Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa
File: 326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa (raw, json)
Hash identifier: DJP+JPvNZ9UDylBvEY/TziV8W4znUro8rrMhA1ktrQo=
Subject key identifier: 71:42:BC:FE:BA:56:52:93:D9:C9:BF:54:62:75:EE:B9:B3:D4:0F:D5
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 3E82D47A066EA1F40C6B21FBEBAE13022B27B529
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa
Signing time: Mon 10 Jun 2024 09:09:44 +0000
ROA not before: Mon 10 Jun 2024 09:04:44 +0000
ROA not after: Mon 09 Jun 2025 09:09:44 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac70::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:82:d4:7a:06:6e:a1:f4:0c:6b:21:fb:eb:ae:13:02:2b:27:b5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 10 09:04:44 2024 GMT
Not After : Jun 9 09:09:44 2025 GMT
Subject: CN=7142BCFEBA565293D9C9BF546275EEB9B3D40FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:e8:70:71:5b:83:8a:97:8d:a7:51:8c:f1:
21:97:68:39:31:7c:c3:8e:c5:65:46:ee:0e:50:e7:
a1:c7:46:0e:02:8b:88:d8:e7:49:72:b0:25:02:0d:
de:48:9b:d5:7b:8f:b9:9a:31:2b:34:b3:54:09:1e:
03:32:5b:1b:4c:f2:99:41:f5:38:15:b4:d4:f3:ff:
d4:6d:69:97:ad:eb:48:53:27:08:fd:c4:0c:4b:20:
51:2f:6c:e3:05:d1:43:e2:21:7a:0a:a9:7f:18:b7:
ec:2b:00:58:63:73:b4:38:f5:18:ed:97:36:9d:cb:
0d:88:e5:b5:c0:c2:03:d0:ce:ac:7c:0a:25:cc:08:
07:5f:9e:85:5e:96:c7:03:8e:e5:c2:f4:f3:4f:53:
96:01:54:69:fe:f5:21:27:fa:c6:fb:3a:de:0f:72:
48:90:0b:9b:c6:2b:e1:98:93:ac:0b:14:fa:54:f3:
97:ae:82:34:fe:f4:3a:7b:0c:85:85:26:04:61:e3:
51:2a:53:9a:bd:33:47:51:73:57:4b:51:b0:8d:d7:
23:6c:6a:39:4d:65:2f:39:06:94:e5:97:46:13:b9:
75:14:60:a2:b0:74:aa:10:04:c9:d6:d3:81:22:ff:
40:4b:2e:a0:20:df:0d:66:66:95:fe:2b:47:51:53:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:BC:FE:BA:56:52:93:D9:C9:BF:54:62:75:EE:B9:B3:D4:0F:D5
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/46
Signature Algorithm: sha256WithRSAEncryption
9a:27:83:7a:44:90:08:56:98:8e:07:d3:47:04:c3:df:5c:a3:
4b:c8:27:57:1a:de:28:c9:41:ef:ca:ef:1a:f0:03:89:47:f9:
60:0b:e9:d2:67:65:27:b3:11:41:9a:e0:b2:e6:7e:60:f5:d7:
db:b2:ed:f5:12:29:e6:28:b9:49:c4:d9:09:2d:b5:47:3f:69:
cc:92:77:2b:6a:bf:1c:27:f1:2c:93:67:61:3d:29:54:44:e3:
7e:f1:c6:d0:77:df:42:06:da:d5:31:f4:52:ae:81:ff:d8:d1:
77:79:c1:c3:03:ec:7c:d9:ca:66:15:5f:f2:1f:da:9a:96:9c:
75:3c:6d:41:84:09:97:cc:62:f9:b9:0f:5f:ed:34:2b:f5:b9:
a1:0b:3a:63:de:e0:34:13:d0:da:68:71:68:fb:23:fd:3d:6a:
11:41:75:88:c7:79:b3:cb:69:8e:e1:03:62:e7:86:0d:6d:c3:
24:3a:8e:56:bb:7b:d2:4c:16:e5:6b:e3:8c:73:1a:6b:c4:eb:
fa:e6:48:14:cc:27:a7:d4:c5:6c:05:a0:7a:a8:91:9d:e1:5a:
e5:1c:a3:a7:4b:73:f5:65:60:3a:fd:d6:01:39:c6:1a:b4:fa:
bd:81:db:22:fd:f4:cc:81:4c:88:b9:41:22:db:cc:20:4c:3f:
6a:7e:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:45 2025 by rpki-client