Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3430303a3a2f34302d3438203d3e20323136333336.roa
File: 326130663a383563313a3430303a3a2f34302d3438203d3e20323136333336.roa (raw, json)
Hash identifier: 7uBB4GJjCmZnSJrVhFzUdBKW52qWH0zrPzCMpNTeWbI=
Subject key identifier: E0:34:D9:A0:9E:42:44:33:F6:EF:07:36:5C:15:F5:AC:1B:55:84:38
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4F09B3B94F2DB350B0799599228482C397FAE259
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3430303a3a2f34302d3438203d3e20323136333336.roa
Signing time: Tue 10 Oct 2023 15:20:03 +0000
ROA not before: Tue 10 Oct 2023 15:15:03 +0000
ROA not after: Tue 08 Oct 2024 15:20:03 +0000
asID: 216336
IP address blocks: 2a0f:85c1:400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:09:b3:b9:4f:2d:b3:50:b0:79:95:99:22:84:82:c3:97:fa:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:15:03 2023 GMT
Not After : Oct 8 15:20:03 2024 GMT
Subject: CN=E034D9A09E424433F6EF07365C15F5AC1B558438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:a4:b8:a0:e7:11:bb:65:c0:8c:a5:a4:36:
13:83:7c:ec:76:90:46:e2:63:e7:7b:21:eb:3a:23:
e8:42:98:7c:d9:ca:5c:f5:97:e0:1e:f2:ea:89:ca:
8c:63:ad:dc:bf:18:2a:73:0d:9d:82:1c:c0:84:81:
39:a8:d5:71:ad:f0:85:37:3d:64:83:cf:52:da:b7:
ac:c8:c3:c7:af:fd:bf:24:e1:59:45:1a:82:33:7d:
07:6b:93:7d:44:17:47:4b:27:ba:82:db:4d:04:21:
7c:18:70:0d:e9:f0:7d:01:93:d9:33:d2:50:d8:0e:
17:38:17:8b:10:c8:46:a2:ee:f0:b0:0c:1f:64:2b:
63:43:34:1e:24:fa:4c:a1:f6:21:e4:57:13:66:a4:
48:77:e4:6a:17:13:7b:0b:76:e1:bf:46:d6:c7:9a:
33:22:d8:0f:13:dc:88:11:6b:24:bb:82:5e:d1:75:
39:8e:46:91:67:e2:be:91:f7:f3:fa:50:53:f4:b6:
b6:c5:ab:67:d2:d6:e5:49:80:b5:25:e7:03:41:55:
fe:dd:b5:f6:30:65:3e:26:34:a0:02:90:8f:22:04:
30:35:de:bc:65:68:71:55:df:8a:80:58:58:bf:61:
bc:5f:67:0a:e4:e8:0b:7d:e0:b0:71:a4:31:99:38:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:D9:A0:9E:42:44:33:F6:EF:07:36:5C:15:F5:AC:1B:55:84:38
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3430303a3a2f34302d3438203d3e20323136333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:400::/40
Signature Algorithm: sha256WithRSAEncryption
09:31:33:de:2c:f2:a4:7d:3d:16:17:a6:25:19:26:bd:45:b4:
bd:5d:0f:60:b8:cd:e7:b1:1b:32:26:38:94:53:bf:d5:56:73:
0b:85:12:b3:7b:48:66:03:d9:ea:63:2d:ad:a6:15:2e:e0:2c:
36:75:f9:10:70:8d:c5:fc:e3:31:c7:db:42:3b:66:84:40:ba:
8b:d6:d0:41:8a:42:5a:14:e6:44:e8:37:b9:24:f4:64:0e:7d:
91:b0:18:c3:cb:c2:4a:4c:a1:ad:02:e3:f7:26:7a:f3:26:52:
7a:7c:11:d8:56:64:a8:fd:d7:03:80:30:92:45:8e:b5:be:e9:
68:9a:a8:15:cf:07:e1:cf:fe:ea:a6:b5:f1:c1:d1:90:34:67:
1d:8a:f1:76:b2:14:19:b7:6a:05:53:9d:4f:ef:df:4a:b1:37:
78:1a:ec:05:0c:d1:a4:93:22:66:03:fc:25:0d:54:67:07:08:
45:a8:ec:ea:85:fd:11:0e:80:0e:41:83:f9:53:d3:c1:c7:80:
83:58:f8:1f:56:94:96:c9:8f:26:d7:4f:20:8c:a5:70:c7:6b:
34:ff:b3:aa:df:a4:9e:ae:00:ab:09:67:8f:e6:35:0e:b0:7d:
fd:e2:7a:41:21:cc:a1:26:ca:b1:dd:72:82:8e:1d:51:f7:a4:
55:0b:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:49 2025 by rpki-client