Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
File: 326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa (raw, json)
Hash identifier: v7uk7r4lnrI8cDuWEq3C7+fNMNZz6Dk5obG3oa0aP/Q=
Subject key identifier: E6:AF:42:20:AF:28:D1:AB:3E:46:E9:01:DF:F1:45:A9:9E:4A:18:35
Certificate issuer: /CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Certificate serial: 541CCE88EECE9388D3080FA3F5AC7CB5A0A57534
Authority key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
Authority info access: rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
Signing time: Tue 11 Apr 2023 04:42:30 +0000
ROA not before: Tue 11 Apr 2023 04:37:30 +0000
ROA not after: Tue 09 Apr 2024 04:42:30 +0000
asID: 199518
IP address blocks: 2a12:dd47:3800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1c:ce:88:ee:ce:93:88:d3:08:0f:a3:f5:ac:7c:b5:a0:a5:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103734D89B107354F2D009D6E780AAC0BCE606C0
Validity
Not Before: Apr 11 04:37:30 2023 GMT
Not After : Apr 9 04:42:30 2024 GMT
Subject: CN=E6AF4220AF28D1AB3E46E901DFF145A99E4A1835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:a3:2c:76:24:fc:7f:99:09:48:64:6f:7a:
72:be:8d:c3:5d:a5:93:31:72:f6:44:b5:11:72:71:
5d:c9:2c:57:66:4a:f4:ed:ba:dc:eb:2b:86:1a:c0:
db:fd:32:34:d7:ee:3d:b8:91:4c:ef:12:27:5c:e3:
08:98:80:77:69:b0:65:e2:3a:05:38:fb:52:52:52:
95:bf:ec:0d:14:92:b0:f3:b6:1c:0e:a1:cd:24:61:
17:b9:5a:67:ab:f2:24:b1:3b:7a:61:cd:ce:7d:7a:
3c:88:ec:cf:23:44:03:a2:9b:a1:28:78:59:c9:91:
73:f1:79:ee:f5:73:0f:16:1c:ba:6f:d4:6c:82:e7:
e6:09:7d:1c:05:d8:4a:ed:ab:e7:09:28:10:98:a0:
0c:4b:34:2c:24:69:f4:03:1d:b0:86:04:5a:45:d4:
b2:22:86:e2:cd:bb:a1:ac:5e:d2:84:28:33:e2:bf:
f6:3d:e2:06:be:97:8b:92:f1:e7:6b:76:dc:d7:2d:
c4:a5:ae:e9:c6:3e:be:96:8b:c0:e7:b6:87:9f:eb:
d8:6f:b5:64:d2:16:4b:ac:e5:e8:10:a5:30:6d:28:
3e:53:19:a0:15:3c:bb:ee:9f:96:26:5b:cc:2d:37:
ed:21:cb:f3:bd:2a:d0:05:42:2c:97:e4:38:31:4a:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:42:20:AF:28:D1:AB:3E:46:E9:01:DF:F1:45:A9:9E:4A:18:35
X509v3 Authority Key Identifier:
keyid:10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/326131323a646434373a333830303a3a2f34302d3430203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3800::/40
Signature Algorithm: sha256WithRSAEncryption
0d:3a:23:40:0a:8a:d6:ce:77:5c:f0:71:28:d6:7c:94:e9:be:
e4:c8:91:53:0e:2d:5a:68:20:df:6d:3e:86:eb:c1:f4:aa:85:
15:6b:a0:b8:cb:39:2b:b4:1a:90:2e:c2:3f:83:42:94:3e:b8:
29:88:04:80:f6:f8:46:43:83:3d:e9:51:51:9b:ba:0a:df:c4:
ad:3f:cc:f8:63:f5:be:e1:0c:5e:66:30:6a:40:8c:36:02:5c:
a1:17:b3:88:34:9e:98:09:e4:96:e4:2b:08:27:4e:7e:6d:7c:
77:f2:68:9a:f1:55:24:65:56:6c:0f:f5:9c:d8:7d:a4:8c:bd:
ba:2d:b4:f5:c8:01:9e:64:0a:bb:ae:4e:88:97:ca:09:40:c7:
08:81:dd:d8:57:36:eb:16:f3:e2:03:29:68:cd:b5:89:a4:8f:
70:02:af:8b:c2:c4:81:0b:75:64:87:2d:5a:3f:e2:15:d4:cd:
59:8d:92:10:e3:8f:34:ce:b4:7a:95:99:f3:c8:93:0b:e3:c8:
88:55:23:83:1f:9b:68:a6:c0:10:c4:89:3e:07:46:69:b9:f9:
44:f9:49:22:61:42:e1:9f:8a:ab:8c:02:4f:ca:15:d9:aa:41:
7b:7b:05:5d:d8:be:a7:a6:f2:c0:96:ae:78:24:34:bf:da:64:
e7:61:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:30:16 2025 by rpki-client