Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier: SdhJcvipeQfjMaTvy5ZX0PnmSZVYWlkH85IrSwFwiQ0=
Subject key identifier: B6:94:B8:A8:2E:A6:37:03:94:54:B8:89:1E:8C:3D:61:A1:F9:93:55
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 62C5A7857B793AA537341C115D336DA896CF15CC
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
Signing time: Sat 25 Nov 2023 07:50:58 +0000
ROA not before: Sat 25 Nov 2023 07:45:58 +0000
ROA not after: Sat 23 Nov 2024 07:50:58 +0000
asID: 203635
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c5:a7:85:7b:79:3a:a5:37:34:1c:11:5d:33:6d:a8:96:cf:15:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:45:58 2023 GMT
Not After : Nov 23 07:50:58 2024 GMT
Subject: CN=B694B8A82EA637039454B8891E8C3D61A1F99355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:72:32:73:13:ae:dd:2b:b4:5a:1f:28:84:
eb:e8:3e:7a:35:5b:01:5a:63:72:92:60:5d:51:7c:
01:1b:c1:72:ba:dd:dc:e2:e0:de:2a:78:4c:fd:32:
2b:08:3c:45:77:d3:06:c1:18:2a:27:34:39:3d:94:
ee:d9:f9:c2:e0:6b:58:84:b6:74:d2:cc:3b:16:bb:
a3:cf:93:b8:e2:9c:74:f9:31:af:ae:b2:6c:f7:e0:
8f:0c:c9:81:ac:65:89:68:5f:d0:5d:35:46:3f:15:
7b:fc:b2:9c:71:f8:48:0b:0c:4c:63:8a:da:a6:1b:
a9:36:82:f7:55:61:c3:ae:50:ba:13:1b:68:3e:c7:
10:49:d4:77:b1:99:b3:87:42:b6:02:e7:12:2d:f3:
60:2d:6a:e0:b8:24:4a:3c:d0:60:26:a3:54:d7:05:
07:15:cb:84:b9:f9:eb:8b:25:83:4e:c6:7d:83:d4:
d8:05:d6:bd:eb:82:0a:5c:8e:3c:89:2d:66:a1:fc:
75:a0:59:9f:4e:c3:51:57:b8:0f:a5:e4:23:89:1f:
26:93:51:50:d6:b7:d6:4b:79:16:44:f5:52:d2:7d:
ee:95:9f:ec:04:4b:13:07:91:62:34:7e:6d:2e:d0:
51:5f:0c:f1:de:16:a2:ce:c0:d4:64:5d:0b:24:94:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:B8:A8:2E:A6:37:03:94:54:B8:89:1E:8C:3D:61:A1:F9:93:55
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323033363335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
7d:e6:4c:e5:31:4d:10:b0:9f:d1:26:09:99:e8:1a:31:6e:37:
19:6f:13:64:a0:0c:28:c0:d5:38:9c:be:56:3e:fc:4d:b8:73:
7d:2e:4b:23:84:7c:10:e6:a7:e6:35:95:68:5c:b2:4e:48:74:
58:99:ea:06:db:d3:3c:83:bd:b6:2a:54:98:ab:b5:c4:5e:34:
ed:e1:70:7e:44:4b:ad:1e:b0:61:9a:b4:8b:4a:3c:92:24:0b:
ab:b8:af:b6:49:76:60:c5:ad:85:97:8f:c8:42:56:9a:bc:38:
bb:af:29:29:c6:ec:53:94:da:ee:f6:93:85:a5:65:af:2b:72:
a3:df:8b:38:24:45:57:68:48:a1:34:76:ca:c0:25:0a:a4:37:
96:98:b5:9a:0f:fd:be:95:30:e1:4c:67:81:6a:cf:2c:6d:d4:
2b:aa:3d:0e:e5:e5:e0:6c:32:bf:a1:c1:e6:83:d2:4c:d9:cc:
02:11:1b:3e:47:5a:04:64:c0:cf:9c:78:09:60:b5:93:3d:f0:
d0:5b:e9:77:1a:6d:1c:1f:03:5a:0c:4d:aa:2a:97:58:2f:17:
18:fa:cb:44:35:e1:c7:c3:46:33:b9:04:bf:34:a1:0c:32:cc:
2f:1a:64:59:13:e7:b2:de:0a:11:1d:6c:b9:6d:85:1e:84:65:
5b:06:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:47 2025 by rpki-client