Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666653a3a2f34382d3438203d3e20323136333630.roa
File: 326131333a646638343a376666653a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier: 8UOthuUrYbrSfA0dvGNiW1/H8edzoAV0QLjbH3uksG8=
Subject key identifier: 85:5C:0D:B0:E5:AA:A7:E3:D8:46:3B:17:7D:36:7E:42:41:8E:D3:77
Certificate issuer: /CN=C733D4ED636DF1253237FE26C90A8F298B550237
Certificate serial: 51903A4098045C4F72B06BDB582D41081D93B049
Authority key identifier: C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666653a3a2f34382d3438203d3e20323136333630.roa
Signing time: Sun 22 Oct 2023 01:53:48 +0000
ROA not before: Sun 22 Oct 2023 01:48:48 +0000
ROA not after: Sun 20 Oct 2024 01:53:48 +0000
asID: 216360
IP address blocks: 2a13:df84:7ffe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:90:3a:40:98:04:5c:4f:72:b0:6b:db:58:2d:41:08:1d:93:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C733D4ED636DF1253237FE26C90A8F298B550237
Validity
Not Before: Oct 22 01:48:48 2023 GMT
Not After : Oct 20 01:53:48 2024 GMT
Subject: CN=855C0DB0E5AAA7E3D8463B177D367E42418ED377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:9d:90:2d:b5:ae:6e:ab:20:64:66:62:18:
0d:b7:68:b4:5c:5a:86:42:f8:43:81:2b:6a:24:49:
75:22:d6:7e:61:9f:3e:76:d5:cb:89:d0:3e:5f:88:
c2:2d:97:57:c7:ed:5e:d7:c1:01:b5:fb:f6:df:5e:
f0:62:65:62:5f:90:23:ca:36:37:15:56:4f:32:1b:
1f:fa:77:6a:6a:af:5f:e3:79:9c:80:b4:31:34:d4:
63:a6:b8:42:f1:4e:9f:ee:2c:32:32:6a:ff:0b:fc:
c5:26:63:bc:0b:96:32:5a:6f:b2:7d:1c:cb:c1:5c:
e4:14:25:b5:8d:99:ff:61:76:75:36:fd:03:48:cd:
40:5e:73:e2:c4:9a:d2:7c:3b:24:aa:ad:be:7a:f0:
69:89:aa:9d:c0:3f:3a:7c:b8:e4:71:39:79:12:dc:
bb:63:4b:5e:52:2a:c9:b3:1b:a6:32:a1:f7:21:84:
a1:62:01:f8:68:bb:93:58:53:0e:b2:c7:5d:a9:8a:
e7:50:a5:a7:3b:07:86:d5:0f:ae:e0:9c:f0:ce:3e:
cd:cb:8e:9e:a1:8d:23:2d:ad:b7:05:58:e6:47:31:
53:6e:c0:38:ce:32:22:fb:a7:0c:68:4f:3f:c3:25:
39:3f:a0:48:7c:bd:81:47:86:6f:47:90:79:ba:ef:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:0D:B0:E5:AA:A7:E3:D8:46:3B:17:7D:36:7E:42:41:8E:D3:77
X509v3 Authority Key Identifier:
keyid:C7:33:D4:ED:63:6D:F1:25:32:37:FE:26:C9:0A:8F:29:8B:55:02:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/C733D4ED636DF1253237FE26C90A8F298B550237.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/C733D4ED636DF1253237FE26C90A8F298B550237.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7b57da9-ce2d-410c-8898-b096f7e90f50/0/326131333a646638343a376666653a3a2f34382d3438203d3e20323136333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df84:7ffe::/48
Signature Algorithm: sha256WithRSAEncryption
43:50:1d:1f:5d:5a:6b:29:5a:de:16:79:2e:1b:ac:39:89:d2:
85:45:ae:d4:7e:e0:39:73:4b:e0:e4:9f:fd:aa:04:51:4d:7e:
bd:a4:ac:07:8a:21:95:ab:0a:85:58:10:0c:5f:e7:3a:7f:50:
15:34:5a:ec:9b:91:43:7c:d6:be:67:81:56:95:eb:4e:4e:45:
a3:06:6e:30:8a:0e:8a:c5:e2:d2:c1:08:b5:6b:de:aa:83:8b:
03:c8:22:5a:be:17:2c:87:e3:c1:00:b0:25:e2:2f:d1:cc:c6:
d6:5f:d3:2c:97:a5:90:f1:66:b3:e6:57:a9:fe:9b:10:9d:1f:
47:ab:9f:8c:82:38:20:ee:68:ef:ba:a2:c1:38:09:3f:4d:a5:
f7:07:5c:c4:26:ca:ce:30:c8:6b:c3:c5:70:f5:6d:95:25:42:
1c:27:2d:2e:7b:90:3c:a3:9e:04:99:c3:05:b6:ca:af:10:91:
cc:e2:00:20:71:85:14:a6:ff:bb:fa:c6:28:cb:b7:bf:9f:48:
6c:a3:9d:0a:3b:dd:d2:2c:97:91:da:52:fe:aa:6b:ef:21:3c:
66:3a:80:b7:b1:0b:f9:0a:8d:5e:7b:fe:6d:a1:fb:51:13:6d:
f1:7b:29:08:e9:26:e6:97:22:19:a9:52:f9:6a:51:5c:fb:71:
38:41:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client