Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa
File: 326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa (raw, json)
Hash identifier: HgVZBCaEOQO3vVGFp3tFMEQPLkH1j52F4ehEji34FEo=
Subject key identifier: 5D:0F:23:33:41:66:3E:79:F1:38:F0:09:97:13:15:AE:DC:D3:30:E3
Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial: 10E42B800C446976592174D1AA64E437DA97105C
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa
Signing time: Sun 15 Sep 2024 14:36:42 +0000
ROA not before: Sun 15 Sep 2024 14:31:42 +0000
ROA not after: Sun 14 Sep 2025 14:36:42 +0000
asID: 207252
IP address blocks: 2a06:1283:c040::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:2b:80:0c:44:69:76:59:21:74:d1:aa:64:e4:37:da:97:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
Validity
Not Before: Sep 15 14:31:42 2024 GMT
Not After : Sep 14 14:36:42 2025 GMT
Subject: CN=5D0F233341663E79F138F009971315AEDCD330E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:b4:0b:a5:de:59:9e:62:38:43:d3:a4:9a:
6b:a4:f7:64:23:be:d8:e5:2d:8f:24:cb:16:ee:f4:
fe:0e:39:9c:84:3d:27:5e:bd:f8:eb:3f:49:85:2b:
7b:9a:cd:91:b4:95:8e:3a:fa:6d:af:88:82:63:59:
78:4d:81:7e:d5:ed:52:06:a6:1e:1e:9b:b8:c2:a5:
6c:bf:f7:0a:d1:02:b8:4a:26:b6:6c:a9:cf:b6:e3:
eb:23:dd:2f:e1:29:ec:6a:08:59:36:0b:56:f9:27:
af:96:b2:39:85:69:f1:cb:bb:52:91:17:8f:e2:2c:
89:03:5e:ba:8e:ba:9a:67:d3:d0:c0:7f:a5:95:eb:
80:bb:62:6f:13:93:ac:f1:97:c0:34:34:a6:ef:32:
97:a5:6a:ac:6c:f7:82:1f:38:3d:6c:3e:1d:d8:44:
6b:38:b1:e2:40:bd:8f:ed:8b:4b:23:83:2d:00:0c:
0f:85:77:6a:ad:a4:d0:ce:50:35:66:78:e6:33:a9:
f1:2c:f3:30:31:73:4c:a6:5a:2e:1c:73:71:1a:0c:
0e:1a:5e:10:5d:5e:ac:7b:33:d0:ad:ae:9c:df:0d:
99:74:56:17:a0:20:58:92:2a:ce:e4:96:65:ce:7c:
47:e3:a3:45:bf:df:2d:b7:a4:93:3a:5b:b2:22:c1:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:23:33:41:66:3E:79:F1:38:F0:09:97:13:15:AE:DC:D3:30:E3
X509v3 Authority Key Identifier:
keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c040::/44
Signature Algorithm: sha256WithRSAEncryption
6f:2e:d5:27:fa:b8:19:ba:24:94:c9:ba:09:69:b0:a0:30:d7:
a3:f0:ef:b7:64:47:61:32:a7:c2:04:ee:a3:40:cb:fb:93:ac:
7f:c5:78:2b:45:07:02:1a:a1:ef:cc:f0:6b:6b:eb:aa:55:1b:
26:82:38:5c:1a:41:22:82:28:63:6c:7d:12:25:3e:a6:02:73:
cb:66:97:19:2f:17:76:8b:90:28:7c:12:5d:6e:c1:33:b3:ab:
cd:06:d8:fe:03:25:a1:ab:f1:29:57:73:e5:fe:17:22:4e:99:
57:eb:56:d0:bd:70:14:d6:ea:c3:f4:f0:12:f2:1a:d8:fc:13:
b2:1f:b3:bd:0a:50:4f:16:a7:a0:95:e3:52:f8:67:bb:98:37:
40:20:0a:66:9b:7a:c3:bc:cb:88:6f:50:d6:01:de:1b:a4:56:
9e:35:a7:f1:35:7d:11:72:46:68:c3:d9:70:7c:4d:10:94:d6:
e4:24:ed:6e:24:db:0a:90:2c:06:90:a0:df:49:22:ef:bb:e7:
13:1b:39:0c:a5:80:4c:e2:5e:ff:30:fc:2c:8e:8b:5d:1f:85:
2c:6d:15:f3:ff:5f:f0:79:83:64:ee:e2:8f:83:2f:fa:04:5d:
33:15:a7:c4:6a:5f:98:99:c2:51:98:50:35:f6:d6:41:1e:e1:
ef:2f:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:01 2025 by rpki-client