Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: 4agLLCZDuMapmmNgRPTJCLz/KUf4Qcuzd0SLX4ijJyc=
Subject key identifier: 70:A7:CB:E4:73:F9:0E:67:BE:DF:F2:72:E0:59:0A:00:45:D5:5D:A3
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 05CBE06F1596D38670ECBEAD5835741C4DD1F2A0
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 19:01:08 +0000
ROA not before: Sat 08 Jun 2024 18:56:08 +0000
ROA not after: Sat 07 Jun 2025 19:01:08 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cb:e0:6f:15:96:d3:86:70:ec:be:ad:58:35:74:1c:4d:d1:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 18:56:08 2024 GMT
Not After : Jun 7 19:01:08 2025 GMT
Subject: CN=70A7CBE473F90E67BEDFF272E0590A0045D55DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:f2:96:05:8d:6d:a2:16:6a:ec:ba:50:af:
1c:64:fc:1b:a6:9e:84:e4:ab:c1:80:9e:b7:c5:cd:
2c:8a:47:8f:8b:e8:96:6e:9f:44:ac:81:dd:55:25:
3d:de:d5:92:07:e1:0a:96:21:44:ec:1a:23:c2:57:
db:6b:a3:8b:88:cf:bd:e5:4e:45:45:5b:69:9b:70:
5d:ab:6f:81:06:36:09:24:b3:3a:0e:b3:9a:06:18:
d6:1f:50:a9:e0:64:ec:cb:bc:d5:72:bd:92:d8:b5:
c0:77:b4:be:d4:04:6f:ae:4f:bc:c2:87:f4:b0:f5:
50:f4:fd:c5:2f:46:46:bd:b1:7f:33:1b:83:49:0a:
2b:dc:ab:16:ed:a6:2e:b6:88:1b:e9:09:a3:8b:5d:
d2:3b:23:db:28:5d:89:c8:e7:62:94:f8:66:44:89:
04:c6:1f:8e:a0:6e:3e:54:c2:ce:ee:c6:f0:25:c1:
cc:f8:2b:cc:fd:0a:fa:eb:a0:9f:5f:da:88:73:05:
ba:b9:b1:9a:c0:0c:6b:71:9f:b3:d6:36:1c:0c:25:
7b:0c:fc:c5:75:73:28:dd:f2:b1:54:e4:92:83:92:
ce:44:de:c1:89:cb:97:c2:23:b2:ed:92:a8:af:5e:
22:51:d6:ec:f3:4a:93:4d:c6:6d:e2:6e:b3:59:37:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:CB:E4:73:F9:0E:67:BE:DF:F2:72:E0:59:0A:00:45:D5:5D:A3
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337313a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac71::/48
Signature Algorithm: sha256WithRSAEncryption
46:e3:36:46:e2:18:b3:b3:53:e8:34:3b:bb:ef:fa:33:e5:33:
93:60:13:51:94:ff:66:05:ac:86:d8:fb:fc:5e:8d:5d:e2:90:
4f:03:ce:42:64:dd:6c:13:5a:75:54:2b:db:f3:44:8f:b0:16:
a8:7d:31:9e:b1:75:5e:1e:70:ad:c4:c6:dd:f4:66:c6:99:6d:
4b:1f:91:52:cd:ec:50:44:bf:4c:6b:74:76:ea:2f:66:ab:f4:
85:16:86:e4:60:60:54:34:35:91:fe:e9:a6:57:d7:44:7d:f8:
8f:36:13:eb:68:d7:42:32:54:35:19:fd:b9:f5:f3:7d:1a:d6:
17:83:2f:fc:31:0e:58:98:d8:16:a1:56:1f:a3:e8:5f:f9:43:
52:07:c6:71:a4:c6:7c:93:a8:2b:68:fb:74:9a:2b:b5:57:77:
f7:28:00:c4:5e:20:7b:2a:ed:38:43:0f:b0:44:ac:60:a1:fb:
5c:62:e3:73:57:63:0f:b5:4f:ea:84:b3:c8:68:9b:0e:6a:10:
55:3d:70:14:27:68:2e:57:01:a2:5f:3d:77:52:2a:fb:f9:e2:
10:49:56:73:fc:ae:04:3a:59:c9:8a:b2:65:da:5c:58:d2:1e:
56:df:53:88:04:b3:b7:27:20:1f:45:c8:bc:56:bb:71:89:b4:
ad:5d:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:30:24 2025 by rpki-client