Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20323136333836.roa
File: 326130373a323438363a6566303a3a2f34342d3438203d3e20323136333836.roa (raw, json)
Hash identifier: HUo0gY5oKQjE3+/wiz6pJV4+KRo5cyTvV0aUD2hNoVo=
Subject key identifier: F7:20:C1:57:02:02:BF:52:23:4B:9B:13:62:5F:0B:ED:EC:64:19:DF
Certificate issuer: /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial: 0CB8F3119D67ADBDAE0946A4633F2419E85D83FC
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20323136333836.roa
Signing time: Fri 28 Jun 2024 19:45:56 +0000
ROA not before: Fri 28 Jun 2024 19:40:56 +0000
ROA not after: Fri 27 Jun 2025 19:45:56 +0000
asID: 216386
IP address blocks: 2a07:2486:ef0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b8:f3:11:9d:67:ad:bd:ae:09:46:a4:63:3f:24:19:e8:5d:83:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Validity
Not Before: Jun 28 19:40:56 2024 GMT
Not After : Jun 27 19:45:56 2025 GMT
Subject: CN=F720C1570202BF52234B9B13625F0BEDEC6419DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:d1:d8:ed:30:47:3b:03:2f:b1:4c:08:c2:
f8:f8:45:16:f1:cc:16:c0:1c:50:2d:b4:2b:54:e0:
be:0d:db:a0:94:3d:db:84:e0:21:55:33:ae:1b:cc:
88:5e:74:5d:28:b2:02:a1:40:01:05:b4:d1:f0:d7:
39:8c:1a:41:d7:f5:87:b2:42:1c:b8:f8:85:f7:b9:
68:d7:5e:1e:70:00:d7:0c:6d:57:55:3d:29:87:f0:
6c:75:36:75:99:f2:dd:44:bf:1d:42:d9:c9:da:3a:
ec:4f:e1:a7:c3:a6:f4:db:66:7b:a5:8f:70:ba:eb:
40:48:cf:fc:82:7f:41:9e:4e:e1:fc:cb:d1:83:7c:
96:e2:8f:70:f2:94:98:b1:ef:35:bf:d9:8d:48:be:
7c:58:3c:67:61:d0:5a:d5:6b:95:c9:7f:c4:32:c0:
80:da:fc:96:b3:b6:b4:64:ba:8a:e8:d5:38:03:f6:
ff:e3:a1:72:75:95:5a:97:9c:8b:6a:95:ce:b9:64:
ee:51:d0:26:57:ba:c9:b9:2b:06:dd:0c:5f:a0:db:
83:ea:7a:8f:65:ec:55:3b:5b:d3:f2:0b:d0:e6:20:
57:b8:e7:f5:ee:14:d5:91:eb:c8:75:5e:4d:69:ec:
84:2b:72:44:58:5e:39:b8:df:96:76:97:86:b5:0c:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:C1:57:02:02:BF:52:23:4B:9B:13:62:5F:0B:ED:EC:64:19:DF
X509v3 Authority Key Identifier:
keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/326130373a323438363a6566303a3a2f34342d3438203d3e20323136333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ef0::/44
Signature Algorithm: sha256WithRSAEncryption
21:55:78:18:ac:d7:93:5a:4c:d3:e6:b3:f8:90:8a:07:f0:e0:
35:fe:d1:80:32:5a:0d:e3:5a:18:50:59:c6:ab:c7:7e:a1:a4:
31:11:8a:34:bf:85:c3:4d:05:ce:40:88:e3:aa:f3:88:62:26:
5e:1f:5f:0f:65:9e:72:fa:f3:a9:bf:51:0e:b4:88:83:73:c9:
2f:a5:56:63:b9:52:b0:38:9e:2e:70:be:99:1b:e1:b4:e3:bb:
da:46:0e:11:ab:6a:19:10:8f:9c:92:f4:cd:03:ec:4a:0f:52:
15:43:b9:1c:31:08:4c:80:bb:a2:5b:d7:0d:c2:69:04:fc:04:
e9:f7:b1:ce:21:8e:da:64:0e:58:50:b4:2a:af:fe:17:86:fc:
2e:32:ee:4c:be:be:01:20:f3:b7:52:b2:42:c9:30:de:20:5a:
34:a9:ac:58:04:cd:3c:61:c4:ab:d9:b6:39:8a:57:b3:ff:93:
bd:e5:6a:0a:81:ae:53:07:b2:e6:4f:c6:d3:8e:ce:d2:6e:a1:
05:ff:19:49:71:d6:3d:3d:33:69:6d:17:06:3e:bb:5e:b1:8d:
be:42:48:88:2e:df:fb:f8:ee:16:a2:d3:f9:af:15:64:a6:a2:
65:4f:ae:07:bd:76:74:d1:89:6b:bb:1e:53:fa:ad:0f:a9:19:
29:87:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:52:01 2025 by rpki-client