Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
File: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (raw, json)
Hash identifier: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=
Subject key identifier: C0:7B:4B:03:51:C5:70:1A:08:9D:A5:E8:20:6B:07:70:6C:D0:FB:6F
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 449D4D91C3E5EE17E19F3E8AD7FEEA8A7C37661A
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
Signing time: Fri 29 Nov 2024 13:43:28 +0000
ROA not before: Fri 29 Nov 2024 13:38:28 +0000
ROA not after: Fri 28 Nov 2025 13:43:28 +0000
asID: 24851
IP address blocks: 2a02:2bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9d:4d:91:c3:e5:ee:17:e1:9f:3e:8a:d7:fe:ea:8a:7c:37:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 29 13:38:28 2024 GMT
Not After : Nov 28 13:43:28 2025 GMT
Subject: CN=C07B4B0351C5701A089DA5E8206B07706CD0FB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:22:fb:98:97:33:6e:87:9f:8c:76:e9:97:
50:1c:13:15:55:32:89:e1:87:f6:a2:c2:60:ce:27:
f3:0c:0a:44:40:84:92:92:92:06:5d:85:00:ba:d0:
a3:d8:95:68:26:c9:7c:d4:7d:1c:c0:6b:39:03:d1:
98:7e:8c:d9:10:8e:6b:a3:b8:42:ca:b0:c3:72:2a:
40:59:43:11:cd:d9:16:f7:39:cf:b5:a4:cd:0e:31:
29:b2:02:22:b5:16:05:91:03:ab:01:c7:2e:8c:b0:
e6:2c:23:c0:2f:58:05:e7:d3:83:c9:77:a5:95:e8:
5b:81:86:5d:40:7b:d5:5d:38:ad:22:19:b7:dc:a2:
7d:81:f0:15:35:5f:44:b0:be:3e:a9:89:d9:74:f1:
82:c5:c2:50:c5:5e:55:be:06:80:70:f1:00:3b:09:
05:03:6e:bb:25:8f:77:fd:ef:01:2b:e0:df:91:41:
84:96:b3:d4:7c:13:09:e4:2a:6f:11:08:ac:ea:04:
33:88:0d:89:f0:e9:66:40:b5:e5:fe:08:f7:e6:5c:
02:2d:f1:b9:c3:db:64:61:5d:81:16:d1:b7:96:e8:
9b:a9:b9:2f:b7:2d:1e:18:07:b2:29:32:f8:74:66:
ff:a5:6f:9b:45:a5:81:82:71:9b:59:dd:1a:8e:23:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:4B:03:51:C5:70:1A:08:9D:A5:E8:20:6B:07:70:6C:D0:FB:6F
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/326130323a326262383a3a2f33322d3332203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
2c:7e:a2:04:4d:5b:b0:fe:6f:95:af:a6:d9:f1:d5:d2:95:7f:
18:ce:65:13:54:4b:e2:0e:f7:c1:c0:49:86:01:d5:cb:6f:f1:
0b:d2:37:92:f7:ac:0f:9a:c2:85:75:eb:5b:97:36:16:47:fa:
cb:5e:75:a7:f1:46:a8:41:c1:8e:fb:6c:2b:10:08:32:48:0e:
f5:3c:1b:6a:8a:9f:6a:6b:42:ab:2f:0e:0e:8d:4f:64:5f:82:
2f:de:9e:63:e6:6f:ab:cd:6f:2b:f3:d7:c4:f1:23:b5:11:0d:
29:6a:56:55:d2:aa:24:e5:95:b9:21:2c:3d:0f:48:dd:20:24:
94:29:b5:bf:bb:2f:1e:ff:d2:a1:de:6d:61:b7:41:55:64:a5:
10:e7:09:f6:8a:15:2f:9c:d5:2c:ff:72:85:15:b4:16:93:50:
11:10:d0:34:f6:3c:a0:ac:6d:55:47:03:f3:32:5e:ab:a1:3e:
11:61:b9:9d:03:7f:e9:40:37:6f:70:b2:ba:70:19:b9:36:84:
b9:25:14:e7:3a:8f:dc:06:a8:fe:6b:71:cf:1c:2c:8e:28:28:
5a:55:10:79:b3:2e:06:1f:17:bb:30:58:e6:3a:d9:fd:89:2e:
35:78:6c:33:06:01:ab:a3:28:f0:d4:38:95:91:75:d4:4e:0c:
a6:c7:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:39 2025 by rpki-client