Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362653a3a2f34382d3438203d3e20323135313131.roa
File: 326130663a383563313a3362653a3a2f34382d3438203d3e20323135313131.roa (raw, json)
Hash identifier: eAQiixnc77Zb4bzV+jHrabons/XQMW3TopbgrugcL/s=
Subject key identifier: 64:18:86:E4:64:CB:B3:D6:D5:2A:63:70:1F:3A:1B:41:8C:84:F2:5B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2DC3F56B5CAB551306D2718826717EA11EFB00B9
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362653a3a2f34382d3438203d3e20323135313131.roa
Signing time: Sun 14 Apr 2024 19:03:09 +0000
ROA not before: Sun 14 Apr 2024 18:58:09 +0000
ROA not after: Sun 13 Apr 2025 19:03:09 +0000
asID: 215111
IP address blocks: 2a0f:85c1:3be::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c3:f5:6b:5c:ab:55:13:06:d2:71:88:26:71:7e:a1:1e:fb:00:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Apr 14 18:58:09 2024 GMT
Not After : Apr 13 19:03:09 2025 GMT
Subject: CN=641886E464CBB3D6D52A63701F3A1B418C84F25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:1c:3c:c9:26:b1:6b:a0:9a:ee:3c:98:b8:
c3:71:b7:48:58:4a:49:5f:52:ab:d9:b0:73:16:8a:
ee:53:61:ac:46:20:9d:50:dc:f0:b8:2e:3f:83:fc:
54:36:23:0b:86:29:f8:a8:4f:45:1a:93:ff:b5:22:
d7:9a:94:4f:f8:f5:03:79:9a:06:c1:52:33:02:6a:
8d:18:ae:69:6f:23:91:63:ad:18:b3:b4:5f:ad:17:
7a:9c:98:5a:d9:78:20:b0:a8:9d:62:9c:d0:07:6b:
4f:d8:d6:d8:e4:b2:6d:14:44:fa:b4:e9:4b:d9:06:
39:ce:2e:f1:f2:56:f4:03:49:9f:8c:35:12:ad:c6:
c4:9f:2f:7f:2c:ac:35:a3:67:ce:68:72:4f:86:4c:
d1:94:7b:9c:b2:1d:e8:54:e1:4d:a7:6b:21:13:07:
54:a5:a8:86:35:5f:7a:dd:f4:af:09:ba:e1:f4:3a:
eb:de:bb:30:c3:4a:d5:4b:be:ef:5b:a2:e1:62:4b:
4f:cd:bd:43:ea:aa:ce:83:95:8e:db:c4:3b:23:2b:
76:b0:c3:62:a7:dc:b6:07:93:53:d0:9d:c1:85:08:
69:59:e3:98:4d:9c:76:36:20:6d:86:05:4f:61:f0:
16:35:ae:bf:f3:9f:df:1d:cb:ef:06:c4:ff:10:16:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:18:86:E4:64:CB:B3:D6:D5:2A:63:70:1F:3A:1B:41:8C:84:F2:5B
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362653a3a2f34382d3438203d3e20323135313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3be::/48
Signature Algorithm: sha256WithRSAEncryption
74:3c:ae:13:61:f0:d4:a4:d8:c4:ee:1d:6e:ea:89:36:da:48:
23:57:1f:06:ec:c6:3a:81:f8:d4:5f:42:54:11:c6:77:b2:16:
d2:60:e4:91:14:cb:e3:47:81:49:23:33:6d:fb:0d:a0:0f:2e:
4e:f3:d2:0e:ab:7d:19:80:4d:46:92:44:a9:ae:51:c1:11:7c:
fd:97:f8:7c:3c:1a:e1:ed:ea:3e:32:6f:2f:c7:fd:c3:98:af:
aa:65:3e:58:9f:1e:9f:c6:1e:2c:7a:70:9a:c6:e1:d7:7c:ca:
88:9a:eb:03:33:a7:cf:00:77:6a:8a:d1:2a:97:ea:9e:e1:92:
b9:e9:c4:0d:3a:3a:fd:fe:ea:30:ce:69:f2:83:27:17:72:5e:
ee:4a:d1:41:46:8c:15:79:74:3e:3e:98:55:50:fa:51:bc:3f:
8b:23:82:db:87:5d:33:e5:1e:bb:58:44:81:0f:56:ca:bf:89:
a6:43:a2:06:b7:e9:b0:5a:8e:fe:21:84:9f:de:bd:70:5e:48:
7b:cc:36:8f:aa:5c:58:53:d2:83:0b:7a:f9:b0:8e:4b:69:f4:
0d:7a:ee:13:4a:63:d7:e7:d0:c7:83:f9:46:1a:88:a8:98:35:
d1:84:ce:57:65:74:bf:15:fa:04:c1:b7:a1:70:bb:1c:65:14:
de:df:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:51 2025 by rpki-client