Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3336203d3e203437323732.roa
File: 326131313a323963303a393030303a3a2f33362d3336203d3e203437323732.roa (raw, json)
Hash identifier: m44QmHuhB1XPM7O6FUDX0zI3BBPjgIuGu+MJwGxGPcw=
Subject key identifier: CE:B0:61:10:D1:E4:A1:C5:06:DF:DF:71:95:E8:A8:8B:BD:D1:D9:22
Certificate issuer: /CN=04803608395707A6C4A762643198A52C49DF6017
Certificate serial: 29E447152EFDBD3A9D3D3E8AECE9054C1DED1A75
Authority key identifier: 04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3336203d3e203437323732.roa
Signing time: Mon 25 Sep 2023 13:41:34 +0000
ROA not before: Mon 25 Sep 2023 13:36:34 +0000
ROA not after: Mon 23 Sep 2024 13:41:34 +0000
asID: 47272
IP address blocks: 2a11:29c0:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e4:47:15:2e:fd:bd:3a:9d:3d:3e:8a:ec:e9:05:4c:1d:ed:1a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04803608395707A6C4A762643198A52C49DF6017
Validity
Not Before: Sep 25 13:36:34 2023 GMT
Not After : Sep 23 13:41:34 2024 GMT
Subject: CN=CEB06110D1E4A1C506DFDF7195E8A88BBDD1D922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:f6:87:49:d5:6c:9f:da:e8:dc:dc:b8:ee:
f0:84:63:96:35:e5:53:5f:bb:e6:a9:3f:e0:f4:3c:
c3:bb:78:8c:c7:d1:6c:c7:bc:83:98:58:07:11:55:
40:1f:6a:1e:2a:33:60:dc:c8:c0:51:4c:a2:96:99:
22:43:13:de:59:32:89:65:8f:00:e4:22:08:28:f1:
b4:c9:a5:0c:8c:36:b4:50:cd:a6:96:2c:52:b0:f5:
ea:c8:5f:38:8e:7a:9c:46:79:e6:2d:19:14:e3:1f:
b0:e4:49:7a:a3:7b:08:db:f6:99:5a:2b:50:ab:98:
d4:5c:c8:30:4b:07:ee:f7:2b:15:69:95:8d:16:5f:
fd:fc:51:33:59:be:e0:fd:f1:99:92:14:5f:d8:e2:
2c:64:b5:b1:a9:84:aa:48:76:d7:a6:69:da:bc:56:
86:a9:1f:33:af:dd:19:e4:b7:5c:95:3f:bb:6e:46:
10:87:76:9d:5e:20:7a:d3:75:f7:3a:27:60:68:7f:
cf:02:e1:b1:36:d6:9d:d7:e6:6b:a6:69:55:95:50:
f5:14:57:aa:86:7e:19:3d:5c:46:85:ed:8d:af:c6:
26:37:7b:4f:7f:0c:83:1b:da:43:80:54:cd:dd:3d:
1f:b7:de:a7:88:e3:40:ef:ae:ad:e2:3c:d2:16:3a:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:61:10:D1:E4:A1:C5:06:DF:DF:71:95:E8:A8:8B:BD:D1:D9:22
X509v3 Authority Key Identifier:
keyid:04:80:36:08:39:57:07:A6:C4:A7:62:64:31:98:A5:2C:49:DF:60:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/04803608395707A6C4A762643198A52C49DF6017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/04803608395707A6C4A762643198A52C49DF6017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/2/326131313a323963303a393030303a3a2f33362d3336203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:f3:3a:21:52:e1:a5:af:20:13:bf:dd:67:b7:a7:3b:31:98:
51:22:65:e1:b1:c5:ed:07:16:9a:30:84:2e:8e:08:09:a8:3e:
f9:f3:93:7a:16:63:c8:29:5e:04:1a:b7:26:c0:bc:a3:64:d5:
4b:35:fc:01:b7:23:91:95:5b:7f:5d:06:93:3a:3d:3e:8c:7f:
e5:e2:e5:93:2c:ab:16:98:bb:d5:9a:30:c1:1d:e3:00:ce:c0:
24:32:a3:6d:ef:c9:3d:ce:82:20:8c:ef:b9:75:19:4c:9c:1e:
53:eb:79:b8:81:e2:8b:94:65:10:60:d8:32:eb:61:47:ce:a9:
c0:0a:b0:94:27:2c:b3:2d:19:1b:e6:5a:a1:d6:5f:9e:ee:12:
8b:58:31:24:07:02:e0:8b:5e:44:8d:40:72:1b:07:19:c1:a1:
74:38:3a:fd:cf:d0:3d:0a:5e:fd:d0:d9:44:0c:9a:40:24:f8:
58:d1:f1:1e:5f:5c:2e:f0:21:ab:31:6e:4f:e0:24:3d:6f:e4:
3f:62:e2:32:df:d9:78:15:aa:2a:6c:14:4b:d7:69:39:5e:43:
dd:ab:de:0d:37:82:12:98:ac:b8:e1:4e:9b:16:d2:c7:49:f8:
f4:51:ff:60:6d:d8:10:56:37:f7:70:02:02:dc:84:9e:d8:c4:
b3:a0:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:25:47 2025 by rpki-client