Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa
File: 326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa (raw, json)
Hash identifier: AfzgORGNBz+QXzbNFXc6g6iPrPpHM5f2+sQ8boLLtk8=
Subject key identifier: EB:A1:59:EA:C6:16:06:D9:A6:10:10:58:D7:CC:E2:0E:05:FC:68:83
Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial: 0D46B7EEEB6E175B84188CCD8197131F60CFC480
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa
Signing time: Fri 02 Aug 2024 06:41:19 +0000
ROA not before: Fri 02 Aug 2024 06:36:19 +0000
ROA not after: Fri 01 Aug 2025 06:41:19 +0000
asID: 215590
IP address blocks: 2a0a:6044:9006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:46:b7:ee:eb:6e:17:5b:84:18:8c:cd:81:97:13:1f:60:cf:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Validity
Not Before: Aug 2 06:36:19 2024 GMT
Not After : Aug 1 06:41:19 2025 GMT
Subject: CN=EBA159EAC61606D9A6101058D7CCE20E05FC6883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:50:f9:46:e5:be:40:f0:42:14:aa:6a:d2:
d3:b3:03:8e:dc:b6:68:01:ed:0f:48:ed:a3:4e:16:
c2:2d:26:13:a5:26:56:fa:b4:0f:01:d6:6f:bb:e3:
13:c8:f6:de:56:5b:cf:6c:9b:dc:97:58:e7:63:ec:
61:06:41:80:a8:bb:af:37:d5:fc:27:de:bc:2f:f2:
79:dd:33:3c:24:a4:09:66:35:d0:36:97:d5:c9:2f:
08:d8:17:70:b8:17:59:fb:fc:82:cf:04:d3:9e:1a:
1a:a7:2e:a0:47:86:30:c6:77:f2:3b:20:55:b9:bb:
5f:a4:1c:55:70:7a:46:ba:7d:cb:4a:14:74:7d:70:
73:76:5c:7d:ad:55:36:78:1f:8a:81:9b:e9:60:d4:
7d:04:e2:72:35:07:38:0d:fe:0d:6f:82:44:8f:f4:
b0:2d:34:1f:2b:ef:f2:46:50:da:e0:47:d0:0c:70:
2e:85:f4:3b:62:aa:50:55:27:01:8a:62:86:9b:11:
e0:1a:21:3c:67:0c:1a:fd:61:ee:2d:45:75:bf:33:
51:9d:ff:95:3d:f9:82:20:e5:9b:3c:ed:46:65:c4:
84:f6:a2:af:be:c4:e1:27:60:f8:ef:7d:98:9b:cd:
fe:57:c1:4e:47:29:f1:e1:28:16:56:85:ff:76:85:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:59:EA:C6:16:06:D9:A6:10:10:58:D7:CC:E2:0E:05:FC:68:83
X509v3 Authority Key Identifier:
keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:9006::/48
Signature Algorithm: sha256WithRSAEncryption
a2:44:c1:63:87:9d:8a:1d:ee:b4:bc:b5:a6:0a:69:9d:91:81:
b9:24:cc:23:df:73:53:bb:30:1c:7c:5c:a7:18:a9:2b:3b:8b:
77:8f:57:96:b0:fd:cd:28:76:49:24:67:0f:36:f7:1c:05:e6:
a2:2c:c9:99:d2:98:89:9b:c8:6a:bb:d9:69:36:5e:06:98:8a:
92:7e:66:1b:43:71:2f:38:51:b4:c1:02:ea:f2:b0:21:0f:74:
bd:3a:bf:40:1b:69:96:fd:46:0c:5a:78:b9:8f:06:6f:b9:03:
f7:af:99:ba:99:1d:8b:8e:09:1c:5a:59:13:18:d6:18:7c:aa:
18:ba:01:fc:b9:ee:9d:66:ae:b2:e6:b3:6c:ac:a1:81:d6:eb:
4f:9f:93:1d:ec:75:4c:dc:ef:82:e7:af:7c:16:7d:e9:d0:80:
96:82:d1:3b:c5:f9:87:49:aa:d9:05:24:ef:f9:3f:99:d7:f4:
b6:08:a1:6a:c8:45:df:d3:99:11:26:75:2d:1b:1d:97:91:a9:
6c:2b:db:4f:2e:8a:f8:58:ae:4f:95:c9:92:1f:23:b7:0c:65:
a7:7b:b0:f1:7c:95:29:f6:54:b4:92:dc:9c:21:75:82:c4:9e:
71:a7:0c:4f:f2:55:e9:d9:31:53:06:aa:cc:4e:ba:8c:e4:4d:
1e:87:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:35 2025 by rpki-client