Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
File: 326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier: pfnPbpYyFEbCQrKFY6QYKwovi7p3VO74wEOYd+ryU4k=
Subject key identifier: 75:FA:80:E3:4D:7E:A1:CD:44:E3:7F:3E:B5:98:F5:1F:71:6B:F5:9E
Certificate issuer: /CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
Certificate serial: 189A22592FF0C3ED33AD601D4AFE4D0A0923D0CB
Authority key identifier: FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
Signing time: Thu 20 Apr 2023 16:16:56 +0000
ROA not before: Thu 20 Apr 2023 16:11:56 +0000
ROA not after: Thu 18 Apr 2024 16:16:56 +0000
asID: 60900
IP address blocks: 2a13:df80:71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9a:22:59:2f:f0:c3:ed:33:ad:60:1d:4a:fe:4d:0a:09:23:d0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF2AD3783A3C96E2652481F7A77CFC5BE779213
Validity
Not Before: Apr 20 16:11:56 2023 GMT
Not After : Apr 18 16:16:56 2024 GMT
Subject: CN=75FA80E34D7EA1CD44E37F3EB598F51F716BF59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:1f:43:d7:f3:2c:ff:24:33:87:c7:08:d6:
b1:32:73:88:45:f3:d5:e4:cf:c0:e6:fb:6c:9a:8c:
51:ac:c9:13:bd:fe:3f:80:86:dd:2a:ab:1c:ab:c5:
b6:45:f3:05:c8:cf:e9:d6:47:53:45:33:59:74:29:
ee:98:0b:32:91:f9:0d:74:ee:51:12:20:a8:17:f7:
e4:11:d2:2c:d3:f0:44:62:2b:3d:fb:a2:5c:7e:fb:
03:b1:de:7e:da:12:5f:87:fe:11:1f:6a:56:5e:24:
78:c9:76:59:80:61:5d:8a:2d:2c:b0:b8:c7:06:5b:
27:22:44:20:0f:39:59:8f:91:4a:56:0a:d2:1f:da:
c4:e1:a6:9b:f8:25:ce:53:33:7d:2f:96:2c:42:ec:
1f:d3:5a:2f:58:16:d6:2f:03:db:5c:c5:5a:e7:e5:
ae:20:24:ce:2c:33:3b:7b:6e:b7:ec:72:ad:a0:16:
79:71:68:45:a5:b6:76:47:5d:0d:88:5b:f3:cb:3d:
45:31:69:a1:42:77:ac:e0:1c:b1:14:d8:74:2d:a5:
08:f6:37:37:bc:b8:51:70:97:9d:14:4b:fb:47:c1:
4d:48:37:4c:55:aa:16:b9:26:41:03:3b:ce:56:54:
69:ed:7e:27:6f:e4:e7:c6:60:ac:9f:e6:3a:1b:b0:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:80:E3:4D:7E:A1:CD:44:E3:7F:3E:B5:98:F5:1F:71:6B:F5:9E
X509v3 Authority Key Identifier:
keyid:FB:F2:AD:37:83:A3:C9:6E:26:52:48:1F:7A:77:CF:C5:BE:77:92:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/FBF2AD3783A3C96E2652481F7A77CFC5BE779213.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/1/326131333a646638303a37313a3a2f34382d3438203d3e203630393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:71::/48
Signature Algorithm: sha256WithRSAEncryption
a5:2d:d8:06:cf:66:ca:9c:23:21:a2:38:90:29:4f:36:4b:05:
13:b9:eb:35:47:ff:1d:73:cd:ac:77:ac:47:6d:30:da:ad:07:
08:32:a8:75:8d:b8:36:41:3c:43:b8:b4:c5:db:bb:b5:eb:3c:
