Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34342d3438203d3e203437323732.roa
File: 326131313a323963303a393062303a3a2f34342d3438203d3e203437323732.roa (raw, json)
Hash identifier: 2iVIlb7kfCjLTNKrhm0IyQr+skGx6reNV3fnBfbkN1o=
Subject key identifier: 9D:D4:55:D2:80:3B:CA:40:F4:44:89:29:82:70:E4:35:3B:7B:F0:10
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 413D5B0793F81B5F3DA44F62745FC6742BD772DD
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34342d3438203d3e203437323732.roa
Signing time: Tue 17 Oct 2023 17:40:48 +0000
ROA not before: Tue 17 Oct 2023 17:35:48 +0000
ROA not after: Tue 15 Oct 2024 17:40:48 +0000
asID: 47272
IP address blocks: 2a11:29c0:90b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3d:5b:07:93:f8:1b:5f:3d:a4:4f:62:74:5f:c6:74:2b:d7:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Oct 17 17:35:48 2023 GMT
Not After : Oct 15 17:40:48 2024 GMT
Subject: CN=9DD455D2803BCA40F44489298270E4353B7BF010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:2a:2c:c5:2d:43:7f:ca:d7:3d:84:af:58:
f4:68:d9:2b:4b:48:c6:d6:93:bc:5d:57:e0:93:79:
11:a0:da:ad:c5:6a:92:b5:37:84:10:5d:53:77:a5:
99:ec:c9:b8:4a:0f:d6:4c:ef:04:af:2d:6c:74:4f:
32:23:05:1a:c5:36:e0:ee:75:84:72:dc:0f:a6:28:
59:d7:27:7b:ca:39:a2:b3:23:d5:d5:d7:09:b3:65:
d6:d6:01:8e:c8:e5:0e:59:df:89:ee:54:c3:42:40:
e0:ba:88:54:d0:5c:2d:20:91:20:18:11:40:62:9f:
ae:b7:93:4c:0d:bc:9b:3a:c1:8f:a6:f9:b9:4a:0f:
90:a1:1f:fa:4b:86:8f:e3:89:a1:ef:a4:4b:82:fb:
ba:a5:48:c9:98:d6:de:53:ba:b1:b2:20:b6:fa:00:
0d:02:fa:dd:f9:95:93:68:9d:23:73:e0:c2:69:cc:
ef:e6:85:ae:22:24:14:6f:bd:27:97:4c:ca:c6:7d:
95:46:4d:00:bd:2e:42:ea:68:7b:22:d6:1a:0e:01:
11:d2:b9:8c:ec:20:8a:96:47:42:9b:24:25:bf:e8:
87:33:5c:d8:d6:24:8c:5f:c8:18:da:12:fa:a0:85:
f4:01:15:e1:08:af:cd:0b:8b:a9:41:79:ed:37:42:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:55:D2:80:3B:CA:40:F4:44:89:29:82:70:E4:35:3B:7B:F0:10
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393062303a3a2f34342d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:90b0::/44
Signature Algorithm: sha256WithRSAEncryption
30:9c:28:80:03:22:13:bf:f6:fb:81:3d:71:49:c7:c4:44:0d:
9f:cd:f6:88:a3:80:0f:a8:e5:fd:85:18:1e:9e:c6:cf:03:d4:
28:d3:25:68:b5:2f:4c:5f:a0:48:c7:3e:e6:78:de:fd:2d:6b:
f6:8c:c2:e8:a7:22:9c:0c:fa:f0:6d:55:f7:b9:18:a6:64:f7:
60:84:23:46:70:41:c1:49:2c:ed:9b:57:ce:fd:cd:75:ca:23:
c6:5a:66:1b:f1:7c:b0:85:a0:87:4c:d6:33:2f:5b:c8:0b:1f:
64:c1:34:6f:71:e0:86:8e:8d:47:ac:3a:9f:a8:75:32:f0:33:
bf:ee:2f:2b:01:c5:b1:1a:e0:00:a1:24:7c:a0:46:72:22:af:
82:c3:40:6a:01:3f:ce:19:61:5f:25:8e:5d:e2:9c:d3:64:9a:
f2:ec:85:85:82:82:6a:65:bd:a4:59:ad:b5:f9:d6:8c:fd:e4:
10:32:99:dd:58:a4:98:4c:66:1d:c4:54:4c:80:67:0f:8f:17:
7d:ed:e8:52:ac:60:f3:86:b2:59:60:52:d1:30:31:e4:47:13:
21:83:3e:c0:18:30:b8:16:eb:9d:12:5c:79:91:e8:a9:15:ee:
c1:62:55:96:c3:f9:c7:e7:f5:25:1f:93:cf:44:21:97:d7:63:
a1:66:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:04:36 2025 by rpki-client