Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337663a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337663a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: E81iLre0A+G9+kFXZonkcwjODx/0BwckFLr+wllxvWk=
Subject key identifier: B9:D3:39:16:85:1B:3F:EB:0A:4D:7B:B4:63:80:1A:B7:97:97:63:CE
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 2F7F53C436DA6B8FBD1A701838DEC089B0221738
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337663a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 14:02:59 +0000
ROA not before: Sat 08 Jun 2024 13:57:59 +0000
ROA not after: Sat 07 Jun 2025 14:02:59 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac7f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7f:53:c4:36:da:6b:8f:bd:1a:70:18:38:de:c0:89:b0:22:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 13:57:59 2024 GMT
Not After : Jun 7 14:02:59 2025 GMT
Subject: CN=B9D33916851B3FEB0A4D7BB463801AB7979763CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:3f:0d:28:27:0b:99:44:12:77:46:95:4e:
9a:6e:2d:9b:ac:45:bc:07:a2:08:d3:9c:c1:f7:90:
b3:24:53:68:ce:3f:51:c3:2f:c4:5c:6f:9a:2e:b7:
c3:90:e5:7b:79:4b:a9:b8:b5:03:9a:44:bc:89:b3:
ca:a0:fa:83:bc:86:35:bb:45:6d:f4:0d:e5:f2:09:
eb:ba:72:b3:8f:b1:dd:23:1a:5d:08:5f:17:5d:46:
cd:73:8a:c2:5d:f8:6b:a6:f1:02:c6:21:60:34:49:
b9:c2:79:52:15:36:73:ab:38:73:3b:93:c6:38:c8:
30:45:5e:9a:2a:2a:d1:39:88:58:1a:13:02:98:e0:
11:31:fa:ad:c6:19:29:98:04:79:cb:9a:97:db:a4:
e2:50:f7:61:43:0f:0e:11:4a:c4:8d:6d:7e:92:be:
22:84:3b:50:dc:7a:dc:67:59:7d:ef:f5:20:f5:c1:
f3:48:2c:9f:b6:1f:06:99:a7:08:ec:8e:b7:d7:14:
98:87:e9:a3:60:cb:d1:79:87:cb:8b:e9:b1:50:71:
ad:4d:8d:e1:4b:e9:1b:0b:00:9c:0c:0f:c4:d9:f9:
d4:81:04:4e:36:fd:12:98:b8:e1:62:6a:de:34:80:
bf:ad:0b:71:eb:46:f2:24:a6:0e:6f:49:b2:5c:9f:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:39:16:85:1B:3F:EB:0A:4D:7B:B4:63:80:1A:B7:97:97:63:CE
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337663a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac7f::/48
Signature Algorithm: sha256WithRSAEncryption
af:58:70:12:86:05:06:03:65:12:8a:55:dd:36:6d:a6:33:35:
a7:0d:60:d3:6b:13:7d:a1:2c:90:74:9e:cf:dd:2d:df:28:58:
dd:ed:b2:e7:45:92:99:e0:86:8d:67:d8:02:16:73:fd:57:91:
c5:45:55:6f:74:f8:ca:5e:10:22:c9:3f:fb:3e:67:56:34:2f:
64:cf:bc:05:2d:22:dc:e5:e1:36:13:ab:94:94:a8:50:99:1f:
93:9a:61:36:e2:81:f1:f1:f8:8a:02:7a:f6:d7:b9:f0:09:0f:
19:9a:3d:ce:56:6b:da:66:d8:df:fd:de:51:c7:33:25:20:ec:
a9:1e:97:2d:70:b9:bb:86:01:be:ef:b0:29:10:50:0c:bf:a4:
6a:41:d1:16:4a:83:f9:1b:ee:2b:52:bd:ca:3f:24:b8:7a:22:
8d:2a:35:a0:81:f9:8a:16:98:be:ae:04:7e:b9:8c:ec:3c:be:
ee:37:46:55:ab:c2:8d:76:93:5a:bb:c2:5b:d5:08:20:fd:a6:
69:87:8a:32:97:d9:e8:1a:61:38:02:74:ae:7f:25:dd:87:19:
d7:c9:b5:32:99:8f:eb:f4:54:03:45:de:c1:07:a8:b9:c2:8d:
a6:13:17:d7:5a:86:a6:f4:e3:71:34:bb:9c:c4:88:93:63:bb:
35:73:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:52 2025 by rpki-client