Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534323a3a2f33322d3332203d3e20323135353331.roa
File: 326130623a396534323a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier: qWajYV9pPDZ/20bTXxec0RX2chEH/ZfmD7rIxD1vpCg=
Subject key identifier: D1:59:36:88:C8:DF:B6:B9:3E:09:B3:03:44:05:3C:28:0F:E2:05:31
Certificate issuer: /CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
Certificate serial: 7244B952A4D098585766256EB535A2C3C7CB8F5C
Authority key identifier: 51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534323a3a2f33322d3332203d3e20323135353331.roa
Signing time: Sat 25 May 2024 10:27:34 +0000
ROA not before: Sat 25 May 2024 10:22:34 +0000
ROA not after: Sat 24 May 2025 10:27:34 +0000
asID: 215531
IP address blocks: 2a0b:9e42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:44:b9:52:a4:d0:98:58:57:66:25:6e:b5:35:a2:c3:c7:cb:8f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514199BA2112D71D72E20DCA3EC2EE2C31F2979C
Validity
Not Before: May 25 10:22:34 2024 GMT
Not After : May 24 10:27:34 2025 GMT
Subject: CN=D1593688C8DFB6B93E09B30344053C280FE20531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:1c:30:11:0e:7a:a4:68:74:2a:c6:88:13:
d6:14:df:d8:33:94:31:a8:54:c0:4c:e8:b6:f4:c6:
f0:52:42:5b:47:18:a0:6a:b4:4c:81:b8:17:85:f2:
f6:38:fc:29:bb:ee:51:6d:59:5f:c5:f9:81:0b:85:
d4:77:c7:bd:ff:fd:88:45:b0:65:ea:de:b2:1d:2e:
ea:88:46:57:e5:03:a6:9f:49:bb:02:ee:47:8d:8e:
e2:c1:d6:86:9e:a9:2a:38:f0:a6:a6:9e:43:57:35:
6e:3a:76:94:d7:42:30:77:8a:56:51:33:7b:3b:7c:
c2:82:77:43:84:47:c8:c3:11:ec:f6:98:59:2f:9f:
10:53:86:2f:1e:52:60:fc:4e:25:4a:f6:50:47:a7:
a6:58:25:b1:7c:3c:06:2c:40:e1:4b:b9:9f:ab:59:
ef:01:bd:a1:48:a0:12:b9:87:e7:fa:5a:9d:c8:f0:
79:b3:96:c9:8b:12:7b:0d:39:d8:f8:e8:71:6b:11:
c4:7a:49:89:4e:37:6e:3a:8d:3a:c4:80:bb:b5:e7:
27:25:05:37:c3:6c:53:f9:6e:ed:27:b1:c3:8d:13:
68:8a:f1:88:b4:cd:68:a0:e5:b6:23:7b:02:0a:80:
0f:f5:85:23:a9:cb:d8:38:3e:ba:ed:f1:fa:e4:d8:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:36:88:C8:DF:B6:B9:3E:09:B3:03:44:05:3C:28:0F:E2:05:31
X509v3 Authority Key Identifier:
keyid:51:41:99:BA:21:12:D7:1D:72:E2:0D:CA:3E:C2:EE:2C:31:F2:97:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/514199BA2112D71D72E20DCA3EC2EE2C31F2979C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/1/326130623a396534323a3a2f33322d3332203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9e42::/32
Signature Algorithm: sha256WithRSAEncryption
8c:27:35:64:a0:c1:2c:bc:59:84:71:82:a7:42:48:7e:02:a5:
23:e6:cf:df:01:5e:fb:ad:43:1a:70:d3:f8:bd:77:e6:ad:29:
dc:fa:a9:f6:44:33:64:72:d6:e3:82:01:33:32:77:0b:74:e6:
27:4d:6f:cb:c3:79:a6:b3:5f:8d:da:ee:97:b6:7c:9f:c5:17:
44:12:c9:cc:51:9a:61:95:60:15:28:fc:8c:89:4c:6b:ea:34:
78:76:f3:e3:c7:a4:3b:84:f1:2e:35:ec:db:8c:10:7c:1d:47:
d5:c9:16:af:ca:0f:55:10:6c:c5:bf:ee:fe:33:24:dd:06:ce:
52:d4:2f:dc:07:1d:ae:b0:94:d8:01:75:48:d7:ee:6d:52:02:
56:9d:81:bb:aa:6b:57:7d:e6:2c:9a:b6:19:a9:ef:7c:84:b5:
ee:9c:5e:d7:f8:6c:6a:31:b9:b0:ef:15:8c:c9:96:29:a3:a7:
5d:98:ea:5e:43:dd:ba:e7:4d:f8:5b:7a:f9:af:56:cc:a7:af:
82:55:f9:4d:3c:07:39:69:2d:ce:ba:59:b4:1e:71:e3:c6:62:
a8:b3:0b:14:29:78:c6:8a:98:e1:b0:69:02:b2:33:88:72:54:
7b:f1:b9:4f:d5:19:c8:86:dc:11:94:38:d0:33:48:91:ac:d7:
ea:1d:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org