Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234333a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a383234333a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: w72jphfrQ8BgRfIApbCb1IFD4yAerSufaxtGhYozwIY=
Subject key identifier: BD:AE:7D:03:1B:34:EF:D8:F6:BD:84:32:67:98:A4:8E:8D:94:75:D4
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 15D720640AB67D06456B374BB0E080FC6B01D2D2
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234333a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:8243::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d7:20:64:0a:b6:7d:06:45:6b:37:4b:b0:e0:80:fc:6b:01:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=BDAE7D031B34EFD8F6BD84326798A48E8D9475D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f8:35:ba:56:46:24:76:ae:e9:6e:d7:42:5b:
fe:90:be:bf:01:66:06:43:06:54:a1:8f:8a:c9:a8:
01:f5:51:c2:7a:a7:7a:da:5a:f3:3b:f5:3c:9d:91:
ea:33:17:67:08:3a:e6:37:d9:52:a1:1d:bc:ea:17:
73:8f:a7:c1:54:45:65:e6:7e:e8:f2:8c:9f:c4:d7:
5c:65:41:19:6e:d1:06:7f:d9:1c:63:7f:fc:d0:d9:
5c:49:9d:5c:48:93:ae:c2:a6:e1:6f:2a:78:6c:3c:
2a:24:84:ff:98:f8:66:40:18:e6:80:fd:c6:e8:7e:
05:cb:7c:03:4d:b9:c4:23:fb:39:7c:75:bd:a0:0f:
9b:db:a2:26:d8:d1:3f:5a:53:32:c5:7f:f5:ee:24:
f1:3b:37:df:4e:c7:db:71:68:03:1d:39:10:fc:7f:
ff:15:19:dd:bb:42:1a:ac:26:66:33:9a:1e:4b:f7:
bd:aa:cb:da:16:36:6a:65:19:89:cd:f6:8c:a8:69:
96:d2:3c:88:2c:32:f3:53:ae:67:fa:48:36:b8:ba:
7f:57:de:36:eb:46:10:dc:6c:32:0e:1c:01:36:01:
64:26:7b:65:51:dd:70:15:32:e8:8e:d8:32:32:81:
43:cc:fb:91:2f:54:37:13:b6:5a:e6:83:8c:2f:b2:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:7D:03:1B:34:EF:D8:F6:BD:84:32:67:98:A4:8E:8D:94:75:D4
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234333a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8243::/48
Signature Algorithm: sha256WithRSAEncryption
46:0d:4e:af:ba:7e:68:53:62:96:c9:ca:f6:70:d0:a6:c4:50:
5d:c3:e1:c0:10:d5:6b:54:7b:99:c1:2e:5a:98:77:a0:bc:d5:
1b:02:f5:8a:e9:a7:09:ab:6e:42:2f:ff:c9:6c:37:3e:3f:4d:
64:3a:c8:c7:c8:74:c5:a7:6c:62:7a:71:c0:bd:34:5d:bd:3c:
01:60:d4:e9:9e:9f:53:59:ab:96:05:b9:5d:4d:87:9e:ae:8a:
48:98:f5:9a:67:3a:3d:55:49:6c:26:b7:c9:e5:d3:f2:a1:ff:
d3:c0:fd:1c:88:c3:50:0e:b3:ff:75:d6:ff:70:ac:2b:00:45:
14:24:21:28:10:00:3b:92:0a:45:0e:8d:5f:41:78:66:32:94:
4a:1e:02:75:88:96:d8:b1:93:fd:70:66:57:20:4f:fa:d6:97:
41:47:e3:27:4f:79:58:39:4d:80:97:36:b6:cf:11:39:21:e8:
7e:67:26:f4:91:77:8f:09:cc:7e:b1:e9:bc:be:76:b3:fb:a5:
d3:58:3c:b9:e9:aa:8f:38:f9:21:6c:6e:e9:d2:71:4f:32:31:
c2:43:6d:48:ee:06:e9:e3:24:f3:68:86:5f:8c:0e:c7:3c:56:
11:c7:80:b5:0c:9f:a0:d1:6c:93:42:53:a0:89:b7:90:57:22:
e0:9d:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:18:39 2025 by rpki-client