Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030313a3a2f34382d3438203d3e20323035333239.roa
File: 326131323a646434373a613030313a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: jv5e2IGRncR40rcgB3a7q4jmqOYGH5kuHS7vffWRmDs=
Subject key identifier: B6:A8:AE:A7:D3:32:75:3C:5C:2B:C5:3F:3D:5E:0C:51:F3:94:CC:FF
Certificate issuer: /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial: 3F998735C2495292E280234B8A99F700065CAA1C
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access: rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030313a3a2f34382d3438203d3e20323035333239.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 205329
IP address blocks: 2a12:dd47:a001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:99:87:35:c2:49:52:92:e2:80:23:4b:8a:99:f7:00:06:5c:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=B6A8AEA7D332753C5C2BC53F3D5E0C51F394CCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:64:3c:8d:59:f7:fb:cd:a3:6f:e9:48:4a:
5b:20:bc:14:e2:aa:72:1b:dd:ee:be:a2:57:25:3d:
a8:6a:74:04:c7:a1:18:94:3b:a7:71:5e:7f:71:b5:
36:a7:c9:06:4d:09:21:9a:71:8e:d5:75:1a:57:85:
27:76:5f:85:ed:b9:89:51:dd:4f:76:bf:6a:6f:19:
a9:9c:71:01:f2:74:e9:a9:94:0d:44:2d:63:21:69:
eb:fa:9b:d8:c8:36:13:fb:d4:01:7c:54:a6:1e:e9:
89:12:ac:42:52:31:ed:13:4e:4a:ea:b6:61:c0:f9:
bf:4f:fe:50:6a:30:ef:e6:dc:0c:ea:f5:6c:d3:9a:
27:a5:45:a7:dd:ed:0b:75:19:ae:4e:66:32:04:fb:
94:46:c2:0d:28:ed:27:d5:f7:a5:5f:5b:16:95:ae:
f3:6d:0c:c7:c8:b3:a1:05:23:7d:ce:ec:e7:5c:24:
d8:d8:ca:15:11:7c:e9:a5:f7:1a:99:09:2c:25:42:
05:0b:07:ad:81:4e:0f:11:9a:52:59:a0:e8:06:48:
d3:21:c0:13:ae:b1:bf:2a:2b:55:3c:25:46:37:b5:
66:1d:6a:64:5b:58:5b:74:b4:fd:d0:7d:a4:ba:13:
fb:b6:3a:13:d4:8e:43:59:e2:28:bc:78:41:ac:83:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:AE:A7:D3:32:75:3C:5C:2B:C5:3F:3D:5E:0C:51:F3:94:CC:FF
X509v3 Authority Key Identifier:
keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a613030313a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:a001::/48
Signature Algorithm: sha256WithRSAEncryption
02:88:55:22:96:69:a9:51:01:1c:fc:2a:22:07:d9:ad:c3:ef:
4b:5e:08:9d:ee:59:cf:93:92:97:82:16:be:b8:64:44:2c:51:
53:5f:12:45:c8:bb:76:1a:41:13:a8:de:c8:c6:9b:d9:a9:88:
93:8f:2e:5d:6c:51:ea:03:05:03:d6:a1:ff:81:a4:4c:f3:85:
53:6f:f3:f4:4f:3e:4a:44:94:b7:08:4e:db:3b:5b:4f:fc:65:
cd:89:cb:ad:6a:3a:d1:94:12:a6:fd:ac:59:8a:b6:6d:d5:43:
78:f7:db:38:00:6c:10:1a:70:9e:af:5a:0d:89:b3:e1:ff:37:
0b:7a:06:2f:38:80:1f:5a:a8:c7:5a:3a:06:04:6f:6a:3c:95:
bc:e4:3f:2f:41:ad:2a:61:a7:c9:10:3d:6e:84:ea:11:c3:1e:
fd:5d:f8:21:e6:b6:53:bb:02:36:c3:7f:d2:e6:34:81:81:0a:
60:fa:e6:68:1c:d9:29:16:40:bb:d2:64:1d:07:66:00:03:2b:
0b:00:29:31:40:20:57:72:54:f8:17:a8:b3:b4:08:aa:7c:1f:
f5:9f:1f:45:e8:0a:92:55:34:e1:46:f3:43:64:ac:e0:0c:d6:
c1:83:fe:9f:48:41:5a:a2:14:4a:d0:7d:11:61:9c:27:5c:78:
33:1e:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:18:17 2025 by rpki-client