Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier: 4qMInNqtjAYIJ1DbY1o38cWQcRkqW0VyA7LIGScBu20=
Subject key identifier: 65:25:F6:8A:68:33:A9:B0:3E:5D:9D:60:4A:45:D4:E2:88:74:91:F0
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 20D0B1ABCB7536FE6AB24FA0753CE93A855B0BCD
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
Signing time: Sat 25 Nov 2023 07:30:56 +0000
ROA not before: Sat 25 Nov 2023 07:25:56 +0000
ROA not after: Sat 23 Nov 2024 07:30:56 +0000
asID: 212934
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d0:b1:ab:cb:75:36:fe:6a:b2:4f:a0:75:3c:e9:3a:85:5b:0b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:25:56 2023 GMT
Not After : Nov 23 07:30:56 2024 GMT
Subject: CN=6525F68A6833A9B03E5D9D604A45D4E2887491F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:7a:af:1e:d4:95:8e:d1:d2:91:a4:cf:70:
c6:e5:e3:5a:dd:5c:04:c2:1c:47:75:a9:05:9d:0d:
06:5d:19:f3:59:cc:f2:7f:dc:06:33:90:b5:34:f9:
de:a9:4b:b4:d5:98:3f:1d:9c:41:e1:13:06:f1:bb:
a8:fa:7b:ca:8d:34:ba:32:0e:90:b3:74:1a:6b:14:
65:49:3f:80:36:5b:7f:ef:d5:87:86:45:66:42:2f:
e5:e9:c2:9d:db:f9:6b:2f:4b:1e:2f:6e:8b:62:30:
f5:c3:89:00:d0:5d:ec:f3:54:27:36:89:f1:0d:64:
2d:ec:e8:ec:9b:5e:92:ed:e1:03:ae:6d:af:29:8e:
b8:00:0c:93:ef:dc:cf:59:eb:34:4c:fe:25:16:52:
41:c4:dc:50:2b:e4:61:f7:0f:ec:5a:ee:50:2a:b8:
ad:5a:eb:44:29:0d:a4:c0:1d:15:8a:02:08:b3:ab:
a0:e5:dc:90:fa:28:39:96:2d:5e:91:d8:05:b0:f8:
f6:67:9f:dc:dc:f5:30:b4:12:4e:41:a7:86:59:28:
67:49:df:b6:fc:22:c5:16:24:56:bd:58:ac:1d:46:
4f:8e:13:f0:c5:1c:f2:dc:bf:03:6d:b0:6e:1d:60:
48:f8:b1:10:59:09:aa:b8:0e:ea:6e:79:7e:de:55:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:F6:8A:68:33:A9:B0:3E:5D:9D:60:4A:45:D4:E2:88:74:91:F0
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323132393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
88:bc:7c:d5:63:fc:83:7a:b6:09:12:f0:9d:de:47:e1:c6:c4:
c7:d2:e2:ac:c2:b7:b7:ab:2b:75:e6:57:a3:4b:ad:da:2c:71:
32:fb:7e:be:aa:c6:43:f3:72:1a:cf:c0:9d:ff:30:db:b6:eb:
97:36:17:0b:f1:af:52:9b:f1:f3:a6:3a:96:62:6d:57:0b:21:
bd:c5:66:e3:b2:1d:b7:37:63:e1:53:00:4e:08:3e:d9:87:62:
7e:2b:82:1a:7b:59:8e:58:d3:26:a7:74:a1:67:9a:2d:58:ee:
76:a7:af:d4:b2:42:35:cf:d6:dc:73:ec:e0:13:6c:dd:7f:7b:
41:e0:0a:f2:14:92:af:cb:cd:98:0f:a7:38:66:7c:79:32:5b:
8d:16:2d:2a:bc:bf:b8:14:08:c4:2d:d0:8f:e0:2a:4a:5d:58:
5f:93:e2:81:41:12:55:10:ad:02:01:9c:e0:61:96:51:8c:1f:
2d:e8:57:ef:8b:6a:62:c8:7d:e8:bd:1e:c4:7c:a6:aa:31:24:
2b:05:3f:a9:7c:5a:b1:b2:f6:46:fb:ab:a1:c2:64:dd:bf:46:
f5:e4:ef:31:76:4d:a8:ed:40:26:8d:40:a8:14:61:99:5c:af:
2f:41:f2:db:68:a7:45:ac:ae:58:89:91:a0:d9:32:43:77:e4:
2a:5b:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:19 2025 by rpki-client