Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563333a3939393a3a2f34382d3438203d3e20323037383431.roa
File: 326130663a383563333a3939393a3a2f34382d3438203d3e20323037383431.roa (raw, json)
Hash identifier: UZtHZa6TSU3krz9zsZ6Um8Tl1ligi0ur8w0P8GhQ65c=
Subject key identifier: 2A:B7:2A:60:9C:12:05:D5:9B:14:7E:BE:70:51:C1:2A:F5:96:69:70
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 51D1AF5E6FE54EE3296A2256385C02F58C236DB1
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563333a3939393a3a2f34382d3438203d3e20323037383431.roa
Signing time: Tue 07 Nov 2023 16:06:12 +0000
ROA not before: Tue 07 Nov 2023 16:01:12 +0000
ROA not after: Tue 05 Nov 2024 16:06:12 +0000
asID: 207841
IP address blocks: 2a0f:85c3:999::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d1:af:5e:6f:e5:4e:e3:29:6a:22:56:38:5c:02:f5:8c:23:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Nov 7 16:01:12 2023 GMT
Not After : Nov 5 16:06:12 2024 GMT
Subject: CN=2AB72A609C1205D59B147EBE7051C12AF5966970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:fe:d7:34:b0:f2:50:94:bf:2f:b7:ad:3b:
45:1e:31:a3:bd:16:b5:4c:77:3f:e1:2c:09:d0:21:
f1:cd:95:1c:7b:8d:42:76:28:68:37:cf:48:f9:45:
cd:a9:82:58:a6:42:9b:e6:c0:f8:ba:79:cd:84:eb:
41:55:3f:9c:62:c1:27:05:90:15:bd:fc:da:04:e2:
32:50:57:78:25:e1:c4:2b:d2:b1:bf:66:ea:c9:b2:
8d:c3:ba:24:5b:6d:a7:9a:4a:1d:cf:18:b5:a5:c0:
01:dd:ea:37:e6:88:34:8e:22:d2:9e:c6:88:8b:42:
05:aa:da:5e:fc:66:60:25:7f:cd:7b:86:b1:c6:11:
b4:02:53:b0:fd:92:3b:60:74:05:61:f8:f4:e4:18:
a0:20:33:cd:23:69:61:b1:ef:89:f8:a6:d7:0c:57:
e5:1c:9e:1d:f7:7d:4c:90:02:9b:53:15:6c:b1:01:
ea:d1:20:9e:ca:b4:d4:ad:ab:bb:6d:fd:48:9f:34:
1f:d2:e9:26:04:25:59:08:00:cd:89:80:d1:fb:cc:
8a:b7:76:ae:e1:1c:bf:8d:4e:93:4c:40:4f:15:2d:
a0:c6:88:f0:da:07:ef:60:b5:76:23:44:8c:84:f8:
a9:a3:55:ee:4d:49:8b:08:e0:08:63:94:de:44:47:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:2A:60:9C:12:05:D5:9B:14:7E:BE:70:51:C1:2A:F5:96:69:70
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563333a3939393a3a2f34382d3438203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c3:999::/48
Signature Algorithm: sha256WithRSAEncryption
2d:ce:26:2b:2c:cd:e3:75:68:c9:90:08:5a:22:f2:bc:79:09:
8e:43:b3:2a:c9:90:17:34:d4:44:53:bf:bb:61:01:4f:41:ae:
f7:84:31:d7:e1:af:f5:7b:eb:65:1f:af:51:4c:3e:d7:5e:38:
de:c0:fb:65:a7:55:67:a7:d1:87:98:4a:76:88:d4:8a:db:c2:
0c:95:70:d6:1d:65:79:3d:69:f5:65:59:ac:a5:e7:11:90:76:
9a:23:48:18:c5:3d:55:cf:9d:4e:1b:7a:d1:b3:3b:a5:e6:11:
32:5b:e3:7a:e8:9d:bf:1f:46:ce:78:f4:14:c2:9a:e3:47:47:
df:f6:8b:29:79:91:07:f1:c8:ce:18:88:7e:69:06:43:eb:ad:
6c:eb:98:fc:5c:1e:aa:b4:87:d7:00:0a:c7:92:23:67:a4:e6:
6d:02:67:43:81:ad:76:24:08:df:9c:68:71:a4:94:c9:47:e1:
1a:80:34:8a:e7:5d:c6:a5:96:c7:cc:2c:1c:56:80:c1:9b:68:
41:a9:38:62:1e:41:11:3b:41:eb:9d:d7:1f:22:1d:5b:28:26:
cf:87:48:e8:f4:4b:7b:cd:d1:dd:22:39:d4:a3:e3:ea:4d:f0:
3b:b5:ab:dd:67:ec:95:58:68:09:f5:99:ec:92:b7:a4:70:fd:
03:63:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:29 2025 by rpki-client