Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa
File: 326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa (raw, json)
Hash identifier: 5uaD32rK9RzVuGhcsGRYKRhGpUD+JeeZNVWKVb4BOCw=
Subject key identifier: 2E:84:CD:18:9B:58:4A:2E:26:26:77:F2:7F:6D:FF:49:B2:EF:8C:42
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 3A4D3D0FF976636263207EA6AAF577BF3A712509
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:04 +0000
ROA not before: Fri 13 Oct 2023 19:50:04 +0000
ROA not after: Fri 11 Oct 2024 19:55:04 +0000
asID: 205329
IP address blocks: 2a12:dd47:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4d:3d:0f:f9:76:63:62:63:20:7e:a6:aa:f5:77:bf:3a:71:25:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:04 2023 GMT
Not After : Oct 11 19:55:04 2024 GMT
Subject: CN=2E84CD189B584A2E262677F27F6DFF49B2EF8C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7d:ba:72:b2:54:34:29:66:c7:5d:92:d1:08:
40:fd:87:10:b1:f1:97:c0:1e:71:cc:8b:5e:57:d5:
42:f3:5e:50:59:71:c8:01:45:e6:ea:8e:05:5a:e9:
95:7b:92:e7:18:97:78:c6:6a:5e:b1:6e:04:c5:e2:
43:1a:31:bc:24:c2:01:f2:e3:23:c3:bc:f7:38:8a:
9d:e1:17:fa:03:86:c9:29:0c:e3:97:7b:0a:d1:d9:
ad:71:e1:a1:9b:fe:55:df:1c:1a:9c:b5:81:c9:2d:
0a:4b:de:d4:c3:ec:00:d4:37:cb:dd:ec:16:f4:d3:
ab:92:c2:52:e8:55:86:a9:2c:bd:6a:5e:c7:a8:b0:
82:44:d1:ee:f2:0e:e1:c7:62:39:ca:7f:f2:5f:4a:
6f:3f:d7:7d:11:d6:1f:d3:54:ac:89:1a:72:51:54:
1d:e1:f3:3c:e6:66:05:29:22:68:c2:c6:ca:bb:a8:
07:10:35:89:f8:4e:84:ff:10:ec:fb:17:d4:af:ff:
8a:4b:0b:43:7f:38:49:22:bb:4a:7b:5a:ec:76:c7:
2e:2d:72:08:28:d8:70:83:26:24:44:53:e6:28:d2:
96:12:de:28:7d:ec:7b:6b:74:8a:20:d8:f8:ad:93:
15:a6:43:f4:f4:25:42:a2:dc:85:2d:ad:6c:56:9c:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:CD:18:9B:58:4A:2E:26:26:77:F2:7F:6D:FF:49:B2:EF:8C:42
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030303a3a2f33362d3336203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:a000::/36
Signature Algorithm: sha256WithRSAEncryption
d1:e0:51:1a:19:ea:b0:69:b5:66:62:87:1a:d2:cf:1f:a1:a8:
58:73:e6:8b:3f:55:58:83:11:e9:41:f8:81:d5:c6:40:01:46:
41:42:b9:c0:8c:4f:72:b5:46:9a:b8:ef:a7:f8:bf:01:7f:57:
91:23:de:b4:ea:05:5f:8c:c0:00:e7:09:a3:88:29:30:bd:ef:
f5:78:95:9b:fa:33:17:cb:b9:f5:c8:2e:ed:d4:90:f4:90:e6:
97:29:85:eb:cb:7f:f2:d3:9d:a2:f3:b5:f1:7e:d0:cf:a4:f3:
df:90:9b:b6:ee:0f:54:6e:71:d0:a7:ad:a5:bd:c1:12:7c:dd:
c9:53:d8:06:ce:77:29:4a:c3:f0:0c:f4:05:37:ba:b3:4a:19:
2f:d2:65:b1:05:75:9a:85:02:50:6a:58:ef:bc:46:67:81:d5:
0c:c6:b3:14:d1:5f:b8:f6:b8:29:52:d2:8d:65:e4:2f:a0:94:
8b:33:9e:44:bd:ff:cd:88:4f:75:be:7b:c2:51:80:9f:24:59:
e4:87:59:b2:51:f5:62:ef:88:71:51:41:ee:9e:33:3a:21:8a:
3c:42:11:79:05:c1:39:af:d0:38:f8:4a:5b:8c:a5:c6:06:80:
aa:7c:9b:88:1f:32:cb:46:fc:a0:44:08:76:7a:77:2a:48:30:
34:be:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:45:03 2024 by rpki-client on console-fra.rpki-client.org