Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634303a3a2f32392d3239203d3e20323136333938.roa
File: 326131333a656634303a3a2f32392d3239203d3e20323136333938.roa (raw, json)
Hash identifier: AVMVpSekOrO5+Eix9jlqxGleCv9STmnIylnCihyMQII=
Subject key identifier: DB:5A:9F:25:E9:E5:2D:FF:2A:E9:78:58:A6:8E:A5:47:8F:68:8F:A0
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 0FFCCA61FC11B653DCEF5C676D18563911B683F3
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634303a3a2f32392d3239203d3e20323136333938.roa
Signing time: Tue 26 Dec 2023 14:44:18 +0000
ROA not before: Tue 26 Dec 2023 14:39:18 +0000
ROA not after: Tue 24 Dec 2024 14:44:18 +0000
asID: 216398
IP address blocks: 2a13:ef40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fc:ca:61:fc:11:b6:53:dc:ef:5c:67:6d:18:56:39:11:b6:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Dec 26 14:39:18 2023 GMT
Not After : Dec 24 14:44:18 2024 GMT
Subject: CN=DB5A9F25E9E52DFF2AE97858A68EA5478F688FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:9d:34:68:0a:e8:f6:0d:ce:28:dd:c4:1a:
7e:26:3d:11:9d:a6:71:5f:6b:98:dc:b6:99:91:61:
ab:e9:ae:3a:b5:4e:7b:d2:3c:49:f8:c9:6d:93:2a:
41:8d:a5:f7:29:4e:66:db:99:1b:64:bf:45:44:14:
44:bb:64:9f:47:27:2b:71:6a:d0:49:61:40:a3:39:
ee:b3:c5:ce:c2:4b:2a:7f:0b:91:91:b9:ca:0e:28:
a5:02:5c:1f:1a:e7:3c:7a:80:bf:7a:ba:c8:be:c8:
da:3e:95:b2:46:91:66:22:fd:1e:7c:6b:76:b5:02:
f6:30:9e:1d:7a:59:b7:f4:94:e5:c6:75:c7:c6:fe:
62:fa:48:84:ad:db:b8:bc:12:58:81:da:dd:67:cb:
95:8e:fc:3f:14:a0:83:9e:84:23:12:b1:4a:62:e6:
46:b9:50:e9:69:11:73:d8:df:1f:f3:bf:1c:12:28:
f3:56:46:75:00:89:b0:62:27:fb:dc:9e:f5:53:85:
f5:17:65:88:3b:55:e3:b1:79:ba:0f:01:41:e7:0b:
ad:d1:5b:de:82:85:6f:ef:d2:0c:f5:94:6b:d2:85:
5e:e7:88:e7:c3:23:00:04:e3:91:5c:14:07:f0:cc:
ef:b3:db:49:ef:9d:64:13:75:89:2c:61:06:1d:ec:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:9F:25:E9:E5:2D:FF:2A:E9:78:58:A6:8E:A5:47:8F:68:8F:A0
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634303a3a2f32392d3239203d3e20323136333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
9f:85:12:93:57:f1:8e:39:ab:a9:8e:2b:d9:cd:d4:f4:71:06:
fb:53:e0:d8:be:6c:68:db:2c:1c:0e:8b:82:9f:7b:6f:e1:d7:
7e:93:f4:b5:1b:36:59:15:59:db:ca:b7:79:d8:4b:5b:99:09:
45:96:b2:9d:90:5b:7f:3d:33:21:d9:67:f6:81:2c:16:d9:39:
87:c1:9a:75:ea:1b:08:91:2d:c6:8e:2b:7b:69:8d:8b:13:fe:
4b:4e:5c:84:60:49:ae:1c:73:ba:a9:89:d2:7d:61:e6:23:44:
79:62:7f:58:c7:52:91:6a:ca:56:b2:93:5d:7a:e2:95:5c:18:
d4:58:9c:58:80:d8:2b:6b:e5:a7:84:3e:c4:72:86:3b:0f:e6:
15:af:1b:7b:4e:59:52:71:c3:7a:38:69:ce:75:9b:10:9a:89:
49:dd:56:f6:aa:d1:40:2a:d7:e4:83:4d:b0:f1:b4:4f:d2:58:
d0:6f:0d:42:84:af:12:22:fa:28:c1:3d:58:50:f4:e3:fc:96:
48:7d:be:00:15:e5:cb:63:99:e2:18:d9:a1:96:85:0d:fb:72:
76:4c:df:75:15:42:ee:cf:83:4b:bb:fd:34:0d:d7:63:d6:a5:
ba:7a:4f:bb:ec:1c:e4:ef:c1:f5:8b:4a:dd:13:e4:d2:3e:16:
c6:ed:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org