Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa
File: 326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa (raw, json)
Hash identifier: 9lFP7JRbk5ezNjOsaqH4HSwwx0s/Xukmrb8s8nzO+2A=
Subject key identifier: C2:48:F2:37:E2:97:B3:A9:A0:5A:AC:A8:3A:4B:2F:9B:4B:DC:DD:9A
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 56D36118D587799884D5D5B80F224D2DF220200E
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa
Signing time: Wed 08 Jan 2025 14:24:32 +0000
ROA not before: Wed 08 Jan 2025 14:19:32 +0000
ROA not after: Wed 07 Jan 2026 14:24:32 +0000
asID: 44331
IP address blocks: 2a0b:4e07:1800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d3:61:18:d5:87:79:98:84:d5:d5:b8:0f:22:4d:2d:f2:20:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Jan 8 14:19:32 2025 GMT
Not After : Jan 7 14:24:32 2026 GMT
Subject: CN=C248F237E297B3A9A05AACA83A4B2F9B4BDCDD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:97:ba:01:9e:95:c9:43:84:dd:e8:33:70:
34:ab:14:32:5f:8b:c1:d3:fe:4d:24:3a:bf:75:ee:
c3:1b:71:27:33:68:6b:48:22:ac:25:5e:53:cc:86:
1c:64:33:d3:27:0f:da:e0:2f:4b:77:d1:05:c5:fe:
d5:36:fa:8e:8c:75:a1:03:46:89:1d:08:d6:23:39:
d2:ae:e8:84:49:10:a4:0f:29:4f:42:f5:58:c2:c4:
b5:dc:d4:66:3a:05:af:1b:f5:65:0c:01:3f:cb:00:
32:d0:01:b9:a4:8c:8a:5c:be:2e:4e:1c:17:24:d6:
97:72:14:66:f2:12:6e:e6:61:e5:38:0a:4e:18:2b:
d6:82:07:e0:5b:65:1c:03:34:01:50:09:2b:53:cf:
97:11:c7:c5:10:a1:8b:28:b6:ea:19:5a:14:95:de:
d0:bc:5a:7e:6f:fc:2f:89:8a:ac:01:2d:f7:59:d9:
72:3f:f5:54:64:02:c0:bd:70:48:03:ba:ed:25:15:
52:d5:44:6d:a2:3d:a4:0f:71:e6:70:80:06:7f:a6:
5c:b9:44:d2:dd:90:0f:d5:4f:2e:26:81:08:91:9b:
7c:40:80:b7:96:b1:d6:42:4e:5f:40:8f:90:fd:ef:
62:9b:a1:9b:3c:3a:36:a8:ad:b6:73:62:14:1b:30:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:F2:37:E2:97:B3:A9:A0:5A:AC:A8:3A:4B:2F:9B:4B:DC:DD:9A
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a313830303a3a2f33382d3338203d3e203434333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1800::/38
Signature Algorithm: sha256WithRSAEncryption
aa:19:c3:68:dc:6f:03:cb:31:3d:17:a2:0b:50:10:26:fc:38:
90:ce:66:db:14:5d:35:75:e4:fa:5a:0e:77:7b:61:60:a9:96:
7f:47:b4:89:23:5e:9a:a6:d8:d0:4f:bc:6f:b9:8e:b6:bd:d2:
11:08:07:d9:93:ab:15:6c:a4:b4:af:8a:ac:7d:4f:a7:f4:97:
b6:30:6e:ea:2c:2b:7e:d6:1c:0a:06:f3:56:c8:d0:8e:16:51:
e7:ba:eb:ab:0f:ba:1c:1f:6d:4f:68:5c:81:f2:05:43:c0:e8:
27:c6:7d:f0:f1:73:b8:24:26:99:44:c0:c3:d7:82:05:6b:93:
22:75:36:73:e4:e6:89:7e:a7:a2:0e:e4:78:42:66:5a:b6:f6:
ee:96:ab:ba:5a:8d:c6:9e:25:06:d2:e0:40:92:75:b1:b8:b7:
02:1f:e1:e3:16:ed:a6:c1:3f:20:9a:1c:90:46:78:66:3c:76:
e9:6a:2f:72:70:48:e0:b0:2b:41:f0:8e:d2:a4:10:39:b1:e3:
b6:92:07:3d:fc:69:e4:0e:c9:fa:9e:8f:0a:e6:33:d8:28:88:
d5:10:b9:3d:5c:f8:5c:c7:2a:40:ed:fb:fc:68:c3:2a:78:76:
49:59:9a:ef:bc:85:a8:ce:10:03:62:61:9d:79:b6:c5:ed:26:
57:43:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:22:14 2025 by rpki-client