Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634343a3a2f33382d3338203d3e20323136333938.roa
File: 326131333a656634343a3a2f33382d3338203d3e20323136333938.roa (raw, json)
Hash identifier: 0tnY+YPqWkhSf4ujI1Pn7x4JrZD92/Hu0JppJI0nWK4=
Subject key identifier: 19:B9:2C:65:35:A1:97:F1:04:4D:C2:57:FB:A8:06:6C:0E:CC:8D:A3
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 43DCEC80D064566DB7CB26F9FA0B8AD1A3BC3073
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634343a3a2f33382d3338203d3e20323136333938.roa
Signing time: Tue 26 Dec 2023 14:44:17 +0000
ROA not before: Tue 26 Dec 2023 14:39:17 +0000
ROA not after: Tue 24 Dec 2024 14:44:17 +0000
asID: 216398
IP address blocks: 2a13:ef44::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:dc:ec:80:d0:64:56:6d:b7:cb:26:f9:fa:0b:8a:d1:a3:bc:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Dec 26 14:39:17 2023 GMT
Not After : Dec 24 14:44:17 2024 GMT
Subject: CN=19B92C6535A197F1044DC257FBA8066C0ECC8DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:7d:4f:35:e9:79:da:15:e6:bb:8b:7e:da:
22:40:0d:de:cc:6d:59:02:5b:69:77:f6:5c:38:93:
3a:49:8e:e0:72:cf:1d:ba:bd:fd:02:6e:ca:3e:43:
4e:09:c8:9c:75:e0:f3:3d:5c:57:6d:ab:d5:44:5d:
44:49:39:1c:c8:51:ed:01:1f:7b:83:64:98:95:ab:
dc:ba:94:cc:e9:89:d6:2c:af:7e:7e:6f:71:e2:6a:
bc:2b:c0:b8:0b:0a:12:47:c9:a8:e5:3f:98:38:36:
2c:5f:ac:c5:5b:6d:27:f6:cf:32:44:42:c0:f5:18:
eb:b2:df:5d:f3:72:d2:23:78:96:3c:64:74:9e:be:
e9:72:6a:3c:dc:ab:ba:b7:9c:80:fb:21:93:6a:63:
05:a7:18:9f:89:db:d5:68:90:87:70:ab:03:50:ef:
03:73:ed:85:e5:3c:a3:32:0e:4a:96:e5:ca:93:7c:
3d:4d:63:94:1b:e3:d7:7c:e3:6d:1c:2b:ac:67:e3:
a8:8a:4e:db:3c:09:9f:a6:43:8c:98:90:ad:2d:1f:
7d:83:2c:2d:b2:27:ff:9a:25:77:61:4b:df:de:16:
71:e1:50:ef:e0:c6:57:17:2f:0e:50:f7:b0:1e:cb:
b0:a9:fb:80:46:5b:5f:00:19:e4:08:88:64:c2:b4:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:2C:65:35:A1:97:F1:04:4D:C2:57:FB:A8:06:6C:0E:CC:8D:A3
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634343a3a2f33382d3338203d3e20323136333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef44::/38
Signature Algorithm: sha256WithRSAEncryption
8a:8e:d1:75:a3:f0:09:a5:2c:85:3d:54:e7:d8:83:2a:6a:22:
fe:fb:64:8c:17:57:54:99:22:8e:de:3e:d6:3d:a5:13:0d:77:
c2:1f:ea:15:81:e0:db:d3:ca:56:3e:82:3c:c3:d7:d7:91:4a:
2c:ca:96:9d:df:64:4f:ff:ed:c9:2e:1b:42:f9:34:1c:73:11:
d0:d0:b4:81:75:65:04:ec:e5:17:f7:89:42:5c:97:44:e9:8c:
70:d0:95:76:d9:48:12:2a:3b:52:17:69:ff:2a:e9:8f:16:e9:
29:2a:11:4b:c0:20:03:54:8e:e4:e7:72:f0:2c:0d:e3:55:04:
91:a5:f6:11:21:90:2e:65:25:40:67:43:d9:c2:8e:d5:8a:83:
73:ea:c0:82:65:7b:52:86:fd:f2:48:dc:91:67:ba:03:4d:71:
66:d7:97:aa:99:90:be:f0:bf:bb:e2:f1:e9:d4:e7:62:29:ea:
00:c5:10:6b:fe:a1:74:91:d2:d2:78:bd:34:b0:1f:2b:84:5c:
28:92:8f:e1:f5:c8:68:1a:db:be:50:24:3a:b8:c9:4f:52:5d:
70:66:22:57:8a:ca:6a:dc:2b:41:ed:c4:eb:d5:1f:1d:45:0d:
eb:c9:38:e8:1e:7a:1f:e6:ca:bd:36:ca:c5:a8:3c:f4:9e:70:
a7:ec:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org