Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa
File: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (raw, json)
Hash identifier: fpULdXXomBi49YY6WqsyqWL1nOL+0TN0NiWW3AYGJho=
Subject key identifier: 6A:CF:1F:3D:F5:C8:91:91:61:82:4C:E9:5F:09:A3:0A:2B:7C:E6:02
Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial: 6961DF7359A717A3A0A170DC638834C73C453FFB
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa
Signing time: Thu 21 Mar 2024 20:58:24 +0000
ROA not before: Thu 21 Mar 2024 20:53:24 +0000
ROA not after: Thu 20 Mar 2025 20:58:24 +0000
asID: 216455
IP address blocks: 2a07:54c7:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:df:73:59:a7:17:a3:a0:a1:70:dc:63:88:34:c7:3c:45:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Validity
Not Before: Mar 21 20:53:24 2024 GMT
Not After : Mar 20 20:58:24 2025 GMT
Subject: CN=6ACF1F3DF5C8919161824CE95F09A30A2B7CE602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:da:8e:8e:11:68:ea:b8:96:63:e0:e4:51:
bb:30:4e:94:6f:ef:fd:90:8a:8c:80:bc:78:79:df:
51:c8:ab:17:19:0a:1c:8f:6e:7d:43:8e:87:e0:a9:
91:d4:e2:9c:5d:4d:d4:ad:29:2f:f1:68:f5:1f:a4:
d7:73:86:66:45:46:db:7e:9b:16:1b:1e:72:52:e5:
91:12:83:5e:7f:46:a7:39:b9:fc:50:2a:83:88:e2:
ab:7e:86:e3:19:fa:a9:d2:1c:10:13:60:9f:99:24:
56:3a:c9:6a:d9:17:f6:c0:fd:f4:96:9c:ac:37:ff:
d4:b3:5a:26:8a:d9:b6:c9:90:35:a9:dc:d8:b2:e2:
6b:bb:b6:cd:f3:ef:3f:0c:25:77:cf:69:e0:6f:56:
db:91:20:5c:3a:0c:ac:fb:5a:35:3e:b2:6e:bc:24:
4c:95:b3:36:4c:67:20:d0:d3:dd:f3:bf:8c:53:3f:
c0:8f:fe:95:cc:b3:8d:7a:a5:bb:6b:3f:40:27:96:
ab:cb:f8:f4:a5:87:9f:95:6e:c9:ea:a0:fa:ab:45:
c0:24:ef:8d:79:47:80:7c:20:18:ab:9e:2b:e8:09:
3d:bf:91:dd:4e:e3:80:fc:a6:7c:55:b9:73:3d:63:
f7:0a:3b:f8:06:a3:fb:38:15:3c:e1:72:7e:a2:32:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CF:1F:3D:F5:C8:91:91:61:82:4C:E9:5F:09:A3:0A:2B:7C:E6:02
X509v3 Authority Key Identifier:
keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
24:ac:da:9f:74:da:ba:b2:d8:55:30:ed:90:00:b8:58:72:45:
45:04:d8:78:58:15:88:ab:10:10:6d:c0:27:29:a5:71:f9:e5:
3a:6a:a7:29:41:6c:bb:5c:82:1a:c8:6c:07:38:3a:1e:8d:06:
94:4e:2a:53:a6:3e:cd:b1:3d:d1:e7:a0:b9:60:ba:ce:fa:fb:
d7:46:90:c0:b2:58:ce:11:e6:fd:8e:0f:fa:e3:84:f2:f7:36:
ef:4f:8f:62:ad:f9:c5:c3:ed:46:06:c2:c2:b3:9c:4d:3b:9e:
bd:b0:86:3d:53:23:b8:90:60:a4:00:03:a6:5e:93:9d:8c:48:
fa:5b:02:0a:b8:5e:5e:41:33:ad:f4:6a:4a:d2:f2:fc:67:6e:
df:b8:d8:66:d6:eb:d6:07:54:5e:ca:a8:8a:b3:3f:d3:be:ab:
de:ca:48:32:f9:63:33:db:d1:b3:78:23:dc:c1:48:f4:91:bd:
35:77:2b:a4:d4:36:8c:cc:e9:6f:a2:40:75:dc:dc:c0:de:06:
93:24:8f:1a:75:52:84:c8:40:d0:b4:64:0d:97:6a:33:58:c2:
07:6e:a9:f4:bb:27:bf:6d:84:95:42:bd:bb:14:9c:bd:e9:46:
a2:b4:87:5f:24:1d:a6:ec:dd:d8:41:1b:fc:2d:a3:64:9a:f6:
f5:31:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:52 2025 by rpki-client