Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3438203d3e20323134373537.roa
File: 326130613a363034343a616337303a3a2f34362d3438203d3e20323134373537.roa (raw, json)
Hash identifier: oclJHZMGm7q0Dp9H5OHx3AklKjEAhB4BLyrgHEqXKDc=
Subject key identifier: E5:8C:4E:55:DE:0A:D4:9E:5C:24:38:93:65:15:0F:A0:B1:27:94:BE
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 6F6F6D14861A9A5AB53DCA16104657BC959E5C45
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3438203d3e20323134373537.roa
Signing time: Sun 09 Jun 2024 17:22:23 +0000
ROA not before: Sun 09 Jun 2024 17:17:23 +0000
ROA not after: Sun 08 Jun 2025 17:22:23 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac70::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6f:6d:14:86:1a:9a:5a:b5:3d:ca:16:10:46:57:bc:95:9e:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 9 17:17:23 2024 GMT
Not After : Jun 8 17:22:23 2025 GMT
Subject: CN=E58C4E55DE0AD49E5C24389365150FA0B12794BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:ca:1d:cd:21:45:d5:a6:e7:90:f7:10:5a:
f1:b1:76:af:e7:49:e8:71:e6:3e:23:23:2b:de:5f:
59:ac:b7:30:b3:0c:79:ff:17:67:df:bc:25:ee:74:
3e:37:04:df:77:64:b1:d8:bb:67:47:08:bc:10:9d:
9a:eb:e9:d5:ac:44:5f:f3:9b:09:aa:21:7e:da:dc:
97:24:37:f8:1e:0f:84:8c:3b:df:83:2f:5c:2e:2b:
24:e4:8f:84:bc:43:18:02:32:51:d3:c4:60:43:93:
b4:c0:66:4a:f9:ef:5d:58:97:8f:55:d8:b7:93:d5:
c8:bb:23:7b:9c:d4:e9:97:9f:ba:9c:e2:b0:f8:19:
a6:55:17:df:55:07:a1:59:51:e4:62:17:bb:b9:50:
d4:c6:39:ed:44:9b:db:c2:2d:9f:f2:df:d4:cd:14:
14:f7:6d:6f:d5:ab:ab:1d:6c:86:b3:9d:ef:a1:79:
a5:b6:38:73:bf:1f:8f:51:bb:b9:b9:40:3e:6e:f5:
e9:e1:54:2f:2f:1e:12:69:9d:0e:42:3d:09:bf:4e:
e2:db:2f:fa:32:87:a8:fe:2f:4e:e9:1a:87:9b:3d:
d3:ff:ea:d1:cf:6c:d9:f4:10:55:0b:02:c5:75:fa:
b2:e2:ac:33:c2:f9:a1:da:57:48:34:51:7c:bf:72:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:4E:55:DE:0A:D4:9E:5C:24:38:93:65:15:0F:A0:B1:27:94:BE
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337303a3a2f34362d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/46
Signature Algorithm: sha256WithRSAEncryption
28:6f:20:58:c7:86:18:09:5b:1a:b9:19:14:67:83:c7:93:9e:
87:e9:a6:4f:d6:1c:91:aa:66:9b:dd:25:cc:9c:27:06:b2:a8:
4f:29:a7:34:80:6e:07:7c:ea:33:f8:93:52:cb:b0:9d:f8:a0:
9c:b5:b9:cb:86:83:71:7f:25:3a:40:73:07:16:79:74:0e:90:
8b:71:e8:d3:5c:cc:e5:70:af:4b:e2:d7:c6:9b:7b:2d:ec:c2:
53:b0:08:11:ae:40:a1:32:3d:36:84:bd:65:40:81:48:a4:2e:
15:81:b7:f4:02:20:c7:56:7e:b6:5a:fc:f8:37:d1:c4:f6:fa:
60:23:93:8c:bb:07:6a:cd:36:65:e3:04:97:8c:61:9c:5c:c0:
24:f2:af:51:59:41:e7:98:96:90:34:83:e2:95:82:33:bc:01:
58:3d:f5:ec:c9:3a:ff:3d:40:3a:6d:1e:0d:c4:af:fc:24:58:
92:39:7f:e1:9f:4c:04:82:fc:7d:a2:e8:1b:0d:13:18:4d:9b:
2e:ad:92:d2:24:78:f1:f9:11:a0:92:eb:93:5e:c9:f8:0e:0c:
c0:5b:60:f9:8b:c1:06:72:f5:49:48:c2:59:27:2b:20:fc:ac:
fc:17:88:4d:2c:2b:36:26:ea:fc:b7:70:1b:4f:f8:b5:14:88:
16:f7:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:30 2025 by rpki-client