Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337643a3a2f34382d3438203d3e20323134373537.roa
File: 326130613a363034343a616337643a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: duBM3Cj9nXEhI7pR1OoApPZ63eSifXKUiHR99vkfF1s=
Subject key identifier: F7:08:7C:57:91:AF:69:C4:8C:87:B5:E6:00:A2:0C:0C:9C:D0:83:89
Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial: 4927C4F46C01A48A371501C4C231D8B5773A9B41
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337643a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sat 08 Jun 2024 14:02:41 +0000
ROA not before: Sat 08 Jun 2024 13:57:41 +0000
ROA not after: Sat 07 Jun 2025 14:02:41 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:27:c4:f4:6c:01:a4:8a:37:15:01:c4:c2:31:d8:b5:77:3a:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Validity
Not Before: Jun 8 13:57:41 2024 GMT
Not After : Jun 7 14:02:41 2025 GMT
Subject: CN=F7087C5791AF69C48C87B5E600A20C0C9CD08389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:0b:77:8b:0a:bd:1f:07:63:5d:cb:8b:72:
08:33:85:97:cb:53:1c:b0:88:33:40:3d:96:3d:33:
b3:27:40:da:31:6c:fc:ef:98:4f:a9:5f:46:c7:c5:
a9:12:08:df:e3:b4:78:c2:4a:0b:7d:67:ff:02:10:
b5:b1:0d:f6:11:ed:f6:fa:63:22:0d:d3:e7:ec:99:
33:28:8e:0f:bd:09:d4:0e:f7:9e:55:aa:6a:7d:c5:
2f:00:de:05:87:63:fe:7c:09:7c:90:83:7f:1b:d9:
2c:f4:1b:23:43:ac:cb:d7:3c:43:07:62:72:d1:66:
d4:b2:f7:37:e0:dd:17:2e:97:58:ed:4b:10:cb:0d:
0f:da:b5:13:c6:b6:6b:89:17:42:7f:d9:72:ae:e1:
59:a5:4d:d9:c7:df:58:c7:21:8a:b6:9c:da:3a:bf:
63:13:e8:6b:f2:d2:dc:52:6a:7e:02:ef:05:b8:98:
63:04:15:89:fe:7d:e1:62:19:26:24:ad:09:f5:19:
18:ad:1f:96:2b:3a:75:c6:b1:98:52:4a:cb:0b:d5:
77:35:01:d4:08:ac:0b:33:2f:6a:72:5c:a6:29:ff:
7b:21:16:ff:a1:fb:bf:70:38:2b:41:84:78:5d:d6:
23:00:95:f4:94:91:1e:72:1d:28:a5:30:16:8b:c4:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:7C:57:91:AF:69:C4:8C:87:B5:E6:00:A2:0C:0C:9C:D0:83:89
X509v3 Authority Key Identifier:
keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337643a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac7d::/48
Signature Algorithm: sha256WithRSAEncryption
78:99:1e:a1:7b:f2:2a:c2:2e:93:19:cb:c5:12:e1:21:cc:66:
1c:ea:95:0e:a3:aa:62:94:d5:aa:6c:c3:5d:dc:94:ec:1d:52:
3f:8e:c3:3d:32:d8:86:a1:07:c1:25:b8:9a:46:66:9b:33:b1:
7b:d6:ab:2e:72:17:9e:eb:6c:8d:49:8a:bf:5a:38:0e:6d:5e:
33:d4:f0:ea:0d:46:ae:61:ae:3b:69:82:79:66:79:19:79:2e:
8b:6b:f0:e9:45:bc:71:cf:2f:b6:08:97:92:92:ee:ef:25:ec:
15:dc:76:88:fe:29:a5:39:f5:32:f5:d6:bc:b4:b1:95:b7:3b:
cb:aa:8e:a1:b9:5d:f7:ef:1a:5a:40:26:77:ce:24:f9:e7:26:
12:2f:2a:a5:61:aa:f3:54:6d:f1:fe:51:96:54:19:29:22:44:
7f:af:d2:43:6e:cd:48:30:bd:5b:a5:b6:9d:70:c5:ef:f6:b2:
0e:6b:3f:71:62:a9:0a:b8:9e:b3:1b:a3:71:45:29:ce:e4:a4:
4f:15:93:b5:b8:04:f5:d5:8f:09:91:6d:47:96:ce:13:80:b8:
42:56:bf:b3:d1:85:a8:b4:d8:1d:39:4d:c8:0b:ae:7c:2c:61:
a9:2d:ba:8b:e5:97:18:c5:ef:3e:b4:83:63:dc:36:9e:cd:e3:
1b:ff:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:01:04 2025 by rpki-client