Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa
File: 326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa (raw, json)
Hash identifier: XpXMXD7WLvF9GioVgay+deJvR4n/11AkEGGwbKMgjqI=
Subject key identifier: 9B:34:76:CA:D5:BC:BD:95:0E:11:2D:6D:23:1B:3E:DC:0F:13:C8:04
Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial: 616FA82D0A13687C8D4A206E04569AFB54D2CE0D
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa
Signing time: Wed 28 Aug 2024 13:57:30 +0000
ROA not before: Wed 28 Aug 2024 13:52:30 +0000
ROA not after: Wed 27 Aug 2025 13:57:30 +0000
asID: 214290
IP address blocks: 2a0a:6044:9008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6f:a8:2d:0a:13:68:7c:8d:4a:20:6e:04:56:9a:fb:54:d2:ce:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Validity
Not Before: Aug 28 13:52:30 2024 GMT
Not After : Aug 27 13:57:30 2025 GMT
Subject: CN=9B3476CAD5BCBD950E112D6D231B3EDC0F13C804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:d6:0c:0f:2c:68:6f:1d:38:93:1b:60:cd:
ba:3b:11:d8:ad:0a:66:35:4a:38:90:bc:0b:49:18:
ca:bc:19:c1:50:9c:ce:49:39:60:85:99:4a:1b:f6:
01:a9:95:fa:82:40:cf:8f:44:18:a6:c3:74:98:1e:
15:41:3a:26:52:72:c7:ed:96:ad:68:0f:bc:f3:cb:
f9:2f:fc:17:3b:68:88:c3:2c:7e:77:41:f1:04:52:
be:8a:11:96:10:90:53:3c:17:7d:40:9e:30:1c:c6:
f8:49:78:01:98:d2:dc:b5:30:f5:29:2d:d6:07:2b:
61:55:ab:32:d6:44:53:cc:e3:6c:25:aa:85:a5:6c:
a3:d0:df:fc:a7:f0:96:a7:b6:40:d0:8f:4b:0f:5f:
09:0a:69:50:b2:30:fa:1c:c4:fa:2e:9d:1b:e0:c5:
14:46:b4:fd:e0:38:1d:ca:94:5a:77:d4:fb:48:37:
30:d4:c9:25:b3:6f:eb:8d:a9:a5:15:f4:8e:82:5b:
2a:1d:d9:bc:24:4e:0f:22:47:67:37:02:c3:58:2a:
37:d9:7c:53:82:17:95:72:cc:dd:0f:d7:d5:d3:c3:
43:24:c9:6f:c5:fa:16:7f:06:ad:ef:64:ac:5a:42:
38:f1:cf:f4:18:c5:d5:02:a6:23:3c:38:71:0e:b7:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:76:CA:D5:BC:BD:95:0E:11:2D:6D:23:1B:3E:DC:0F:13:C8:04
X509v3 Authority Key Identifier:
keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:9008::/48
Signature Algorithm: sha256WithRSAEncryption
9e:0c:7a:70:9d:c8:bb:ae:a6:96:1f:1a:57:0a:8a:e8:e6:47:
01:7b:e3:2a:a6:7f:9c:de:45:2c:65:5f:fa:96:b4:a1:86:16:
b0:65:8d:86:97:94:e7:db:78:e0:6c:f2:8a:86:d4:af:b9:e9:
6f:6c:07:d3:cf:fc:55:bd:82:2b:fc:1c:14:4a:73:5d:ca:27:
bc:6d:21:1f:02:a3:14:48:21:cc:ed:68:23:bb:87:ce:24:8d:
85:31:cd:fa:4a:ef:52:88:16:65:51:68:e0:64:73:c9:ea:74:
a4:5e:35:4f:b5:37:a2:87:f9:ea:f0:dc:61:d7:36:6e:09:37:
cb:73:64:75:be:69:3b:12:0a:6b:d2:2f:de:d7:0a:01:b6:f3:
34:f4:54:fc:34:1a:be:f6:e2:44:73:2c:3b:24:a3:e8:1d:dc:
c2:4c:24:9d:09:15:18:2b:c5:1c:39:38:a0:41:2d:9e:05:cd:
84:20:97:d3:8d:c9:a3:59:3d:4b:e2:8a:a5:58:13:27:ea:6c:
1c:be:4f:44:92:7f:62:ef:3a:f6:c5:47:d8:de:f3:e0:55:e8:
06:1b:92:57:65:73:e3:42:ff:80:b4:98:41:2c:b0:8a:f6:4f:
39:7e:79:37:08:ac:7f:db:17:79:d3:5d:3b:8c:cc:e6:59:43:
79:bc:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:45 2025 by rpki-client