Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa
File: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (raw, json)
Hash identifier: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=
Subject key identifier: 03:BF:04:8D:A5:F9:C8:89:05:B8:CA:B7:80:8D:E8:3C:E1:E0:73:A8
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 2BCC101AD76647A614A2BC0637894258D5B90190
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa
Signing time: Mon 27 Jan 2025 23:34:47 +0000
ROA not before: Mon 27 Jan 2025 23:29:47 +0000
ROA not after: Mon 26 Jan 2026 23:34:47 +0000
asID: 47152
IP address blocks: 2a0d:b287:e900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cc:10:1a:d7:66:47:a6:14:a2:bc:06:37:89:42:58:d5:b9:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jan 27 23:29:47 2025 GMT
Not After : Jan 26 23:34:47 2026 GMT
Subject: CN=03BF048DA5F9C88905B8CAB7808DE83CE1E073A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:dd:c0:69:b7:d4:58:4c:75:d7:1a:6a:62:
a5:31:7d:2e:6c:4b:88:09:09:2d:ef:35:a4:8f:87:
6d:f3:81:d8:65:4e:95:6c:8d:ad:ad:f2:ef:9e:b7:
7c:50:f0:d7:d5:a8:f1:ad:f6:73:5c:b3:96:55:1b:
7a:6d:be:ed:80:95:03:2a:4c:92:ea:ac:f3:f8:20:
e2:47:74:35:ce:65:55:66:54:e9:de:3d:5a:50:79:
6e:61:c1:8d:16:af:11:20:86:7c:67:16:be:af:a1:
b1:1c:e1:89:47:64:87:70:05:b6:56:b1:04:a9:08:
90:6b:ff:4a:de:36:54:f1:f9:56:50:ad:88:15:66:
3d:2c:08:f2:c9:f1:13:01:e8:e0:2d:18:c4:93:db:
d2:aa:75:67:92:f0:fd:f7:9c:ba:6d:f5:5b:94:fe:
74:67:42:d4:6f:78:a8:49:1c:3e:4b:6d:df:72:2e:
0b:04:34:26:cd:7e:9a:3a:de:d1:b5:09:10:8f:b4:
a6:be:f1:a6:6a:a4:3d:91:66:70:a6:38:dd:df:92:
49:3b:44:82:a9:dc:a9:25:2b:55:29:a0:dc:d6:ff:
1e:0a:22:b9:7d:d4:ad:58:a5:e6:24:dc:3b:3e:41:
12:8b:bf:28:e3:18:1c:2d:ed:22:15:09:96:f8:65:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:04:8D:A5:F9:C8:89:05:B8:CA:B7:80:8D:E8:3C:E1:E0:73:A8
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:e900::/40
Signature Algorithm: sha256WithRSAEncryption
9a:37:47:a9:40:26:14:5a:b3:d6:f8:b9:71:46:bb:1d:b5:30:
a0:36:a3:07:55:e8:98:6d:6b:b1:38:8d:d7:69:f1:9e:e8:ee:
74:14:13:3f:9a:52:81:97:a0:c3:e4:d1:f3:4a:36:3b:8c:5a:
6a:d1:b8:e1:b4:fc:87:d8:ad:27:1e:15:22:b6:82:50:00:c4:
b9:6e:89:ec:28:8f:4b:da:54:37:55:79:a1:9d:f7:07:be:59:
31:ae:78:bc:1c:d4:6d:9a:12:d8:42:be:7f:a5:6b:e4:ee:95:
6e:b3:3a:43:c9:78:41:c2:1d:c6:5b:b5:64:7d:db:e0:c0:b2:
65:c2:c1:a4:d4:df:24:29:07:c4:60:63:fb:72:32:e8:48:1b:
a4:a7:19:37:0e:a3:5e:24:bc:61:54:3c:d3:52:3b:c1:3e:a2:
56:92:83:08:41:c0:88:47:33:11:66:d5:a0:b1:5f:43:47:b8:
dc:f1:a0:4d:38:3e:3c:a4:a5:5a:42:99:49:c4:f7:1b:76:24:
62:e8:f9:5e:e5:1e:f5:6a:4b:91:9b:d1:06:74:e3:e8:06:fa:
06:47:d7:aa:02:6f:bd:62:dc:66:34:ee:7a:2d:c6:fa:49:cd:
be:28:78:2a:b4:aa:e4:19:32:66:85:29:60:ec:9b:70:bc:a3:
be:4b:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:59 2025 by rpki-client