Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234323a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a383234323a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: C7jeax+gaRvN7+MB8iHHHcHaS5m2MS+I25HgA8+/yp0=
Subject key identifier: 78:2D:E6:30:06:BB:14:D5:F0:3B:16:04:E0:CB:3E:BF:09:1D:E8:88
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 06366B0CF42E9E7BC2ACE192DBA6A7EE7BCA4F64
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234323a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:04 +0000
ROA not before: Fri 13 Oct 2023 19:50:04 +0000
ROA not after: Fri 11 Oct 2024 19:55:04 +0000
asID: 205329
IP address blocks: 2a12:dd47:8242::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:36:6b:0c:f4:2e:9e:7b:c2:ac:e1:92:db:a6:a7:ee:7b:ca:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:04 2023 GMT
Not After : Oct 11 19:55:04 2024 GMT
Subject: CN=782DE63006BB14D5F03B1604E0CB3EBF091DE888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:f3:79:5b:09:a2:4a:7f:31:53:81:b8:78:
2b:aa:44:90:79:dd:e0:3b:8c:aa:ff:7b:f4:8f:9e:
16:28:fb:f9:ff:f5:dc:ec:42:99:2a:47:c9:e8:37:
b7:a7:57:0b:d2:21:c8:e7:aa:4d:e9:83:2f:be:7b:
cc:91:90:9d:30:8f:99:ca:8d:07:f7:96:b1:16:7f:
15:e7:b0:e3:7f:c6:40:eb:4c:1a:7d:2f:a9:e8:1f:
8f:30:39:c7:ef:d6:4b:78:c9:98:6d:06:c4:3e:18:
a2:9a:09:dd:cb:bd:a1:53:34:c0:d6:5b:8d:83:b0:
82:13:e2:ef:2d:d3:cb:2a:94:75:df:44:22:50:e7:
88:1c:16:b7:4c:89:2a:03:68:cd:b7:e1:84:24:8b:
16:9e:ab:07:c3:76:8b:74:35:b1:6e:33:7a:15:2c:
5f:1e:f7:16:0f:ec:ef:5f:92:4e:26:dd:fe:8b:4d:
57:94:c5:a9:ce:bb:c9:5e:f5:1e:61:99:b5:08:b3:
d3:02:bb:ec:a5:b5:e1:ab:e2:90:40:f1:6f:81:b0:
69:94:f7:90:b1:22:ec:6d:a8:25:d9:45:0a:c2:e4:
a9:0c:1f:c1:83:30:bd:19:16:f2:5e:96:c0:b5:19:
76:74:c2:85:72:69:88:0f:0f:f9:f8:71:fe:3c:ee:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:E6:30:06:BB:14:D5:F0:3B:16:04:E0:CB:3E:BF:09:1D:E8:88
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234323a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8242::/48
Signature Algorithm: sha256WithRSAEncryption
ce:00:81:ee:08:47:c7:1b:89:30:c8:09:7c:6d:cd:9d:7b:f3:
37:56:f2:a6:2f:c5:b4:76:2c:3b:d6:99:d4:49:e1:b9:0a:fa:
f2:04:5c:ac:04:d5:3d:fc:29:ad:bf:6a:e5:b7:01:89:4d:00:
f4:f2:ff:0a:9c:90:be:b1:c7:41:5b:60:09:8e:69:cd:50:55:
1f:5e:be:2b:42:77:13:27:f2:7d:21:77:62:b2:e2:63:4b:7c:
8b:8a:e2:2e:3b:c4:dd:4e:17:e9:4f:8e:53:c6:a8:0f:22:0b:
09:3f:41:2b:b1:18:00:cd:3e:17:fa:36:a8:10:db:30:b2:2f:
5f:62:86:9c:06:d1:00:23:fd:e2:f4:30:2c:2f:21:d6:db:e4:
28:ad:fd:f0:2d:99:aa:f8:24:bf:7e:6f:15:18:e9:40:fc:0b:
a1:f1:d2:e1:d0:55:c6:1e:b7:6c:c9:7a:e4:7c:81:98:c4:6a:
57:1a:31:d1:bf:10:a6:06:de:60:a4:a5:d6:7e:75:30:55:6b:
98:1c:bb:26:18:df:77:35:96:00:75:a6:f8:fa:be:a8:30:30:
72:f2:db:04:06:53:d8:bc:ce:e8:0e:fe:c1:c7:70:b9:63:a0:
40:fb:4d:11:43:49:24:d1:0f:81:03:15:c2:62:ea:11:bb:67:
ef:30:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 11:22:34 2024 by rpki-client on console-ams.rpki-client.org