Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
File: 326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa (raw, json)
Hash identifier: zA3uCGIBAga+UBmCbQKaK3lPXC0dRZM0wP2qQpG3Fv4=
Subject key identifier: 10:D9:FD:62:C5:8D:31:F9:D5:90:A9:35:3C:86:55:E1:DD:C4:A9:C0
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 22400C36E6714E2FD81909EDC43E255B64D948A0
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
Signing time: Fri 13 Oct 2023 19:55:04 +0000
ROA not before: Fri 13 Oct 2023 19:50:04 +0000
ROA not after: Fri 11 Oct 2024 19:55:04 +0000
asID: 202881
IP address blocks: 2a12:dd47:8250::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:40:0c:36:e6:71:4e:2f:d8:19:09:ed:c4:3e:25:5b:64:d9:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:04 2023 GMT
Not After : Oct 11 19:55:04 2024 GMT
Subject: CN=10D9FD62C58D31F9D590A9353C8655E1DDC4A9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:1a:ff:80:84:df:dc:72:0f:49:5e:e2:1a:
ee:83:38:85:dc:6c:a8:91:ec:42:ee:a9:e7:9b:e1:
cb:93:00:f3:c7:f5:e6:1f:bb:75:53:fa:28:03:d5:
13:42:80:fc:03:ad:2a:18:22:3b:34:d2:03:2b:fc:
99:64:cd:7b:70:cf:9b:2c:e5:f5:ea:22:9a:69:b5:
cf:55:ce:11:45:4e:ee:71:a5:d0:54:72:8d:50:95:
6a:75:17:e2:77:60:1e:a6:4b:42:1b:d2:f1:05:e9:
60:f2:43:23:4a:78:84:ab:6f:4e:63:d2:b7:5f:6e:
dc:87:da:77:a5:e5:c6:9d:bb:f5:0a:a0:a7:8d:f1:
26:5c:3d:5f:e9:a9:6e:51:29:33:5f:ec:95:02:98:
16:3a:52:a6:29:6c:1c:59:de:0c:e4:2f:00:41:c5:
d9:ad:dc:e2:21:e7:0e:b0:89:21:81:b4:8d:70:28:
da:a4:13:17:be:c9:c3:a2:b8:60:cb:72:f8:ef:5f:
06:1d:2f:f2:b6:e2:ab:6c:88:20:68:52:1f:5a:f1:
d3:3f:07:3f:4a:9a:8d:e3:87:af:49:4e:49:eb:89:
f6:28:9c:a9:c2:8a:c2:91:9d:58:21:74:a2:8b:d6:
78:6d:93:68:bd:61:86:e1:06:68:4e:6e:e3:1b:8e:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:FD:62:C5:8D:31:F9:D5:90:A9:35:3C:86:55:E1:DD:C4:A9:C0
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8250::/44
Signature Algorithm: sha256WithRSAEncryption
17:98:18:1e:9e:53:e6:1d:a0:3a:ce:a0:c0:54:e5:68:cb:71:
b1:60:0c:19:f9:e3:e7:82:58:e4:cb:66:e4:c1:f3:de:a1:22:
37:96:43:e3:0d:f1:c0:a5:c5:a7:4f:38:ee:fc:98:c6:04:74:
0f:8b:4b:b7:aa:20:eb:00:cf:22:6a:d7:24:51:8b:e0:2a:1e:
86:bf:78:40:08:bc:dd:fc:6e:8d:50:23:31:04:0a:34:68:76:
1a:ec:8b:a1:f8:76:fd:e6:c1:3b:11:b6:c5:d9:dc:ab:1c:0d:
bc:f1:a7:d3:b2:b3:3a:d8:8a:42:81:5d:09:4f:21:ea:39:9e:
6c:50:99:62:3b:be:48:97:c2:a5:f7:7d:aa:d9:4a:5b:a6:7b:
f5:1b:89:bf:b7:d2:a1:db:60:5d:1b:d6:b5:d4:1a:1e:fa:db:
02:7f:8b:b9:7e:da:26:8a:85:58:81:93:53:63:af:57:32:43:
d7:a3:5e:9a:17:fd:04:1f:4d:53:75:96:13:f0:cc:48:f7:02:
b4:04:53:d0:24:7f:f0:53:c5:19:7f:e5:3a:84:ad:58:27:57:
1a:d1:de:51:2b:3c:c3:74:46:24:8a:7b:cc:83:66:ec:cc:81:
61:cf:8b:77:f0:40:7b:fd:41:c3:03:29:2a:7d:ad:c3:e1:48:
27:c6:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:54:21 2024 by rpki-client on console-ams.rpki-client.org