Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34362d3438203d3e20323134373537.roa
File: 326130613a363034343a616337343a3a2f34362d3438203d3e20323134373537.roa (raw, json)
Hash identifier: Fi9xYbm+qYlLwIifDoHBXRv1Oe0FhQck+IevFbenD94=
Subject key identifier: 4B:3B:AF:73:99:24:8E:3A:EC:C8:B5:49:39:05:F9:F7:9E:44:61:D8
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 387D83AFC3C0D5961F64A91BB9B6774AB0444D13
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34362d3438203d3e20323134373537.roa
Signing time: Sun 09 Jun 2024 17:22:31 +0000
ROA not before: Sun 09 Jun 2024 17:17:31 +0000
ROA not after: Sun 08 Jun 2025 17:22:31 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac74::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7d:83:af:c3:c0:d5:96:1f:64:a9:1b:b9:b6:77:4a:b0:44:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 9 17:17:31 2024 GMT
Not After : Jun 8 17:22:31 2025 GMT
Subject: CN=4B3BAF7399248E3AECC8B5493905F9F79E4461D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:df:fd:af:c8:96:c3:7a:9e:d9:4a:58:93:
e6:e4:58:e4:19:38:a5:0b:9f:5e:ab:c7:ef:d9:88:
c3:66:b1:cc:2d:35:08:01:d4:08:e8:24:ef:06:0c:
16:5e:83:b6:af:a8:2e:16:a6:2c:e9:dd:8b:65:d2:
c7:08:88:22:79:97:27:e6:0b:2d:3f:5f:f5:23:15:
80:44:75:ea:a3:a6:fb:76:f7:76:0e:60:8c:5d:8b:
d1:ec:74:70:b9:fa:a4:9a:a7:b3:92:a5:c3:13:51:
9b:97:bf:50:e1:ad:4d:66:a8:e9:c0:2a:3f:e6:5c:
6c:3f:62:3d:a5:c7:95:7f:d4:07:84:eb:e5:d9:8e:
ec:95:71:f2:89:00:41:02:17:65:b6:a5:4f:fe:09:
de:01:5e:53:ff:78:e7:46:60:6b:ea:c3:70:e6:31:
71:a0:29:0f:01:40:79:d4:ce:83:ad:64:01:71:78:
40:38:09:fe:a1:57:4d:5a:34:1c:a5:55:a7:e1:17:
d4:61:6f:ab:f8:af:dc:96:fb:a7:e9:3c:c0:e5:32:
44:8a:a7:c8:f4:d7:05:93:62:55:8b:7e:92:b2:78:
0f:d0:9b:a9:53:84:b2:42:8a:7f:3f:f1:b3:fe:b2:
3e:cf:e3:02:b4:59:a5:6b:1b:0f:a8:71:b3:79:09:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:AF:73:99:24:8E:3A:EC:C8:B5:49:39:05:F9:F7:9E:44:61:D8
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337343a3a2f34362d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac74::/46
Signature Algorithm: sha256WithRSAEncryption
2c:41:59:4f:5e:54:c8:5f:a0:b1:b6:cd:4c:d5:14:86:03:62:
30:1e:3e:a2:10:55:d1:5e:97:36:e9:02:bc:c1:86:8e:21:6b:
62:53:01:12:75:51:ff:b1:f6:2c:02:84:85:b5:05:e8:5f:bd:
ea:11:b7:db:6e:ea:73:94:36:7f:22:c2:ef:ff:7b:51:41:87:
b7:90:82:e8:73:38:83:6a:55:4d:1d:d5:e1:d9:cb:19:f2:88:
09:cd:c2:8c:88:88:1e:08:54:9e:b4:d5:f5:41:0a:a7:d3:cb:
36:96:93:45:e2:f8:e0:b3:80:e2:e8:94:e8:b3:58:7b:f7:89:
e2:de:4e:71:3e:74:d2:00:a0:9b:85:a5:ed:85:0b:c2:48:31:
51:60:42:c4:c5:1e:4d:92:ca:0b:18:d2:7e:f8:3b:c2:36:7f:
82:fc:d9:9f:4c:d7:f0:0d:1a:cb:b5:c1:85:b6:89:9b:38:4d:
14:89:b7:58:b3:e1:f3:0f:82:c0:7c:17:b2:4e:dc:c8:c7:a1:
ca:38:b2:a0:ef:80:da:d2:1c:a8:c2:a2:55:bb:0c:e8:1b:1a:
2e:80:62:29:4e:b7:89:a7:8b:a9:7b:7c:df:ac:3a:a9:00:65:
eb:c1:91:fd:39:a3:24:6d:68:92:99:61:b2:94:e1:c8:c3:ea:
01:81:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:18:05 2025 by rpki-client