Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3430203d3e203437323732.roa
File: 326130613a363034343a3130303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: 3R6UAXplhVEwmfDu6emyOCYzRir4RlzyD7HrJfFMO+8=
Subject key identifier: 76:74:38:B4:3B:C5:90:BF:B8:5D:88:E8:0C:6F:E5:E6:A4:D3:94:86
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 0BB7146A8765C352347935F6AE7072168D7FAA50
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3430203d3e203437323732.roa
Signing time: Sat 25 Nov 2023 07:30:56 +0000
ROA not before: Sat 25 Nov 2023 07:25:56 +0000
ROA not after: Sat 23 Nov 2024 07:30:56 +0000
asID: 47272
IP address blocks: 2a0a:6044:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b7:14:6a:87:65:c3:52:34:79:35:f6:ae:70:72:16:8d:7f:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:25:56 2023 GMT
Not After : Nov 23 07:30:56 2024 GMT
Subject: CN=767438B43BC590BFB85D88E80C6FE5E6A4D39486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:9b:5f:62:aa:68:05:57:b6:8a:3d:fb:09:
08:7d:fa:72:eb:a3:d2:b5:56:ae:04:78:9c:19:d4:
c6:5f:d7:a0:0f:44:67:e5:8a:bf:62:2f:95:94:cc:
da:84:b5:b4:95:6c:12:7a:e5:40:19:fb:f6:0c:85:
97:1d:83:45:91:89:cc:a2:1e:a2:02:ce:7d:d7:87:
ae:99:11:90:51:28:52:14:70:b7:97:ff:7e:39:d9:
f2:19:34:28:a7:42:88:a0:6e:1f:5c:f8:e9:0f:38:
03:be:19:0c:95:89:43:a2:e0:c1:ec:3b:8c:a6:43:
20:64:a5:95:27:4f:b5:31:58:5e:4e:9a:d9:93:0b:
7a:c9:51:1e:a1:a5:8e:81:49:f2:6f:bb:88:62:e7:
6c:c7:90:fb:ec:f0:3d:07:fd:f6:38:a8:b4:3a:55:
11:91:10:a7:62:1d:60:dc:71:98:88:78:9a:b7:e7:
e6:c4:3a:b6:48:b5:dc:37:42:e5:1c:48:3e:69:fb:
d0:89:bb:49:32:95:2d:a4:fd:68:7a:f9:04:97:fe:
80:69:04:f9:84:a5:3a:dd:41:7d:a6:35:ce:13:56:
b5:37:39:db:00:7c:27:83:9d:ac:81:76:aa:c6:8b:
52:b2:96:d2:dc:5d:d0:b8:a3:93:c7:25:33:e6:5e:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:74:38:B4:3B:C5:90:BF:B8:5D:88:E8:0C:6F:E5:E6:A4:D3:94:86
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3130303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:100::/40
Signature Algorithm: sha256WithRSAEncryption
45:9c:15:97:b8:ca:fc:01:5d:f1:9e:c0:46:87:c0:b5:74:12:
b0:70:22:90:ee:37:3f:ac:ad:18:b7:16:d7:f9:53:61:0b:46:
33:fb:ce:01:2e:78:09:99:26:1e:e9:01:5e:05:b2:3f:1e:1e:
64:a5:bf:cb:fa:50:7f:87:3d:39:00:a0:35:75:1c:64:2e:df:
c6:0a:b7:57:7c:ea:c6:b7:b3:b9:e8:6f:e4:a3:99:bf:5d:be:
4d:8f:0d:9c:93:1a:54:87:4c:69:9f:cf:fd:cc:69:c1:75:d9:
95:87:95:f7:9b:3a:de:f5:14:92:18:74:47:6a:91:2e:c9:1f:
70:f0:25:27:06:fa:9d:ba:65:0d:68:f1:24:3b:28:15:81:7f:
2b:4a:d7:cb:c8:e1:32:ad:c8:9d:e5:53:fa:52:95:e2:23:ac:
d3:0f:e2:61:50:68:4c:31:89:4d:56:66:3c:d4:1a:db:b9:f1:
f6:e1:cc:24:59:99:d9:e6:72:eb:9d:b0:30:7b:9f:ae:38:cd:
19:58:7d:c2:f2:31:2d:7d:ce:1c:e7:52:e3:6b:b4:c2:91:ee:
85:4a:b1:4a:3c:3b:8f:1a:5f:d9:a6:a1:c6:31:3b:6d:0e:0d:
17:08:a8:87:4e:72:68:ff:35:2d:a1:fb:33:7d:92:6e:38:72:
3d:14:5e:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:36 2025 by rpki-client