Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634363a3a2f33322d3438203d3e20323136323839.roa
File: 326131333a656634363a3a2f33322d3438203d3e20323136323839.roa (raw, json)
Hash identifier: 7CC4yBgy97hefXfjs3zHCdwd3O9oqfjfQSpTGHeU/sk=
Subject key identifier: 0E:E1:3A:EE:FA:CC:D6:59:D9:F3:C3:9C:5E:6D:F6:37:54:A3:C7:9A
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 3CA094A989BA5FB6A55F09FD167B5A1DAAA1BD9D
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634363a3a2f33322d3438203d3e20323136323839.roa
Signing time: Fri 29 Dec 2023 14:35:22 +0000
ROA not before: Fri 29 Dec 2023 14:30:22 +0000
ROA not after: Fri 27 Dec 2024 14:35:22 +0000
asID: 216289
IP address blocks: 2a13:ef46::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a0:94:a9:89:ba:5f:b6:a5:5f:09:fd:16:7b:5a:1d:aa:a1:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Dec 29 14:30:22 2023 GMT
Not After : Dec 27 14:35:22 2024 GMT
Subject: CN=0EE13AEEFACCD659D9F3C39C5E6DF63754A3C79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:24:3d:c7:fb:a5:78:82:2c:4a:2d:19:38:
3b:0b:28:9f:60:8a:4a:24:d3:65:9d:3e:93:6a:9c:
e4:27:8d:0d:40:90:bf:d7:7c:b0:c0:9b:8a:98:80:
2f:18:78:19:6a:21:1d:79:a1:5c:2a:d6:8b:8a:eb:
12:21:4b:af:62:4c:5e:49:f3:b1:e4:70:dd:b2:95:
b9:00:b9:28:a5:73:8a:84:a4:05:dd:22:63:42:f4:
89:73:e2:4e:88:35:bc:3a:f1:1c:3f:ad:a7:99:3c:
53:70:8d:42:17:67:42:96:57:6a:ff:e1:af:9d:ff:
d7:5d:d9:4c:29:9f:6e:4e:22:86:ac:a7:de:cb:6a:
32:fb:a6:fd:90:3c:b3:e1:34:ae:93:90:d0:9b:a7:
2f:a2:2f:6b:0a:90:3f:fd:51:d5:e6:23:a0:b5:4a:
80:cf:53:c1:35:65:5d:f6:cd:c3:cc:50:64:4a:69:
73:9f:84:39:9a:eb:93:19:28:d0:71:5f:82:aa:d0:
5b:38:c4:4e:2d:4f:dd:59:2c:5f:0e:9b:db:55:91:
d4:aa:3b:02:06:20:1c:0a:72:d6:81:cb:27:ca:47:
12:65:90:f3:06:32:fb:f5:55:b0:42:53:96:e1:cf:
95:d1:14:2a:e4:0f:be:39:e9:f8:11:34:86:b8:4c:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E1:3A:EE:FA:CC:D6:59:D9:F3:C3:9C:5E:6D:F6:37:54:A3:C7:9A
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/326131333a656634363a3a2f33322d3438203d3e20323136323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef46::/32
Signature Algorithm: sha256WithRSAEncryption
66:5f:e6:9f:f4:3d:00:3f:75:6a:36:a0:e4:8d:ab:f4:f9:3e:
c9:4b:2c:9b:3f:13:5b:a0:07:e6:a2:70:a5:cf:bc:6f:41:8c:
ed:c2:ff:54:34:7c:5e:07:cd:92:c1:14:be:c6:a5:15:7d:2a:
21:4e:7f:c5:2c:44:f6:43:df:62:64:af:f3:fc:57:1f:b4:ad:
7a:2f:cf:d7:a6:a1:4b:88:ce:5c:65:1e:fe:64:8f:6c:55:42:
06:35:9f:e6:63:3a:98:ff:46:5c:0a:f1:47:a8:42:74:bb:e0:
a0:8f:73:a7:1d:e8:37:e4:12:80:26:2a:8d:06:ab:3e:aa:e3:
cc:05:4d:bd:58:95:6d:c3:99:46:8c:50:ec:4e:f6:08:6a:86:
6f:36:80:87:eb:ea:37:0c:4f:40:d5:bb:0f:72:b0:00:ed:ae:
0b:f9:60:66:35:9f:4d:33:05:e6:b3:b2:5f:20:57:ad:82:ed:
9c:38:46:67:e7:23:30:8f:56:72:f8:37:6d:9d:43:81:8f:bf:
26:dc:2e:21:46:2d:9b:be:42:bc:03:b8:a3:b5:37:df:1c:52:
59:ce:22:e9:61:e5:1b:f7:69:52:1d:61:4f:e8:e5:8f:32:22:
e5:53:97:87:b9:e8:3f:41:e5:d0:f9:81:db:f0:7c:a6:74:f1:
ad:8a:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org