 2024 by rpki-client on console-ams.rpki-client.org