Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234373a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a383234373a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: BkrmHBjkDHw1jI8tpbnj8PsJ5/2+RKfB0yuP1a3AQhk=
Subject key identifier: 57:4C:71:F4:C1:88:80:B9:38:96:2C:E6:76:22:7B:B4:49:F2:21:62
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 60C230DDC09F94EDA1C46A30D45D141E9428E3EF
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234373a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:8247::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c2:30:dd:c0:9f:94:ed:a1:c4:6a:30:d4:5d:14:1e:94:28:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=574C71F4C18880B938962CE676227BB449F22162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:48:08:a6:c9:34:c4:95:1a:77:a3:9d:36:
7b:2a:12:57:4a:b1:a3:e1:81:24:72:fe:ab:b4:67:
2d:02:01:56:94:98:42:af:08:24:73:12:97:c5:2b:
f2:17:22:3d:46:9d:62:8b:16:f7:a9:14:b3:b2:67:
25:27:0c:38:18:a9:5d:5f:6d:7c:a9:d8:e5:5e:a6:
7b:5a:86:7b:c9:0f:56:f2:e4:c9:2c:e8:7d:d8:9d:
26:ff:d4:f7:d6:70:e4:e1:d2:f0:e8:cc:01:6d:3f:
e7:32:e6:25:7b:30:7c:75:ec:2e:44:7a:52:3a:d9:
3a:80:c8:a3:c5:23:6d:ec:3c:09:e2:72:63:6c:9b:
ff:03:dc:f2:db:30:1f:ef:44:44:02:bf:27:3a:1d:
14:0f:0a:35:2f:9e:34:d7:4b:79:df:04:91:9f:d5:
ef:22:14:90:87:e3:a5:7f:66:d0:b7:64:46:66:53:
d4:bf:84:d8:90:5b:d2:8e:02:58:3f:2f:71:ce:26:
5c:42:f7:a0:ce:6c:e9:d0:a3:17:27:45:e2:e4:03:
fe:a7:c3:c7:08:97:80:02:21:32:20:22:9c:3f:76:
09:0b:46:39:6e:6d:c4:19:9a:0e:b4:dc:94:dc:38:
a8:65:2a:5f:54:4c:72:de:54:00:f4:45:68:97:2b:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:71:F4:C1:88:80:B9:38:96:2C:E6:76:22:7B:B4:49:F2:21:62
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383234373a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8247::/48
Signature Algorithm: sha256WithRSAEncryption
a5:4d:3b:c6:a4:25:c4:42:ba:57:51:9d:37:08:03:98:d3:89:
0c:e2:0c:83:88:dd:86:c0:3e:78:9d:b5:4b:dc:02:f9:d8:1d:
d2:1e:bc:3d:75:94:74:02:ee:08:33:76:ee:ab:c3:54:65:31:
8b:be:0a:7b:ab:7b:c9:8c:45:8c:f9:3c:27:4e:24:3a:31:2f:
96:0e:83:95:7e:71:31:45:a4:b1:ca:82:7e:c6:31:69:ee:5d:
7a:f8:6e:d3:ba:84:f9:ac:1f:25:28:ed:84:e9:b2:15:5f:99:
5c:56:f0:d5:d1:8f:d7:4f:54:f9:44:e0:25:03:da:23:ad:67:
28:7f:a7:79:10:27:0c:6d:fc:e8:89:b2:58:c8:39:a6:85:f7:
eb:b9:77:2d:6b:d4:f4:03:bd:36:1b:95:15:1a:97:92:ae:39:
09:71:17:4d:c0:e0:41:10:5a:b6:ab:c1:fd:aa:e7:ec:41:c8:
dc:86:50:f4:19:41:09:72:b0:44:da:0b:dd:e5:42:7f:18:6f:
57:7b:62:c3:83:3a:f8:7c:85:2a:22:87:3a:f0:fd:a4:27:18:
bc:ae:d5:36:81:13:94:0f:26:3c:41:cd:77:6f:08:7e:6e:a9:
c1:4a:f7:c6:70:6f:77:40:d7:a2:f0:3f:da:93:cc:8d:07:43:
33:af:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 11:22:34 2024 by rpki-client on console-ams.rpki-client.org