Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34302d3430203d3e20323134373537.roa
File: 326130613a363034343a613130303a3a2f34302d3430203d3e20323134373537.roa (raw, json)
Hash identifier: FQLszEk+//MABN1qa1n0DPaOu65Ih9Kjz5wUiVaH2kQ=
Subject key identifier: 75:92:48:C2:68:97:CA:F1:9D:33:CD:1D:D0:4D:19:67:B5:1E:6D:9C
Certificate issuer: /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial: 7289FD5B6B6E0FF6AA8CB948581C8CAAC5D5FFB5
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34302d3430203d3e20323134373537.roa
Signing time: Fri 20 Dec 2024 15:33:38 +0000
ROA not before: Fri 20 Dec 2024 15:28:38 +0000
ROA not after: Fri 19 Dec 2025 15:33:38 +0000
asID: 214757
IP address blocks: 2a0a:6044:a100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:89:fd:5b:6b:6e:0f:f6:aa:8c:b9:48:58:1c:8c:aa:c5:d5:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Validity
Not Before: Dec 20 15:28:38 2024 GMT
Not After : Dec 19 15:33:38 2025 GMT
Subject: CN=759248C26897CAF19D33CD1DD04D1967B51E6D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:61:04:59:30:ca:b4:3f:67:cc:b3:82:78:
97:b0:5f:07:1d:53:78:68:a6:69:22:b5:2e:6d:1a:
08:25:5f:e7:ac:f9:90:b1:c4:fb:0a:a0:ce:2a:a7:
11:d5:f1:98:85:b7:0f:15:c9:63:10:71:ea:6c:cb:
3f:0d:74:6e:d0:a2:10:f8:1f:1f:33:e1:8e:ce:78:
fa:f0:1b:8a:4c:29:ac:e4:72:3a:4d:e4:75:01:ae:
d1:0f:13:8b:12:65:3d:9d:65:38:c9:1d:e0:08:ac:
46:4a:c6:c4:f5:97:f9:b1:d3:85:0b:51:94:32:5b:
98:d1:32:7e:9c:78:77:6f:23:0d:36:c8:d6:09:2b:
ce:f4:f7:4d:0d:4c:a8:14:58:06:49:f4:d7:73:69:
11:23:74:b7:f3:cd:fa:db:e2:aa:e2:ee:12:9b:f6:
8d:9b:28:f4:39:f8:ff:98:18:66:0f:f7:ca:b6:a1:
a7:ad:46:22:0d:b3:e8:a7:fb:d6:28:75:08:97:4a:
90:cb:dc:36:86:91:d8:e6:b9:e9:69:4e:54:3a:fb:
60:e0:48:b0:60:72:8e:29:86:23:98:4f:a9:2f:8b:
80:1f:24:dc:a4:89:0b:44:8d:bb:2c:06:0b:c2:a5:
4a:61:cb:ee:0a:ca:56:6c:18:8d:51:bc:1a:e6:d5:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:92:48:C2:68:97:CA:F1:9D:33:CD:1D:D0:4D:19:67:B5:1E:6D:9C
X509v3 Authority Key Identifier:
keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a613130303a3a2f34302d3430203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a100::/40
Signature Algorithm: sha256WithRSAEncryption
81:b9:31:c3:7e:26:58:62:0f:7c:18:06:fc:e8:14:f8:36:f0:
c5:6f:68:81:2e:52:e9:b7:59:92:5b:1e:6d:97:b5:ed:6d:87:
de:c6:10:0a:ff:ab:50:06:a1:ea:b0:d2:97:55:1a:27:dc:6e:
13:3e:06:75:70:3f:c4:ae:36:45:3f:65:d3:cd:a8:7b:61:e9:
b8:42:d8:63:8b:6c:e5:ac:fc:dd:fb:e0:8b:59:19:fe:b0:10:
67:71:d4:b4:0b:ae:52:6c:ed:2b:b5:4f:77:99:4d:2b:2e:a0:
68:5f:88:52:57:b7:42:5c:67:ac:ef:54:56:f5:a3:b0:67:48:
b3:2b:32:72:1b:d8:fb:38:6e:0b:a5:f0:e8:ab:70:42:93:7f:
70:92:a5:e0:4a:ca:9d:5f:14:6f:87:9f:49:a7:97:4f:20:7e:
10:98:a3:d3:2d:d0:a1:fa:5c:84:2e:fa:57:76:37:ad:2d:80:
88:05:e2:bf:76:25:64:59:e4:41:89:90:94:3b:d4:75:47:16:
68:a5:d1:a4:28:f1:3f:d4:12:ab:19:b7:d5:c0:8b:ed:d2:c1:
00:7b:0d:e3:1a:31:de:6b:fc:b2:da:8e:2a:d1:57:31:20:1e:
08:be:6d:bb:d8:a8:16:1c:af:93:03:05:2d:05:41:78:67:8f:
b7:00:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:54 2024 by rpki-client on console.sobornost.net