Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234313a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a383234313a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: ZSoatjghM1xqUQtIIABG7iMUpJZxf7bBKosDlaXdV2I=
Subject key identifier: 48:BB:27:CE:5A:20:96:53:71:58:FB:18:7E:8D:AF:3F:9F:06:12:8A
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 59A0690A53FA5F51AF2874D0F1DF1DDF30BCFA8A
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234313a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:8241::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a0:69:0a:53:fa:5f:51:af:28:74:d0:f1:df:1d:df:30:bc:fa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=48BB27CE5A2096537158FB187E8DAF3F9F06128A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:e6:69:4e:47:fa:c4:d0:db:f4:f5:a0:4a:
e8:54:69:73:ea:12:80:c0:e9:8c:65:89:65:a4:d4:
b1:e5:4f:89:1e:70:94:d0:6b:1a:b6:2b:a9:1f:f9:
70:7b:d2:36:61:b9:2c:f9:88:60:cb:bc:a9:2b:4c:
c5:ff:fe:86:94:d7:34:c9:0c:6a:a6:14:bd:43:f0:
c6:9a:03:dc:74:36:42:7a:34:55:04:e6:86:dd:5f:
93:f6:bf:28:4d:c5:64:14:9a:8a:ee:e7:c9:73:58:
62:04:90:59:2d:a5:02:68:40:8c:e4:be:00:47:a3:
e2:36:16:15:32:95:a4:21:3b:1d:99:99:62:a9:57:
94:59:b9:61:22:f8:5a:02:be:29:30:a0:72:d8:e7:
63:39:b4:c8:58:b6:31:f7:01:98:13:cb:76:0c:1b:
c1:d9:a3:6f:b2:9d:23:bb:05:03:7f:dc:5e:2a:76:
fd:f7:69:88:0e:2e:ca:13:2c:a2:f8:77:39:87:64:
a3:6f:9d:06:fb:4d:c3:cc:e2:2a:36:70:8b:22:10:
02:fc:bb:1b:88:ff:82:17:5f:3a:99:66:f5:87:24:
30:8e:eb:83:a7:a6:b0:17:5f:3a:bc:96:08:22:fc:
cb:bc:9d:55:1b:73:08:91:c5:bf:6e:d5:37:3d:12:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:27:CE:5A:20:96:53:71:58:FB:18:7E:8D:AF:3F:9F:06:12:8A
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234313a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8241::/48
Signature Algorithm: sha256WithRSAEncryption
97:0c:37:7b:5a:66:2f:a9:7b:93:22:2b:e8:d0:d6:81:4e:4f:
bb:f1:dd:9e:dd:e4:59:76:f4:96:61:8e:bb:09:e8:b3:43:1c:
e6:2a:15:7a:67:41:6a:87:9a:ba:91:53:12:dd:bf:cb:d5:6f:
7c:c1:81:1b:6e:3c:a1:0f:2c:5d:a9:9c:f5:ef:c1:ad:61:10:
ad:c4:cc:8f:0a:2d:7a:6d:1b:06:7b:ee:f4:d9:2f:b5:80:1d:
75:c4:0e:23:f7:d5:ed:6e:b9:56:ec:87:e6:de:19:c7:ae:f4:
7e:55:34:12:f6:80:f2:39:2c:70:ff:c2:e3:c6:0b:b4:bc:8d:
6a:67:7d:4a:18:f3:82:1b:4b:bb:3a:1d:9c:75:58:cd:70:53:
59:93:f7:e2:1d:8d:e2:70:86:66:b8:50:4f:53:f5:07:1b:0c:
1c:60:4e:2a:32:07:6c:ae:3d:f1:64:8c:40:46:1f:71:78:2a:
7d:af:9c:af:b6:89:04:43:d7:63:ee:df:31:46:40:1b:ef:4a:
61:09:3d:f4:86:1c:e9:f4:21:14:9c:79:ee:3b:bd:96:e7:a3:
07:52:d5:13:75:50:bd:fa:65:5c:28:b3:05:71:7e:3d:9a:40:
d1:f8:27:ce:d4:21:f8:87:47:ab:43:43:67:ed:00:d8:8e:8e:
7c:31:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 11:22:34 2024 by rpki-client on console-ams.rpki-client.org