Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
File: 326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa (raw, json)
Hash identifier: Wq0EddndEQwRsWZU5YkqtBwM2UgP834fvVY7Cr7ewow=
Subject key identifier: EF:8E:60:22:29:C6:9E:5E:5C:88:4E:36:CC:03:05:05:CA:D9:1A:DE
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 5554692F02B09C0B8D83F6B6D139B643ECDDFB4B
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
Signing time: Fri 13 Sep 2024 20:09:37 +0000
ROA not before: Fri 13 Sep 2024 20:04:37 +0000
ROA not after: Fri 12 Sep 2025 20:09:37 +0000
asID: 202881
IP address blocks: 2a12:dd47:8250::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:54:69:2f:02:b0:9c:0b:8d:83:f6:b6:d1:39:b6:43:ec:dd:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Sep 13 20:04:37 2024 GMT
Not After : Sep 12 20:09:37 2025 GMT
Subject: CN=EF8E602229C69E5E5C884E36CC030505CAD91ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:96:94:b8:ad:09:29:47:32:c8:a0:1d:17:
f4:45:3f:72:58:b5:2e:48:4c:79:c7:83:c0:48:52:
15:d5:ef:3f:30:d6:c5:d3:3b:11:c8:db:15:ab:0c:
e6:ca:69:d8:1f:6f:2d:37:7a:f5:cf:25:b2:0a:44:
74:cc:83:a4:78:0b:c1:02:4f:ba:15:7d:b4:36:f9:
9d:db:2c:4c:58:d0:a0:5a:3f:b1:c0:fe:14:b2:1c:
8a:99:2d:04:b4:15:c9:00:98:d7:62:68:88:a5:4f:
70:4b:3c:8f:b1:40:90:1a:70:26:dc:98:db:2a:2d:
f2:d4:5b:41:70:4b:9d:c8:bb:35:c9:0c:9c:0a:23:
e9:96:0e:18:e7:1d:9b:bc:62:84:67:ab:05:87:25:
76:1e:85:55:cc:db:5c:15:52:f4:38:48:6c:68:8d:
81:e3:34:c1:e5:10:cb:98:9d:e4:f1:ab:3c:86:b5:
f1:24:d6:dc:42:71:c3:3c:de:fc:7e:09:62:ec:cc:
4d:d2:80:b5:20:bb:b4:0f:9d:78:ad:0d:cb:23:77:
32:75:46:b6:c3:a3:bd:1f:6b:d0:a5:a9:f6:0e:71:
c2:40:4f:c6:dd:c5:be:c5:a3:d3:54:97:8d:12:64:
7b:14:1d:69:80:95:2b:35:69:36:c8:eb:9a:31:62:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:60:22:29:C6:9E:5E:5C:88:4E:36:CC:03:05:05:CA:D9:1A:DE
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8250::/44
Signature Algorithm: sha256WithRSAEncryption
2b:49:ef:0f:15:ca:52:63:a6:c2:86:e8:0e:4c:39:4f:04:3f:
54:5a:c0:26:11:c7:4c:58:5e:11:e8:13:a3:7d:06:3f:15:c9:
39:3e:b6:3b:4d:d8:5c:06:db:b1:42:70:5b:38:6b:01:d8:5c:
0c:f1:b0:60:86:d3:be:15:71:b3:46:4d:f4:fe:af:ce:92:e8:
61:51:6b:23:5b:ed:23:6e:47:3b:93:6b:c1:50:df:b4:89:68:
af:1f:1f:ff:47:f0:9a:9e:c2:c0:2f:dc:78:fd:49:ab:3d:3a:
3e:9a:83:79:25:f2:a7:3c:0f:19:4e:4c:e4:e9:c7:37:ff:16:
1d:66:e2:68:78:6e:72:04:a2:e6:bc:f0:e7:05:5b:82:4e:f1:
b7:b3:fd:99:68:fc:f3:07:3b:1c:60:b2:93:2b:2d:86:c4:e5:
6a:c7:c1:8d:ff:2f:f2:26:ab:e0:79:34:18:29:f9:de:3e:78:
39:78:65:70:a6:81:60:01:f4:5e:58:51:c8:f8:d9:fd:63:74:
8f:a7:77:39:1c:82:ac:03:84:50:0e:05:ef:6f:eb:d0:47:41:
67:a5:81:90:b7:03:b6:57:14:f4:77:b5:85:ec:45:fe:ff:91:
10:85:f1:aa:25:56:cc:7d:8f:b8:d2:4c:23:d7:0f:6c:87:23:
9a:2e:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:17:43 2025 by rpki-client