Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa (raw, json)
Hash identifier: iQZ62f4KoyszZwqyu/XSC6pgx303iNt7UjsBQQOf1l4=
Subject key identifier: 5C:39:46:D4:B5:33:E4:20:4E:18:EB:C8:DA:AB:EE:AE:CF:1D:D0:6A
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 6ED664A6659CB37A2554E4D3F6370DEA71D6B2EA
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa
Signing time: Sat 25 Nov 2023 07:30:57 +0000
ROA not before: Sat 25 Nov 2023 07:25:57 +0000
ROA not after: Sat 23 Nov 2024 07:30:57 +0000
asID: 49975
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d6:64:a6:65:9c:b3:7a:25:54:e4:d3:f6:37:0d:ea:71:d6:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:25:57 2023 GMT
Not After : Nov 23 07:30:57 2024 GMT
Subject: CN=5C3946D4B533E4204E18EBC8DAABEEAECF1DD06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:fa:73:0d:c3:f5:dd:94:5e:45:03:fd:15:
f0:a1:3d:27:ef:c3:63:97:4b:c0:fb:74:7e:89:a1:
8d:6c:dc:b4:d7:48:cc:ec:da:d9:2d:8a:b8:ae:d1:
ba:de:49:24:47:b4:cc:bb:b6:93:59:88:56:9a:40:
7f:bb:40:24:f6:70:30:73:88:f3:a1:81:ca:39:48:
35:e4:e3:d4:87:cc:f0:2d:2e:66:a8:97:54:15:fa:
7a:11:93:70:28:41:0b:1a:03:e6:b0:43:39:94:07:
10:4e:d3:95:76:5e:98:37:6c:0e:46:95:c5:f6:6a:
f1:f9:64:2d:9a:a2:66:f7:ef:ed:f3:ec:64:1a:33:
10:ba:e3:ba:c1:65:ff:99:4e:8e:99:fe:ca:0a:96:
a2:82:53:d6:f5:72:d7:96:f3:20:f9:1a:dd:50:8c:
f2:bd:81:f8:4c:42:d1:51:36:e8:6b:b0:15:6b:bd:
04:d4:79:d1:ae:b4:c6:88:f1:fe:02:99:0b:1a:14:
42:a5:95:f2:d6:f1:d2:70:bb:58:53:e9:eb:29:8d:
d1:6a:68:d5:9a:79:ea:45:95:5c:c7:5b:4a:ac:c4:
84:b2:3e:7d:7d:74:f0:bd:a7:f6:80:49:9b:ba:02:
15:99:34:f4:15:4f:ff:53:cc:22:15:fc:b6:13:68:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:46:D4:B5:33:E4:20:4E:18:EB:C8:DA:AB:EE:AE:CF:1D:D0:6A
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e203439393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
81:38:43:18:9c:4f:76:7d:34:83:5f:6e:b6:fd:ec:66:1c:bc:
87:23:c8:46:7d:73:22:c3:03:d1:d8:b4:29:2a:e5:35:1b:7d:
0c:11:e4:ad:9c:ae:b7:2e:be:36:98:1b:d9:19:a8:f2:58:a4:
2e:d4:00:07:22:0d:f1:e2:fb:f7:16:8c:3e:5b:53:60:a3:43:
ec:c8:55:2f:81:63:5a:ed:20:27:9a:58:6c:9e:fe:57:c0:c3:
a6:78:96:5d:29:c3:47:e0:59:c2:71:41:49:45:35:86:3e:d9:
f7:f6:12:1e:1b:f8:af:e5:8d:e7:e1:14:36:1c:5b:e3:41:1f:
28:51:61:53:dd:9a:b5:1e:75:9f:93:4d:58:ab:7e:ea:72:6d:
0d:3b:af:2d:89:19:79:c8:49:0b:6a:87:44:cf:c9:70:8b:13:
a6:40:9f:29:e3:39:87:56:80:6c:29:20:9f:3a:07:a6:14:db:
66:8c:46:b6:e6:d8:c4:78:79:11:17:4e:1a:4e:7a:5a:6b:36:
69:00:be:29:99:b4:2b:1a:a8:45:54:1e:20:a4:64:d3:c2:82:
ad:8b:db:30:fa:74:ca:e1:e4:53:9a:67:c7:99:b3:81:f7:c2:
d9:f8:b6:ce:d1:00:d2:88:23:09:f4:3e:77:63:b1:37:43:61:
0a:28:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:32 2025 by rpki-client