Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34372d3438203d3e20323134393336.roa
File: 326130613a363034343a616337613a3a2f34372d3438203d3e20323134393336.roa (raw, json)
Hash identifier: ei88VKUaH0ajUzxXSSs5FAndgF6bBFr0gN/M7N2HhSI=
Subject key identifier: 54:E1:28:B6:DA:FB:D9:61:E0:96:C5:EB:93:3D:F8:6A:31:64:3B:0C
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 16399F403ED2E0210469AA6CB135CE794A23E884
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34372d3438203d3e20323134393336.roa
Signing time: Sun 09 Jun 2024 17:22:38 +0000
ROA not before: Sun 09 Jun 2024 17:17:38 +0000
ROA not after: Sun 08 Jun 2025 17:22:38 +0000
asID: 214936
IP address blocks: 2a0a:6044:ac7a::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:39:9f:40:3e:d2:e0:21:04:69:aa:6c:b1:35:ce:79:4a:23:e8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 9 17:17:38 2024 GMT
Not After : Jun 8 17:22:38 2025 GMT
Subject: CN=54E128B6DAFBD961E096C5EB933DF86A31643B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:57:7d:dc:31:b2:e8:c8:c5:5d:51:56:ba:
8c:0a:41:39:ba:b9:4c:9d:81:f7:22:dc:4c:f4:47:
9d:81:1e:db:92:3a:ad:45:6e:a3:e3:fd:af:98:49:
cd:44:45:77:12:2c:57:20:ff:5a:a5:52:da:c5:41:
37:6c:48:78:93:37:3b:16:c3:53:98:49:56:a0:20:
b3:11:3c:a4:4b:42:58:5f:f7:75:75:15:7c:cd:fa:
58:c8:40:8e:18:ac:7a:9f:30:6f:5d:0e:dd:1f:96:
36:f8:b1:f9:7b:c4:52:26:b4:37:6d:75:22:7b:61:
e6:f7:a1:6f:65:ee:74:ed:8d:61:df:bf:5e:35:90:
51:77:73:28:98:56:27:bf:99:18:5f:f5:16:6a:90:
47:4c:8d:45:e3:32:70:3f:61:7b:f4:11:01:e1:dd:
3f:45:52:19:97:55:9b:df:c4:b5:7b:9b:b1:a0:4f:
92:4a:a6:dd:e4:6d:97:b6:d5:84:db:27:a6:60:d0:
03:98:34:fa:2e:ad:61:e0:fc:7a:50:78:5f:35:94:
be:b6:ea:e2:bf:6c:70:1e:9c:03:98:c9:bb:9d:ee:
55:fb:b5:aa:e7:30:cc:a8:db:16:1d:31:ca:a4:a7:
ac:71:ed:65:8a:61:e6:8d:fd:6c:3e:c9:bc:34:5f:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:28:B6:DA:FB:D9:61:E0:96:C5:EB:93:3D:F8:6A:31:64:3B:0C
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337613a3a2f34372d3438203d3e20323134393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac7a::/47
Signature Algorithm: sha256WithRSAEncryption
23:62:a8:93:7a:a1:8e:d0:fd:64:f9:18:2b:8b:96:0f:42:ce:
9f:15:07:82:ed:06:1d:bd:38:51:1e:48:dd:cf:f7:e0:bd:12:
17:d4:74:b6:c1:93:0b:2c:5f:0a:3b:27:54:4f:98:56:f2:2c:
0f:93:e0:d7:c3:7a:b1:d4:1e:3f:ac:90:c2:84:20:99:42:33:
f8:c3:bb:09:a2:b3:70:11:42:91:80:98:2d:43:72:38:d5:80:
f1:a7:4a:95:c1:0a:02:82:32:aa:b9:74:65:68:19:05:3b:29:
0b:45:ae:52:94:e0:45:34:f2:00:1e:b5:a3:ea:89:64:bc:b6:
2a:ee:a3:69:fb:2f:b7:da:25:1c:f0:93:0d:57:91:59:d1:d1:
7a:fe:3d:40:19:da:c9:6a:e0:a0:eb:ff:b1:52:73:26:cc:15:
ca:a4:e6:af:0b:0a:3a:19:3d:51:a9:60:83:ed:6c:fd:cd:5a:
fd:f5:64:77:b1:6b:22:b7:56:d8:66:7a:9c:db:f1:a3:23:45:
de:5c:59:f9:82:3f:1b:26:5e:25:6a:2b:d8:67:9e:c9:6c:12:
8b:79:9d:4c:b7:0d:f2:46:ec:90:66:d7:7c:94:b8:88:01:0b:
ae:be:59:7b:0a:38:57:b9:1a:fe:69:90:89:40:af:4e:67:b6:
5f:23:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:28 2025 by rpki-client