e8:0a:34:04:f0:03:48:33:41:48:b1:dd:b1:47:dc:ab:5f:cd:
07:f3:47:1a:67:b5:98:48:4d:96:36:c3:95:b5:60:d7:11:ca:
1c:be:97:f7:74:ad:c9:cd:78:52:f1:a0:31:de:98:d8:84:24:
8c:65:73:f8:a5:73:f9:91:6f:b2:8e:e4:a2:5d:ed:70:21:b0:
9b:4d:50:26:9a:f9:61:ea:5b:b5:67:d7:9d:97:01:d6:a3:09:
a0:83:d2:05:ba:37:19:43:2e:f7:9d:48:70:81:e4:81:25:38:
8a:e5:a5:99:41:90:12:de:99:0c:9e:8c:5c:7d:6f:b5:6c:b9:
df:ab:ac:54:54:98:ed:68:43:b0:de:aa:82:97:4b:f7:ac:91:
cc:d7:6f:3e:f5:db:8d:bf:94:19:04:bd:5d:d6:b2:37:f4:b0:
cb:35:70:9f:04:2c:85:c1:ba:4a:ec:00:5b:b1:aa:cc:f5:9f:
c8:98:10:3d:69:25:38:cc:d4:da:7b:46:4b:84:4b:07:50:fd:
37:f8:4c:39
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUGJoiWS/ww+0zrWAdSv5NCgkj0MswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVC
RTc3OTIxMzAeFw0yMzA0MjAxNjExNTZaFw0yNDA0MTgxNjE2NTZaMDMxMTAvBgNV
BAMTKDc1RkE4MEUzNEQ3RUExQ0Q0NEUzN0YzRUI1OThGNTFGNzE2QkY1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsx9D1/Ms/yQzh8cI1rEyc4hF
89Xkz8Dm+2yajFGsyRO9/j+Aht0qqxyrxbZF8wXIz+nWR1NFM1l0Ke6YCzKR+Q10
7lESIKgX9+QR0izT8ERiKz37olx++wOx3n7aEl+H/hEfalZeJHjJdlmAYV2KLSyw
uMcGWyciRCAPOVmPkUpWCtIf2sThppv4Jc5TM30vlixC7B/TWi9YFtYvA9tcxVrn
5a4gJM4sMzt7brfscq2gFnlxaEWltnZHXQ2IW/PLPUUxaaFCd6zgHLEU2HQtpQj2
Nze8uFFwl50US/tHwU1IN0xVqha5JkEDO85WVGntfidv5OfGYKyf5jobsNdhAgMB
AAGjggJ/MIICezAdBgNVHQ4EFgQUdfqA401+oc1E438+tZj1H3Fr9Z4wHwYDVR0j
BBgwFoAU+/KtN4OjyW4mUkgfenfPxb53khMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTIyM2JkYTUtMWY5NC00MzE5LWI0NDgtODNkYjcxODYx
Njk1LzEvRkJGMkFEMzc4M0EzQzk2RTI2NTI0ODFGN0E3N0NGQzVCRTc3OTIxMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NGZjNDc1Mi1mODFhLTQ3
YjYtOGYwZC1mZjc0YzhiMGIwYTQvMC9GQkYyQUQzNzgzQTNDOTZFMjY1MjQ4MUY3
QTc3Q0ZDNUJFNzc5MjEzLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF
BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lMjIzYmRhNS0xZjk0LTQzMTktYjQ0OC04M2RiNzE4NjE2OTUvMS8zMjYxMzEz
MzNhNjQ2NjM4MzAzYTM3MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMwMzkz
MDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKhPfgABxMA0GCSqGSIb3DQEBCwUAA4IBAQClLdgGz2bK
nCMhojiQKU82SwUTues1R/8dc82sd6xHbTDarQcIMqh1jbg2QTxDuLTF27u16zzo
CjQE8ANIM0FIsd2xR9yrX80H80caZ7WYSE2WNsOVtWDXEcocvpf3dK3JzXhS8aAx
3pjYhCSMZXP4pXP5kW+yjuSiXe1wIbCbTVAmmvlh6lu1Z9edlwHWowmgg9IFujcZ
Qy73nUhwgeSBJTiK5aWZQZAS3pkMnoxcfW+1bLnfq6xUVJjtaEOw3qqCl0v3rJHM
128+9duNv5QZBL1d1rI39LDLNXCfBCyFwbpK7ABbsarM9Z/ImBA9aSU4zNTae0ZL
hEsHUP03+Ew5
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:16 2025 by rpki-client