Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234363a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a383234363a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: LnGaBl6vCYMwQ9Sj8sA81VaYUsOHExnnd9kwyrMdjeo=
Subject key identifier: 5B:0F:40:85:67:B0:C8:4C:8A:55:E7:00:04:B6:A8:68:98:E5:B2:B0
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 6EB514A8870F1A97E404699E7E2AEBF6BD45BD41
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234363a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:8246::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b5:14:a8:87:0f:1a:97:e4:04:69:9e:7e:2a:eb:f6:bd:45:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=5B0F408567B0C84C8A55E70004B6A86898E5B2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:25:e0:ec:7a:10:a9:68:ad:3f:3c:74:c4:
ee:c2:17:ca:49:a9:9a:8b:e0:7f:5c:86:05:eb:fb:
84:8d:23:12:64:e4:2c:7e:d4:f7:38:35:3b:ba:48:
a3:0e:bb:d6:f8:6c:ad:6b:70:ef:34:4d:19:97:a8:
68:2a:78:6f:51:3e:16:9b:1b:5f:ef:ca:83:19:9b:
62:a1:79:79:a1:7d:51:e3:08:f1:96:05:0b:f7:04:
07:75:53:23:f0:8a:5c:76:1d:03:17:1d:96:25:d7:
30:43:64:c5:d9:35:5c:8b:fd:53:df:34:e6:ba:b5:
df:cf:14:16:91:2c:c5:3e:0c:93:48:81:2e:0e:83:
bf:ed:dd:81:07:ab:ef:f6:28:e8:1b:c5:2d:7a:bb:
83:14:77:45:70:25:6b:70:6f:03:da:0f:e2:fb:ec:
c2:63:ae:b2:27:1c:f5:bd:af:1f:ac:20:c0:26:a6:
8b:d2:58:a1:aa:ea:06:bd:55:c5:0a:5f:8d:87:e8:
46:66:10:d8:ef:82:63:7d:26:68:4e:93:f5:14:b2:
62:bb:c6:af:a2:80:b2:71:57:1f:7d:a9:1a:95:d8:
75:91:ca:56:88:1c:bb:fd:0d:3a:2a:a3:b4:64:c7:
68:ff:f2:33:a9:58:93:a6:e7:df:0a:0f:02:49:72:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:40:85:67:B0:C8:4C:8A:55:E7:00:04:B6:A8:68:98:E5:B2:B0
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234363a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8246::/48
Signature Algorithm: sha256WithRSAEncryption
bd:33:b0:8e:98:dc:39:6a:ad:2b:a9:29:4f:22:db:f4:df:0c:
8e:53:c4:a7:29:af:90:36:3f:8f:22:cf:7d:a3:2d:99:89:e0:
fb:87:91:00:97:fd:d1:55:67:72:41:5c:99:9f:fb:87:82:32:
9c:18:ab:21:26:9a:b5:3c:ff:8c:6f:bf:59:75:c7:42:7d:7c:
d8:62:c3:68:00:9b:cd:09:6f:bf:46:71:04:a3:4f:a7:97:2d:
08:95:5f:7b:7e:19:aa:ff:af:15:6e:f9:f4:a4:6a:a5:04:cc:
7f:4c:b3:df:a8:a4:23:1e:27:6a:c0:df:79:e8:ce:13:0e:09:
a2:92:f4:66:68:2b:b6:3f:c0:d1:5d:28:e4:f8:bf:b0:b1:0a:
e7:85:38:c0:de:59:e3:90:a4:72:21:38:8d:70:df:ce:0d:84:
ad:24:58:38:38:35:04:b2:14:68:6d:e0:7a:98:3d:2c:3d:df:
00:16:4d:e8:0f:fa:28:c3:b1:d9:8b:08:26:8c:8e:0e:7c:cc:
e5:1b:69:36:03:6d:30:ed:23:6f:58:c6:77:b4:e8:7e:ee:52:
be:df:3e:89:c7:b4:db:32:ff:be:08:a5:2b:e6:b6:42:d6:e7:
5c:6b:46:3d:ec:a1:ee:d1:64:69:87:3a:a2:e1:f2:e6:3f:90:
01:73:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 10:32:24 2024 by rpki-client on console-fra.rpki-client.org