Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
File: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (raw, json)
Hash identifier: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=
Subject key identifier: BD:5F:00:ED:0E:E8:14:0B:30:F7:F3:CB:38:42:27:96:A2:C4:BD:DA
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 792C018D18550A56A9E8F72D5C93F8B29FC845E7
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
Signing time: Mon 25 Nov 2024 21:02:21 +0000
ROA not before: Mon 25 Nov 2024 20:57:21 +0000
ROA not after: Mon 24 Nov 2025 21:02:21 +0000
asID: 202704
IP address blocks: 2a0d:b287:ea00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2c:01:8d:18:55:0a:56:a9:e8:f7:2d:5c:93:f8:b2:9f:c8:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Nov 25 20:57:21 2024 GMT
Not After : Nov 24 21:02:21 2025 GMT
Subject: CN=BD5F00ED0EE8140B30F7F3CB38422796A2C4BDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:bb:0c:c6:ca:6c:53:20:34:a3:af:bd:a8:
cf:14:a7:d9:d5:fd:7e:24:91:fa:7d:82:15:cd:76:
69:7b:ff:6f:ac:b9:ea:64:7f:eb:83:e8:9b:52:2a:
91:a3:65:89:1b:23:6e:53:81:42:64:85:81:06:ea:
1d:2e:a4:9a:de:8e:76:2f:3a:9f:ba:25:a3:fd:50:
0e:2e:51:99:dd:a3:3f:2b:5c:fc:dc:e4:2a:f4:f7:
d1:6f:13:6d:ba:7a:d8:fc:c2:f0:84:46:21:aa:30:
cd:15:db:e4:89:85:20:2e:71:bc:43:26:af:32:93:
90:4c:a2:e7:6e:7f:5b:9d:82:0d:29:93:40:37:49:
4a:bb:3f:72:43:8b:73:8d:aa:45:5e:3d:49:68:51:
f4:f6:81:08:58:59:30:61:1c:9f:6e:43:bb:a3:45:
02:3a:a4:29:1d:11:42:ed:96:13:42:13:12:32:0c:
d5:1d:82:76:c0:8a:ea:6c:41:eb:3d:61:53:34:99:
f3:fa:ac:d7:3d:e6:65:be:53:81:8e:51:44:ef:f4:
2c:00:13:b7:00:26:7a:35:94:ac:12:1c:1e:91:c3:
5f:ad:7f:d0:6c:09:e9:32:47:93:60:54:f6:02:3e:
3a:b9:3c:9e:e4:fa:b9:10:62:ed:7d:2e:c3:d7:2e:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:00:ED:0E:E8:14:0B:30:F7:F3:CB:38:42:27:96:A2:C4:BD:DA
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
64:b7:34:f4:0a:94:c4:ae:2d:bb:35:16:e2:cb:2b:1e:9f:5e:
de:8c:03:f6:82:cd:96:af:36:74:11:6a:23:27:59:74:9e:13:
fe:32:53:f2:8d:4c:c9:31:ba:fa:b3:e3:3d:e0:4e:d5:cf:9d:
66:e4:16:dd:a2:61:a1:9b:74:83:3b:28:7b:4f:42:16:33:90:
f9:50:3b:52:17:a7:6d:c6:fd:de:88:84:f1:16:cd:1c:9e:bf:
e0:3f:8d:70:89:67:38:fd:1f:55:2b:b2:e9:85:ab:4f:1a:f3:
1c:25:18:68:06:64:29:df:f5:98:8b:e3:57:e3:61:8c:62:d0:
41:d0:66:fc:d2:95:75:bf:f2:44:2b:76:0e:82:76:bf:36:56:
dd:2d:9d:ce:ac:9c:ac:08:54:1d:3c:40:54:3f:fd:99:a1:fe:
da:c2:a9:59:4d:e4:9b:57:a6:bf:d4:83:a9:c1:98:27:ed:67:
e9:80:4c:72:e2:3d:31:df:4c:7b:c8:0c:42:9d:2d:ad:49:f3:
c3:d2:ce:ed:2a:52:53:b0:79:7a:32:29:51:b6:9a:9a:3c:85:
55:52:a3:ac:fd:1b:11:70:5e:14:b4:fa:8f:1e:de:0c:6d:d7:
72:94:ab:cb:fd:8f:5c:d6:79:56:2d:53:eb:e0:22:d0:66:8a:
bd:4b:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:58:13 2025 by rpki-client