Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f33362d3438203d3e20323134323233.roa
File: 326130623a346530373a333030303a3a2f33362d3438203d3e20323134323233.roa (raw, json)
Hash identifier: 5mmVhmq8CoaHajyP1kQ0B2gSNFCD32ZoSVQjccgynT0=
Subject key identifier: DB:4A:AA:16:2B:B2:3F:6D:78:94:30:74:05:93:90:90:40:E3:3F:0D
Certificate issuer: /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial: 2A79279D478DC588C4F6C8D7D4E76F2E28B51546
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f33362d3438203d3e20323134323233.roa
Signing time: Mon 27 Jan 2025 21:11:00 +0000
ROA not before: Mon 27 Jan 2025 21:06:00 +0000
ROA not after: Mon 26 Jan 2026 21:11:00 +0000
asID: 214223
IP address blocks: 2a0b:4e07:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:79:27:9d:47:8d:c5:88:c4:f6:c8:d7:d4:e7:6f:2e:28:b5:15:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Validity
Not Before: Jan 27 21:06:00 2025 GMT
Not After : Jan 26 21:11:00 2026 GMT
Subject: CN=DB4AAA162BB23F6D789430740593909040E33F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:34:6d:ad:9c:a8:1d:b6:28:09:d7:25:40:
e5:b2:ad:40:33:49:bc:c0:73:c3:13:b9:5c:8f:40:
33:1c:10:ee:ac:47:a9:d6:a3:22:b1:f9:5c:29:78:
b4:53:19:83:d5:61:54:70:4c:2c:9d:ed:73:c9:87:
79:02:07:54:e1:65:08:3f:ae:6a:f5:a5:34:fc:5c:
cd:4d:e2:ce:d0:ac:0c:94:dc:6c:d1:aa:60:f1:27:
db:ad:dd:df:4b:66:d6:7c:ef:5c:72:32:07:d4:f8:
a2:5c:cf:59:5a:00:a0:3a:02:98:0e:86:12:db:16:
9f:28:c6:3f:10:d1:9e:e4:45:91:9e:e9:0a:53:55:
10:08:e7:10:7b:89:91:cf:39:03:6f:cd:78:c2:ab:
97:77:80:7b:b0:a1:a2:24:7c:ed:56:3d:b0:33:fa:
eb:20:8b:f8:aa:c1:98:74:80:30:64:5d:be:df:4b:
96:d3:d4:2a:5a:27:7b:e7:83:95:d1:81:08:7c:ab:
15:1f:d2:b4:76:76:de:b4:23:93:bd:8a:de:7a:4b:
28:63:74:49:a2:51:84:1b:0e:c7:d5:e5:d6:cb:42:
1f:3f:bc:fc:bf:d3:87:a8:86:d7:7b:87:ff:c3:13:
e2:1c:1b:d3:87:10:61:dd:f8:5e:97:76:9a:b4:57:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:AA:16:2B:B2:3F:6D:78:94:30:74:05:93:90:90:40:E3:3F:0D
X509v3 Authority Key Identifier:
keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f33362d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:3000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:6a:c5:fa:9a:38:ab:48:dd:78:92:65:98:75:62:d6:20:16:
78:d5:9a:dd:c9:3a:be:c6:46:08:03:39:f5:5e:7c:9e:77:c4:
f8:99:8f:5d:d6:34:96:92:4d:9b:a2:0c:73:8c:53:f8:05:d3:
a8:76:ad:76:2b:a5:52:bb:90:64:5e:3a:d2:35:36:a9:1d:72:
b4:23:31:d8:c0:f1:27:f3:3d:61:9d:ab:82:95:d2:4a:5f:23:
52:68:a5:d9:b5:b9:e5:c5:58:6a:d0:d0:c2:6c:f1:b7:e1:18:
bc:66:ef:7d:7f:c1:03:5b:e8:3b:dc:d4:39:56:57:a1:f1:df:
84:d4:ae:76:30:cf:65:05:fe:bb:5a:7c:c7:94:25:fd:34:7c:
e0:8f:de:bd:66:37:5b:8e:8d:20:b3:2d:3a:75:85:99:37:cb:
a7:51:6d:6e:eb:ed:4d:0f:37:be:5a:36:e7:b2:6d:34:09:36:
18:ca:d0:34:10:60:e2:85:91:a2:6d:9f:d1:b3:c3:9d:ff:e6:
84:d9:d3:45:52:71:f6:e3:39:8e:d1:bc:33:ad:15:ae:22:30:
22:ad:8b:44:8f:ed:e8:0f:a6:59:ed:e7:8c:e2:1a:1a:ee:59:
62:30:e1:b2:e9:4b:f4:66:66:10:d9:08:42:8f:e8:53:d3:32:
6d:74:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:15 2025 by rpki-client