Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
File: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (raw, json)
Hash identifier: xXkINEdcWYTbS63c2j93o0fs98G6vCeb/fNWHZjyzVg=
Subject key identifier: DD:55:C8:76:63:8B:AB:7D:BE:36:10:5F:A5:8E:B0:9E:12:8F:B3:74
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 51516E64FE4088B0002044F3489D2DEF29FEB7D0
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
Signing time: Sat 29 Apr 2023 09:43:14 +0000
ROA not before: Sat 29 Apr 2023 09:38:14 +0000
ROA not after: Sat 27 Apr 2024 09:43:14 +0000
asID: 57238
IP address blocks: 2a03:2780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:51:6e:64:fe:40:88:b0:00:20:44:f3:48:9d:2d:ef:29:fe:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:38:14 2023 GMT
Not After : Apr 27 09:43:14 2024 GMT
Subject: CN=DD55C876638BAB7DBE36105FA58EB09E128FB374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:8a:d9:48:3e:58:7c:de:db:bc:50:e2:3f:
9c:90:9c:85:e9:cf:69:1c:84:a6:b6:34:87:ef:61:
19:fd:30:86:ab:ea:2b:63:16:f4:6a:a4:97:59:7d:
03:fb:9e:a4:1a:ee:4d:47:6a:53:cd:85:e0:e3:fc:
5d:4c:9a:bf:ac:bc:5c:96:4d:04:7d:ce:6f:0b:65:
6e:9b:f0:5f:81:2b:09:09:ca:b0:97:e7:f9:27:27:
22:9d:61:53:d6:bb:dc:75:a5:bb:d7:5f:c7:cc:1c:
56:53:9a:ae:76:9d:8e:d8:51:4d:2c:f9:b1:83:d7:
4b:ab:2a:32:f5:ab:a8:27:4f:bb:05:da:77:df:5c:
f7:1c:9a:ca:f5:34:75:3f:62:93:1e:2e:69:20:c2:
60:48:98:d4:bb:07:0f:05:7b:ea:12:fc:be:df:e1:
2b:24:db:1c:19:ad:48:84:24:00:32:57:c3:19:06:
69:39:22:9a:e0:2f:10:d2:25:d9:a4:40:d7:53:fc:
64:2d:0d:f4:6a:63:7a:7a:57:f2:8a:79:b4:69:fb:
a9:cd:b1:a9:98:e3:79:15:3a:57:e4:28:77:00:bd:
44:41:ec:72:18:57:51:b0:ee:43:f7:2a:a5:d2:c5:
40:fa:13:60:2d:20:29:b2:3c:31:be:93:ab:bb:50:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:C8:76:63:8B:AB:7D:BE:36:10:5F:A5:8E:B0:9E:12:8F:B3:74
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/326130333a323738303a3a2f33322d3332203d3e203537323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2780::/32
Signature Algorithm: sha256WithRSAEncryption
30:a9:48:50:36:20:2b:b1:4f:a4:a9:c6:2a:d8:94:f6:e0:31:
7c:38:78:94:e8:61:fe:a0:4f:d1:4f:d9:e8:29:d6:0d:ac:cf:
67:35:6b:ad:d1:cf:a8:1d:88:02:4e:70:9c:4d:30:01:a0:bb:
2d:c1:eb:0b:86:ca:79:42:ae:21:6c:82:ca:d9:35:7b:4a:f4:
e2:ea:81:90:79:09:2b:d0:b5:76:e1:65:bc:5e:3d:8d:99:89:
ee:fd:ba:47:55:dc:5a:62:c5:5d:95:11:91:c9:cb:da:e1:86:
d8:4d:3a:08:ee:b4:de:51:a5:33:0f:dd:25:82:63:6c:e0:bf:
6d:6b:5f:03:48:46:0e:07:4a:86:7a:b3:c8:a4:b2:65:18:99:
69:7f:2f:17:3a:d1:d8:f9:93:94:ef:09:28:ad:d6:c9:b8:0d:
8b:c1:37:db:0f:72:cc:b3:02:d5:6e:91:ba:d3:80:ca:a6:5f:
b1:e0:e3:af:69:df:6e:0a:cf:4a:08:3b:9a:02:ee:f6:9c:2d:
f9:fb:2a:39:84:e6:49:4f:fe:66:00:22:d5:cf:1f:68:8a:5d:
e7:06:96:56:ae:aa:96:10:ec:e5:dc:c9:20:7c:a5:6f:c4:53:
3d:00:9c:81:98:23:43:ba:f2:51:4a:5c:fd:30:39:b9:7a:0c:
ad:c1:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org