Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: +r92ZamJ6SuagpYFJfn7+jQ9IMl9PRypM64jVYETBiU=
Subject key identifier: A3:1B:C3:23:E8:4B:91:82:48:38:53:88:84:F2:91:B7:6B:92:7E:A4
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 3357EDC272D9A2339F4FC520AB15C1A033724B2D
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 19:01:11 +0000
ROA not before: Sat 08 Jun 2024 18:56:11 +0000
ROA not after: Sat 07 Jun 2025 19:01:11 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac73::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:57:ed:c2:72:d9:a2:33:9f:4f:c5:20:ab:15:c1:a0:33:72:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 18:56:11 2024 GMT
Not After : Jun 7 19:01:11 2025 GMT
Subject: CN=A31BC323E84B91824838538884F291B76B927EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:93:30:79:a3:c6:68:ef:a6:06:a3:f0:37:
cd:ab:46:26:25:79:04:05:c0:4d:9f:3e:44:8d:87:
4a:de:dc:f8:63:26:fa:7e:09:03:6e:42:5e:9f:01:
5c:c8:8d:a2:94:08:e4:cf:6e:98:eb:19:80:23:cd:
ae:ab:5b:bd:53:f3:2b:98:a4:f6:d7:44:fb:06:23:
55:45:cd:4e:5b:23:92:42:bf:e4:c6:fc:b9:2e:5a:
63:9d:02:8b:9f:c7:15:85:03:8b:a6:39:19:da:5c:
e5:ea:2d:f0:99:89:25:70:e0:8c:88:4b:45:ad:7c:
d9:58:84:17:0e:d1:e4:25:88:02:d6:46:53:e6:b1:
d1:3f:b4:9e:c5:e0:2c:8c:d5:e0:55:1f:a5:80:9f:
cc:9a:aa:71:17:6e:8c:5c:dc:10:77:c3:7d:e7:99:
50:d0:55:b4:4e:f1:3f:8c:69:5d:b8:9c:95:30:ad:
e2:98:82:a8:d1:13:ae:50:0c:aa:3d:d9:8d:5d:8d:
5c:d7:94:08:93:e5:50:55:fa:91:dc:b6:49:d1:9e:
f4:81:e2:af:da:6a:e3:90:ae:fe:f3:4b:a6:a9:7d:
6c:b7:a0:ac:76:c5:92:04:62:59:fa:0c:19:63:f5:
6b:45:23:f6:e9:a2:05:b5:1f:ec:53:4a:7e:44:2c:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:C3:23:E8:4B:91:82:48:38:53:88:84:F2:91:B7:6B:92:7E:A4
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337333a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac73::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0a:b0:c9:54:26:e8:3c:64:2c:b8:1e:19:93:fc:45:4a:02:
c2:bf:1a:d0:ce:1e:0b:5d:be:c7:6a:85:cc:6c:cd:0d:65:80:
f3:23:10:31:71:23:13:64:25:b5:43:09:d7:b2:af:cf:92:14:
80:32:fa:f4:3f:33:8b:64:fe:75:dd:05:ec:d7:a4:aa:64:bd:
41:93:d7:3b:fd:a6:cb:b7:cf:92:da:52:36:ef:38:b7:f9:ce:
56:dd:b1:80:82:90:76:81:8b:0a:26:ff:c7:b2:44:b5:d6:3f:
12:7a:14:76:66:34:24:5f:88:ba:63:df:a0:5d:7c:de:a1:d0:
5d:7f:1c:2e:b4:aa:b5:aa:ef:db:04:8e:47:22:f9:4e:eb:6d:
46:e1:fb:ab:05:27:c6:67:a4:4b:60:78:07:9c:51:8e:c2:53:
c6:bd:cd:1b:7e:9e:8e:22:c8:e9:b8:23:14:2d:be:8d:b4:ef:
79:81:62:60:93:d3:19:e0:93:1b:a3:a7:67:f0:20:09:73:ff:
74:eb:e7:be:87:b4:20:91:ad:3f:c0:89:7e:d8:8d:32:bb:d7:
9a:93:39:30:f0:78:99:44:1c:5d:43:96:d0:70:df:1b:6c:bf:
8a:e4:eb:9a:a9:6d:06:73:71:5c:2d:4a:cf:fc:90:9f:85:1f:
11:75:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:40 2025 by rpki-client