Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361353a3a2f34382d3438203d3e20323135323134.roa
File: 326130663a383563313a3361353a3a2f34382d3438203d3e20323135323134.roa (raw, json)
Hash identifier: gNHBko5tRNA7/su0jObI5GbDiW8J13ZlI0YV35z8348=
Subject key identifier: F4:B5:AA:00:46:83:E6:A2:E6:B7:AA:0A:9B:A1:37:AA:DF:FC:4F:1F
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 58581A87C32A54FD1F8AEA0059369565382E8DC3
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361353a3a2f34382d3438203d3e20323135323134.roa
Signing time: Mon 29 Apr 2024 18:16:13 +0000
ROA not before: Mon 29 Apr 2024 18:11:13 +0000
ROA not after: Mon 28 Apr 2025 18:16:13 +0000
asID: 215214
IP address blocks: 2a0f:85c1:3a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:58:1a:87:c3:2a:54:fd:1f:8a:ea:00:59:36:95:65:38:2e:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 29 18:11:13 2024 GMT
Not After : Apr 28 18:16:13 2025 GMT
Subject: CN=F4B5AA004683E6A2E6B7AA0A9BA137AADFFC4F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:da:ca:54:4f:9d:5e:5d:cd:c3:2e:91:76:
b6:25:19:d1:7b:e8:41:38:15:c6:ba:85:d5:a3:e4:
33:10:78:a2:77:b3:bf:90:e0:e2:da:e3:d0:35:2f:
9b:45:3c:09:a9:60:ae:cc:86:48:d5:f1:80:eb:12:
00:97:c0:15:49:55:1c:d1:a6:c1:95:5a:15:9b:3c:
5f:24:4f:db:05:cd:af:67:15:1a:0e:07:33:26:a5:
16:b6:20:10:ea:02:2c:8c:be:6b:5f:00:65:d6:98:
9c:3b:4f:52:f2:04:13:a1:b4:1d:e5:90:c3:02:2a:
82:60:a8:dd:cc:13:a7:83:1b:51:2c:82:4f:09:82:
03:73:4b:e1:57:b0:9d:b3:eb:47:5c:e3:a9:db:d1:
ea:21:df:c0:12:1c:e7:68:29:61:f6:5e:12:a9:85:
96:0a:6f:a0:34:d5:f7:ce:30:47:8c:8c:06:89:ac:
3d:e7:31:31:3d:54:14:34:9f:a9:7c:1e:64:f0:46:
08:e0:a7:43:ee:78:ee:9a:58:00:3f:17:a3:94:7e:
8b:19:1a:a4:f5:16:10:3e:4c:ce:cd:36:65:57:ba:
22:2d:93:20:6d:c1:29:3b:3d:fd:ae:2c:b5:2b:f6:
72:7d:1e:21:92:63:31:28:ad:5c:d1:3a:20:e1:5a:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:AA:00:46:83:E6:A2:E6:B7:AA:0A:9B:A1:37:AA:DF:FC:4F:1F
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3361353a3a2f34382d3438203d3e20323135323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a5::/48
Signature Algorithm: sha256WithRSAEncryption
26:fa:7c:68:2c:3a:fe:95:d1:40:b4:94:c5:b1:5b:6e:3c:2d:
df:63:75:d1:43:4d:0f:8a:1f:1b:97:50:37:3f:f6:e4:47:c8:
e5:da:48:e5:e9:1a:80:69:c3:e7:2a:5c:7f:57:a5:18:ff:41:
3b:38:10:af:27:d6:10:cc:24:68:7b:49:6f:83:e8:44:df:c5:
95:1d:9f:55:86:99:a7:4d:ed:17:5f:60:02:40:c9:9e:0b:83:
b7:94:dc:d6:21:6e:82:ac:b1:e2:bf:74:43:0a:a6:87:3b:81:
3b:00:fb:2c:b4:6d:e0:90:05:47:f1:25:0a:34:f7:80:a4:bd:
ed:cc:bb:d7:31:a6:91:06:23:1e:70:39:f6:c2:13:64:bf:b0:
04:a0:80:c9:93:16:ea:02:2a:1e:81:80:9b:a4:96:65:f3:3b:
4e:ac:1e:59:da:17:44:29:e9:6f:42:4c:81:4f:3a:40:da:60:
36:df:68:29:83:29:74:66:f0:0e:ce:71:e2:87:5a:6a:63:ef:
03:30:2e:a7:f8:d5:42:7a:85:d9:75:13:1d:a6:43:fb:e3:26:
db:99:22:9a:ca:b9:83:c7:56:be:7c:4f:86:96:2a:cd:3a:16:
b7:79:f7:d4:ec:9c:d9:6c:48:36:79:0b:38:41:54:85:4f:1b:
72:14:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:48 2025 by rpki-client