Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa
File: 326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: DJ05reBcIQl5JcOKPIvFvx/9e5eEc7APDOL//JPIQrE=
Subject key identifier: 67:9B:29:96:59:54:B6:17:78:C8:BF:C2:0E:45:6A:9A:06:0B:35:2D
Certificate issuer: /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial: 6D644DEFB48C001E51D7BE6A132EB021B32CC3A1
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa
Signing time: Sun 26 Nov 2023 10:57:30 +0000
ROA not before: Sun 26 Nov 2023 10:52:30 +0000
ROA not after: Sun 24 Nov 2024 10:57:30 +0000
asID: 47272
IP address blocks: 2a11:29c0:90b7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:64:4d:ef:b4:8c:00:1e:51:d7:be:6a:13:2e:b0:21:b3:2c:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Validity
Not Before: Nov 26 10:52:30 2023 GMT
Not After : Nov 24 10:57:30 2024 GMT
Subject: CN=679B29965954B61778C8BFC20E456A9A060B352D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:71:02:54:df:4a:94:c8:65:8f:f6:8b:5d:
9c:61:bc:d4:11:05:0a:d3:44:b7:8e:8c:15:fd:de:
c3:f3:1f:15:2a:f7:1b:20:5d:3b:5f:0a:a8:ac:37:
8c:59:84:08:b1:58:95:f0:a1:6e:f6:08:3d:6d:9f:
95:0a:2f:58:fe:ae:3f:91:9e:46:92:4a:07:c7:0e:
6b:d8:eb:40:c4:46:c9:1b:6c:49:1e:26:f9:24:25:
21:63:c6:e8:b6:29:90:b6:5b:94:44:0e:13:28:14:
b0:ce:6f:16:a4:31:74:3f:c3:d9:e3:11:d6:8d:dc:
7e:c8:d1:9e:cc:30:d8:05:da:ac:82:6e:4f:1d:8f:
e8:24:2b:cd:af:2f:c1:c0:77:e1:45:20:1a:c1:e3:
ab:6a:5d:b9:df:95:c0:94:38:63:87:8d:bd:fe:60:
ea:a1:64:3f:09:a4:51:5f:41:14:95:9e:bf:54:d5:
c4:13:22:4a:07:35:a3:82:ab:03:e3:3e:b1:60:e1:
23:22:9d:f8:18:ee:70:d7:4f:93:16:c5:f1:0f:41:
b3:1d:50:71:8c:f0:e4:6c:c1:80:8a:4e:ec:ca:86:
ba:be:6d:dd:dd:0a:54:12:78:d7:a5:a0:a5:59:93:
66:32:e0:48:b5:3d:09:1a:2d:69:a9:4e:c2:00:13:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:29:96:59:54:B6:17:78:C8:BF:C2:0E:45:6A:9A:06:0B:35:2D
X509v3 Authority Key Identifier:
keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:90b7::/48
Signature Algorithm: sha256WithRSAEncryption
b5:df:7d:b5:ce:0d:07:ff:2f:19:46:5a:05:de:55:cf:d6:68:
60:7a:5e:8b:90:9f:13:ab:25:94:b3:39:bb:9d:ba:f3:47:73:
d6:fc:93:48:89:ef:3d:c6:37:48:d8:50:5c:fd:d7:db:06:17:
c6:a3:1e:dc:d7:f8:d3:0d:98:ff:70:05:4a:b9:3c:00:54:7a:
31:8d:e0:e5:db:60:66:90:37:f1:1c:5c:54:1a:4f:a6:71:68:
13:27:8d:9f:46:21:54:2e:20:e4:a0:a2:a1:3c:c8:25:83:a9:
40:69:01:39:54:2e:f1:41:f8:f0:d9:29:9e:a6:a1:d9:30:75:
d4:d9:c2:ed:00:a0:42:45:e8:9c:79:8c:2f:6d:bc:1b:ab:26:
ab:c3:ee:71:c8:76:54:3c:94:dd:ba:0b:57:9e:6f:0e:b1:f2:
a3:5d:21:0d:78:a6:13:20:1d:48:55:77:dc:4b:0b:1a:a9:fb:
3e:70:87:be:08:94:ca:1b:76:02:36:ed:84:e7:88:76:af:2f:
93:e9:e5:b7:3e:ec:a7:90:87:7d:03:ad:1b:d7:22:37:d5:bb:
9d:5d:b8:8b:25:4f:c4:88:15:a9:f8:bb:3f:71:66:54:86:65:
ea:c3:30:01:d8:a6:d5:4b:65:f1:4c:c3:9d:3c:37:61:77:57:
3f:a3:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:11:52 2025 by rpki-client