Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa
File: 326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa (raw, json)
Hash identifier: z1soeTlJr1oWM1euatG34Gmd/IZivXHijHIyNhJm5ZE=
Subject key identifier: CD:87:40:95:DD:1F:76:2A:C4:FE:80:65:08:DA:33:69:19:81:57:88
Certificate issuer: /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Certificate serial: 3C1E9B43C7E0F326A50EBCCB2C3CC85391FABD1E
Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa
Signing time: Sun 26 Nov 2023 10:57:29 +0000
ROA not before: Sun 26 Nov 2023 10:52:29 +0000
ROA not after: Sun 24 Nov 2024 10:57:29 +0000
asID: 203069
IP address blocks: 2a11:29c0:9eb0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1e:9b:43:c7:e0:f3:26:a5:0e:bc:cb:2c:3c:c8:53:91:fa:bd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED
Validity
Not Before: Nov 26 10:52:29 2023 GMT
Not After : Nov 24 10:57:29 2024 GMT
Subject: CN=CD874095DD1F762AC4FE806508DA336919815788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:1e:a1:6c:c6:26:c2:d0:c1:5e:42:41:a9:
cd:29:b1:d5:45:7d:cb:4a:38:9f:62:81:3f:07:22:
46:19:bd:03:72:5f:04:81:6c:e2:b8:84:f1:8d:e1:
16:10:ac:74:6c:08:79:75:35:fa:d1:63:82:71:43:
5e:58:c0:99:96:ca:be:67:5c:4f:99:db:4e:04:10:
4f:27:00:a5:59:8a:b5:79:4e:6f:8e:ac:52:2b:ef:
b9:f5:63:9c:66:50:c3:c1:a7:b2:13:89:24:e8:df:
d9:00:a9:2d:c7:34:bc:88:d5:aa:24:18:88:63:4a:
ad:c4:98:da:08:bb:0b:ee:73:2b:16:ff:83:49:28:
6e:85:7f:8d:31:43:e6:7c:09:22:a1:3c:7d:54:20:
4b:26:1d:e1:ae:28:a6:d7:19:2b:24:1d:33:a0:00:
f8:b5:46:02:aa:13:be:60:f8:79:9d:9d:96:a2:e7:
6d:1b:bf:ec:bc:08:0c:9f:a3:a6:ee:75:4d:09:ec:
6b:70:3d:e3:75:9e:18:6b:9e:3e:61:f1:89:cc:57:
cf:6a:e2:fa:a8:4f:81:ab:41:fa:e1:7c:ba:f9:c1:
35:ea:ab:fd:7d:a8:e1:18:e9:7c:e0:4a:b7:2e:7a:
08:80:c9:a6:49:cc:a3:05:99:0e:f1:d9:b7:a6:ca:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:40:95:DD:1F:76:2A:C4:FE:80:65:08:DA:33:69:19:81:57:88
X509v3 Authority Key Identifier:
keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9eb0::/44
Signature Algorithm: sha256WithRSAEncryption
72:c2:b0:c7:33:14:36:7e:91:8b:47:98:02:dc:85:96:f0:25:
cb:d6:3c:43:55:da:f0:6a:47:7e:69:3a:64:f7:b2:d9:19:91:
26:30:0e:01:19:2c:40:6e:15:06:94:20:7b:75:97:14:e2:93:
5e:a5:a1:77:6d:92:f4:4e:15:29:c2:f0:8c:fe:9f:59:3e:b7:
77:6b:94:1a:c3:f9:07:29:92:f3:c0:79:86:e5:93:e7:c8:98:
d0:e4:06:54:06:1b:21:1d:13:f1:1f:fc:66:21:56:12:13:30:
91:a0:6e:fc:14:36:dd:6f:3b:83:68:66:b7:d6:c5:53:31:77:
3a:48:04:29:cb:bc:cc:a3:29:90:1f:a4:b7:6f:1e:89:d0:bd:
65:a3:80:db:2a:3f:8d:95:af:16:97:c3:5d:b7:d1:71:b7:20:
45:d3:64:52:d7:0f:21:af:99:ac:4f:d3:98:d4:bc:11:b4:78:
23:45:3c:11:9e:62:7b:7c:a5:26:33:6c:55:f8:93:42:32:d0:
8b:f5:00:f3:9a:79:62:cc:62:c2:ef:f0:4e:72:5c:03:f5:55:
c5:15:87:7a:7d:34:93:fc:fa:3c:04:93:a2:55:7e:9f:17:fa:
c2:ec:66:de:75:30:66:82:a2:36:9a:d1:96:fe:45:f5:ce:78:
1d:49:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:49:12 2025 by rpki-client