Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3a2f34382d3438203d3e203231393931.roa
File: 326130663a383563313a3a2f34382d3438203d3e203231393931.roa (raw, json)
Hash identifier: o2iomGRtzD+y2/uk5BmuKYBz6r6ZUo0E/TCbY+FHLv0=
Subject key identifier: 17:C0:A4:96:30:7F:72:3C:5E:20:1E:A7:9A:4F:B0:3F:72:1F:0C:4C
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4EB1906C5A4622102C03DD10B58FC1901B8737A6
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3a2f34382d3438203d3e203231393931.roa
Signing time: Wed 13 Mar 2024 04:47:40 +0000
ROA not before: Wed 13 Mar 2024 04:42:40 +0000
ROA not after: Wed 12 Mar 2025 04:47:40 +0000
asID: 21991
IP address blocks: 2a0f:85c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b1:90:6c:5a:46:22:10:2c:03:dd:10:b5:8f:c1:90:1b:87:37:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Mar 13 04:42:40 2024 GMT
Not After : Mar 12 04:47:40 2025 GMT
Subject: CN=17C0A496307F723C5E201EA79A4FB03F721F0C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:c4:d1:4a:33:69:eb:be:53:c0:be:eb:f3:
6a:58:9c:36:26:67:e6:bb:fc:1f:0d:2b:6c:d2:90:
a7:62:5f:ad:b0:39:db:ad:c9:cf:c9:10:ee:7a:11:
38:3c:d5:f4:66:38:17:98:25:35:14:13:ba:cf:10:
90:00:83:c2:93:24:a0:f5:a7:6e:4d:1c:48:42:cc:
68:49:08:fa:e1:5a:79:88:5c:29:6c:f9:36:b3:72:
17:36:33:fb:0d:a1:ed:3c:61:a0:bd:c8:22:c6:87:
d3:ef:e3:00:df:1e:ec:4f:89:74:fa:d7:99:f6:02:
18:ec:0a:5d:b7:4b:05:6b:e9:72:c9:ea:69:a4:6b:
f9:df:67:ee:7e:40:ef:e2:6d:6e:0b:32:08:07:f9:
e3:d2:cf:ad:5a:62:19:14:2a:70:8f:be:68:62:7d:
7e:2d:f3:19:de:fd:0a:e7:5d:c0:08:21:e1:6e:ca:
3f:cd:0a:51:98:53:57:59:0c:63:41:8d:41:0f:a2:
1d:8e:01:e2:c8:9c:6e:e4:5a:4d:2e:e8:d8:f1:5b:
c6:c2:95:b7:f4:08:56:0c:fe:7e:7e:15:ca:7e:64:
fb:fd:a9:f7:c9:06:2e:db:0c:d5:1d:91:3c:2e:67:
2f:e5:a5:a1:87:74:74:37:4e:77:8b:bc:3f:7a:d1:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:A4:96:30:7F:72:3C:5E:20:1E:A7:9A:4F:B0:3F:72:1F:0C:4C
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3a2f34382d3438203d3e203231393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1::/48
Signature Algorithm: sha256WithRSAEncryption
8a:82:00:ae:e4:5c:21:de:96:e8:d1:70:bf:b0:43:83:35:7e:
71:81:22:73:ee:31:1f:19:1a:62:2b:8e:31:d3:63:9b:fa:f5:
43:28:ba:90:19:e4:90:28:c6:fa:2e:71:c6:e8:21:b8:cb:bb:
8c:61:f1:2d:f3:1b:70:02:f5:8a:ee:d2:f6:47:5a:f4:9e:b2:
1b:5b:6b:96:19:27:ae:6a:31:1f:d3:f6:b1:fa:be:3b:0a:d1:
56:a6:13:29:52:6c:40:f4:be:c8:4b:ea:a1:ff:da:58:48:3b:
8f:14:62:33:43:df:4d:66:75:d3:a5:2b:4c:8a:24:08:d0:1f:
09:26:db:8c:0a:e2:f0:d1:c1:48:ba:ea:84:5e:37:43:4d:b2:
c6:80:39:4e:fe:58:7d:9e:8d:dc:08:71:7a:04:33:3c:08:69:
e2:7d:b2:15:92:b2:90:84:36:a3:0c:59:35:78:ef:95:d1:cc:
47:7c:0a:40:ac:60:90:e1:87:86:3d:03:92:14:e5:e0:b9:f4:
63:4e:f3:1e:2d:c1:cf:8f:10:84:ff:a9:35:a7:31:83:87:ec:
91:74:25:47:59:01:83:27:71:94:b0:9f:ae:47:ef:b0:33:83:
d2:13:04:50:e8:de:68:79:cc:d2:57:0e:38:e3:df:fd:20:14:
e9:dc:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:39 2025 by rpki-client