Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa
File: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (raw, json)
Hash identifier: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=
Subject key identifier: 3D:BB:56:6A:A6:B5:CD:12:85:2E:C5:47:6F:BD:95:70:E3:3A:D6:9D
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 6E2DA0520A079DDA6302D0AE731839EC239D0BDD
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa
Signing time: Thu 01 Aug 2024 00:33:17 +0000
ROA not before: Thu 01 Aug 2024 00:28:17 +0000
ROA not after: Thu 31 Jul 2025 00:33:17 +0000
asID: 215242
IP address blocks: 2a0f:85c1:7f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2d:a0:52:0a:07:9d:da:63:02:d0:ae:73:18:39:ec:23:9d:0b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Aug 1 00:28:17 2024 GMT
Not After : Jul 31 00:33:17 2025 GMT
Subject: CN=3DBB566AA6B5CD12852EC5476FBD9570E33AD69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:c6:37:06:b1:5a:8b:c1:b4:b1:f4:29:7e:
a4:c7:50:4d:69:10:56:26:14:2f:60:5a:a4:eb:60:
68:e6:9e:38:dd:c8:42:9c:06:69:a4:62:b6:aa:7d:
fc:1f:3f:5f:41:a4:6d:fc:08:fa:4f:9e:a2:bf:e7:
53:99:b9:fe:a7:be:85:2a:e9:66:d1:d9:09:c1:3e:
05:3c:0c:d7:7e:af:ac:a0:9b:8b:40:5b:d4:81:1f:
d4:8d:78:c0:43:d4:cf:b4:b9:2b:26:66:b2:61:b9:
de:4f:04:9b:79:4c:65:b6:a8:4e:46:70:ee:b5:06:
ba:b9:90:1b:18:c6:19:12:b4:3e:3b:a9:b9:06:15:
df:64:43:34:00:8a:c4:e6:f4:3d:89:4d:8f:a0:c5:
93:53:4d:1a:9e:a1:fb:2f:bd:69:cb:c0:ef:23:39:
79:87:34:9f:50:29:f4:f7:b6:12:82:8c:56:c6:a7:
ae:20:0f:92:01:73:63:0b:1e:4d:60:c0:50:2e:05:
76:48:b5:56:04:21:f5:6c:b1:58:36:44:80:d7:67:
c1:6b:08:e5:2b:be:b6:98:e4:38:aa:43:3f:47:57:
c5:69:36:ed:60:b7:55:59:ac:bc:93:51:02:fb:9d:
59:c9:a8:e1:34:34:0b:90:88:dc:54:3f:3f:4b:a2:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:56:6A:A6:B5:CD:12:85:2E:C5:47:6F:BD:95:70:E3:3A:D6:9D
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:7f4::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a4:3a:57:00:2f:42:b1:fc:fc:9f:8f:89:dc:c4:cc:ed:97:
26:d5:75:f3:e8:45:3d:ec:4c:4a:cf:41:d1:f0:f6:ab:fb:e1:
fd:47:2a:26:86:79:55:f7:1e:96:4c:f5:5d:13:89:a6:9b:8e:
c4:93:28:6d:d6:57:dc:fc:b5:22:53:e5:ec:57:21:df:66:d8:
cd:78:92:ff:7b:89:12:b8:0f:be:5b:6f:6b:23:d8:54:0f:f1:
52:0c:52:7d:35:d5:b2:af:11:02:48:4f:a3:17:5a:f5:f3:27:
95:4c:c6:94:39:64:4f:c4:02:a3:5c:98:f8:8c:ca:a0:fe:10:
6a:df:3a:c8:d7:57:24:c6:d9:ff:8c:ed:55:8c:9c:2f:ea:16:
20:f2:bd:c2:e5:e5:b6:51:ab:ec:c7:37:3c:39:88:f4:9d:b3:
9c:b7:b2:05:89:04:cb:d0:b4:5c:7c:3f:6f:57:a3:59:df:74:
7f:c8:ad:1a:f1:2c:41:f2:4e:ca:3b:0a:b9:95:0b:a4:c0:3f:
d8:bd:31:c4:0e:1f:a9:01:92:c9:4f:0d:ae:1b:02:5e:51:a2:
db:05:60:23:31:cf:11:7d:9d:0f:fe:76:b4:ae:87:0f:b3:f6:
b9:11:0a:01:ee:ac:1e:d7:3b:16:06:b4:18:1e:01:61:d0:3f:
a6:83:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:01 2024 by rpki-client on console-ams.rpki-client.org