Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
File: 326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: HneQtYqjLe+9XA6508OWRrLk4y5besqLoVAfaeWBh4s=
Subject key identifier: 6C:D0:C8:7A:75:EC:79:B7:19:10:3E:6A:6C:8A:3B:07:D3:54:7F:8D
Certificate issuer: /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial: 5B41AD8D85F084ADF9A5F417C79CDBC6E5CB0034
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
Signing time: Fri 12 Jul 2024 15:10:20 +0000
ROA not before: Fri 12 Jul 2024 15:05:20 +0000
ROA not after: Fri 11 Jul 2025 15:10:20 +0000
asID: 215956
IP address blocks: 2a0a:6044:a510::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:41:ad:8d:85:f0:84:ad:f9:a5:f4:17:c7:9c:db:c6:e5:cb:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Validity
Not Before: Jul 12 15:05:20 2024 GMT
Not After : Jul 11 15:10:20 2025 GMT
Subject: CN=6CD0C87A75EC79B719103E6A6C8A3B07D3547F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:96:5a:2d:03:36:22:bd:9f:dd:85:b6:5d:
50:8e:f2:5d:67:df:15:13:47:ca:9d:34:e5:ea:e8:
b3:0e:c5:2b:61:7d:83:a3:68:cd:7d:60:0f:cb:da:
78:88:12:d2:71:aa:f7:bd:53:c5:16:72:3b:a7:0e:
2f:6f:52:58:ca:82:27:70:fc:82:a3:c8:ff:66:a9:
21:6c:dd:e6:4e:22:e8:79:d2:e6:8e:ca:24:f3:c8:
4f:db:ba:e3:bc:7b:80:6d:21:91:ea:9e:e1:66:45:
aa:5f:c6:27:7d:01:37:00:fb:e9:0a:7a:df:f0:c8:
dc:4c:c3:72:7f:7d:b0:c0:c3:c8:6e:41:16:b1:34:
ae:57:85:b5:b1:0d:f8:24:12:4c:03:a6:35:27:ee:
5a:a4:17:35:22:fd:36:3c:51:ce:7e:0a:25:a8:cc:
bb:ce:88:0b:4c:ab:7c:b7:39:23:44:62:2b:32:7d:
e1:ea:80:3b:ac:c4:ac:b0:1c:98:bb:05:70:85:d3:
56:26:8b:75:87:47:d4:95:91:47:4b:4a:5b:68:47:
98:2c:fe:2a:eb:ed:2d:a7:97:80:3d:7f:2d:59:ae:
50:e5:57:26:10:0e:58:db:3c:2d:f7:87:19:c2:54:
2e:7b:91:1f:e4:c4:7f:1d:6a:ab:b1:6b:12:55:be:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:C8:7A:75:EC:79:B7:19:10:3E:6A:6C:8A:3B:07:D3:54:7F:8D
X509v3 Authority Key Identifier:
keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a510::/46
Signature Algorithm: sha256WithRSAEncryption
1b:78:3e:19:c7:ea:22:08:9e:a9:0c:3b:d9:cc:42:d2:7b:5d:
2a:9c:53:34:8d:8e:34:21:36:74:0e:b9:4a:ac:bb:7a:21:63:
59:c7:99:53:a1:72:82:5e:0a:b5:45:6d:ca:d3:c7:2b:90:fc:
3e:95:d6:c6:c5:cb:56:ab:64:20:a8:88:b4:6d:55:ce:47:77:
15:4d:50:e4:1b:fb:41:82:f9:d4:61:0a:16:de:58:8d:b1:c2:
7b:d8:fa:85:e9:e3:6b:c6:4e:19:df:d4:f3:70:68:08:e6:9c:
2d:ed:1d:60:e6:35:e7:41:08:19:0a:10:de:53:81:1d:eb:3a:
06:91:b6:b2:a1:48:32:ba:e6:36:c7:91:44:2f:32:53:d5:c8:
32:8c:2b:06:63:61:f9:cc:f6:c2:47:e1:6f:03:3e:08:e0:75:
c1:c3:c6:81:5a:56:63:42:8d:9a:23:4b:bc:ae:0b:aa:06:fa:
67:24:54:56:8f:69:6c:19:b5:1f:a2:48:92:f3:ac:b9:3b:6a:
b0:06:2e:b6:35:79:80:78:96:53:eb:36:d7:46:28:63:df:ea:
7c:a5:3d:9a:50:7d:92:48:0a:9c:f0:09:26:c6:fa:f5:69:cc:
cf:47:11:7a:32:36:45:5a:be:f8:26:1a:0b:08:95:e1:ee:d4:
15:25:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:05 2025 by rpki-client