Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361343a3a2f34382d3438203d3e20323135323431.roa
File: 326130663a383563313a3361343a3a2f34382d3438203d3e20323135323431.roa (raw, json)
Hash identifier: 1Euca3716mRVv1uqkRvVrzTS9rttyw0Vo7+tNf6+Hck=
Subject key identifier: 44:11:E1:7A:5C:03:47:88:7A:50:D8:22:7B:10:D1:BB:AA:3C:C3:7A
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4D44AEC45059646A738FC4FF427A11549E80553E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361343a3a2f34382d3438203d3e20323135323431.roa
Signing time: Mon 25 Mar 2024 22:07:22 +0000
ROA not before: Mon 25 Mar 2024 22:02:22 +0000
ROA not after: Mon 24 Mar 2025 22:07:22 +0000
asID: 215241
IP address blocks: 2a0f:85c1:3a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:44:ae:c4:50:59:64:6a:73:8f:c4:ff:42:7a:11:54:9e:80:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 25 22:02:22 2024 GMT
Not After : Mar 24 22:07:22 2025 GMT
Subject: CN=4411E17A5C0347887A50D8227B10D1BBAA3CC37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:d2:f6:75:4f:c8:d0:77:2a:f0:d8:b7:7e:
a6:52:97:de:f7:50:38:44:63:a3:bc:eb:29:14:9b:
f1:29:64:ad:da:82:5f:f9:00:1e:17:17:71:98:5b:
ba:56:47:0f:c5:3d:fe:11:b5:a2:86:61:bb:0b:80:
e3:15:9a:b4:84:b2:51:c0:ec:80:1e:1c:71:24:56:
29:d2:4d:22:b0:49:88:06:a9:fb:b1:bf:32:2f:4e:
0f:e1:0c:97:4d:bd:69:ee:a2:d8:dc:08:66:1b:d3:
ee:46:42:18:c9:1f:dd:99:16:54:57:1c:c4:97:80:
b6:bf:de:52:dd:18:c3:94:18:3a:6f:7a:01:44:54:
7d:72:29:6b:e5:b8:de:00:b7:ad:cc:be:f1:a9:78:
17:f1:9a:bc:10:6b:27:61:f6:5d:63:0a:24:74:88:
06:ac:55:0d:15:60:b4:0f:c2:a3:9d:aa:98:43:f4:
17:37:78:86:bb:c8:b4:3a:7c:11:c7:e4:aa:9c:41:
02:7a:4e:8c:03:2a:b6:7a:44:f4:34:f7:02:45:a9:
39:f6:59:1b:7e:aa:e1:47:16:0b:e0:4f:9f:d1:dd:
51:8d:65:93:9a:e0:2d:c0:ff:b3:5b:ce:a5:f6:67:
7e:3e:88:f9:63:34:90:57:1a:a1:3c:c0:67:46:ac:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:E1:7A:5C:03:47:88:7A:50:D8:22:7B:10:D1:BB:AA:3C:C3:7A
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361343a3a2f34382d3438203d3e20323135323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a4::/48
Signature Algorithm: sha256WithRSAEncryption
58:b0:f7:d9:35:12:38:23:74:ff:6a:43:ed:b2:f1:5d:13:b7:
5d:f0:98:44:d3:b5:35:e4:04:13:8d:db:c8:5c:ec:0b:22:19:
96:68:76:4b:1d:ac:4d:64:c1:97:e3:bb:d4:31:99:9d:7c:22:
e3:ca:99:64:9a:d1:46:0f:b6:40:b2:88:23:42:08:52:36:14:
f9:1a:6c:85:56:fc:2e:b7:dd:98:f9:c2:fc:99:7b:5a:f6:bd:
93:f7:d9:54:1b:8e:96:39:7a:83:c4:eb:e6:9d:51:37:9f:d9:
2a:60:17:c1:59:be:9d:87:a6:ec:b1:1d:20:8f:1a:79:cd:03:
56:3b:f2:40:86:cf:47:ce:00:c5:9e:13:e1:03:1a:88:9a:31:
12:e8:05:30:f0:c6:d3:5b:0b:af:2f:9c:7b:12:74:88:74:81:
47:c0:19:db:34:4a:00:64:27:76:d5:ef:d3:35:58:36:ff:e5:
bc:ff:f5:2d:27:80:fb:f9:93:de:d5:a1:12:fe:e3:c5:1c:4e:
80:cd:c5:ad:a6:f7:59:d0:3f:cc:44:74:cd:b0:e8:ba:c5:84:
43:a4:8d:da:b0:91:52:8d:9b:df:bd:9c:73:fd:83:e6:a0:b6:
91:37:20:5a:0e:9d:8d:8f:d6:e1:47:61:0a:6f:48:17:f7:be:
50:1f:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:34:03 2025 by rpki-client