Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa
File: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (raw, json)
Hash identifier: vC14MQ5Vem5du4Q+HUNQ1hssSIhznMQ3X8RxcinDRN8=
Subject key identifier: 3C:CF:9F:C4:C1:83:9B:6F:23:80:BF:EC:93:3C:34:DE:0C:2D:A6:16
Certificate issuer: /CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Certificate serial: 0C7AC67ADEE6B78C02592E399E1F23D3668C13BF
Authority key identifier: B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa
Signing time: Sun 08 Dec 2024 01:23:03 +0000
ROA not before: Sun 08 Dec 2024 01:18:03 +0000
ROA not after: Sun 07 Dec 2025 01:23:03 +0000
asID: 214510
IP address blocks: 2a0a:6044:7d60::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7a:c6:7a:de:e6:b7:8c:02:59:2e:39:9e:1f:23:d3:66:8c:13:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A381A0FBA779028D2A777759668131A0F8F62F
Validity
Not Before: Dec 8 01:18:03 2024 GMT
Not After : Dec 7 01:23:03 2025 GMT
Subject: CN=3CCF9FC4C1839B6F2380BFEC933C34DE0C2DA616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:bd:98:ff:c8:9e:8b:a0:de:20:01:24:17:
cc:f5:d5:1e:af:05:e5:ab:44:86:04:aa:a3:4f:be:
e9:f8:ff:35:a8:c9:46:e1:e7:03:4e:c5:b2:2b:18:
c1:72:3d:db:98:85:00:d8:aa:9b:8c:17:25:c6:cd:
5c:fe:94:17:9f:93:8c:68:ea:c7:b4:9d:cc:e7:4d:
00:22:66:e9:cb:a4:0e:5c:85:f2:39:bb:0f:95:5f:
d3:28:86:c2:22:23:c0:5b:68:fb:fe:67:93:43:62:
6e:2f:b0:f1:de:42:b0:b6:bd:32:12:b6:09:03:d0:
21:cb:79:63:c3:1c:c8:76:40:b1:b1:89:bb:3a:95:
41:1d:ab:90:9f:26:91:96:4d:ec:e2:82:bc:ad:53:
40:14:41:81:2f:31:90:02:82:40:13:3e:6d:a0:1b:
39:73:e4:ff:80:2b:8a:75:cb:d5:11:de:99:f8:83:
6e:32:a7:05:a1:06:a6:16:ea:98:ff:15:1f:fa:70:
20:66:a6:be:0f:16:e7:0d:00:74:39:3a:67:4e:5d:
3f:e6:2d:d0:95:41:d3:27:09:c6:c6:06:ac:26:ea:
c0:40:e9:74:c8:1c:54:35:a1:6c:ad:87:80:91:37:
de:d2:e4:71:5e:0b:83:d2:ce:50:9b:d4:46:05:56:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:9F:C4:C1:83:9B:6F:23:80:BF:EC:93:3C:34:DE:0C:2D:A6:16
X509v3 Authority Key Identifier:
keyid:B5:A3:81:A0:FB:A7:79:02:8D:2A:77:77:59:66:81:31:A0:F8:F6:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/B5A381A0FBA779028D2A777759668131A0F8F62F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B5A381A0FBA779028D2A777759668131A0F8F62F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/1/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7d60::/44
Signature Algorithm: sha256WithRSAEncryption
10:e3:aa:83:cb:42:bc:2b:4c:ef:26:6a:20:bd:75:96:d2:57:
f7:30:55:9e:ba:3d:a6:75:59:16:ed:b5:dd:e3:9d:17:68:95:
43:c4:94:ef:dd:16:5d:c9:d3:99:67:e7:3b:92:a1:d1:7d:f8:
14:21:0f:04:4d:a6:5e:5e:91:fe:8e:3b:4b:c3:ab:a9:56:75:
d8:10:4f:88:2b:04:c6:d8:40:69:a7:ab:28:e8:de:cd:71:86:
17:a3:48:8a:c2:f7:7e:c4:c3:d9:c9:67:10:6a:46:a9:e6:65:
1a:5b:19:01:14:4c:85:aa:ed:09:4c:32:df:d7:c8:97:93:c8:
cf:cd:a3:48:ae:53:b2:15:40:4d:47:3f:a5:50:a5:5c:43:d2:
b0:09:bb:ac:f2:6f:42:2d:c3:88:3b:07:10:4b:c6:ad:ef:d4:
ca:6a:4a:6a:86:eb:b8:6e:68:e3:a1:ab:cd:11:3c:55:f7:08:
67:d2:67:66:63:e5:04:a3:a8:59:64:8c:0d:d4:fb:b8:da:5e:
3e:5f:a6:ba:af:b0:0b:23:64:49:61:65:d8:d8:30:69:e7:61:
f9:1e:25:a8:2e:30:d6:17:98:f0:62:59:14:e5:e7:00:4e:d9:
d2:52:96:12:b8:26:8b:5b:ce:45:b5:e1:0a:24:a4:2c:4d:9d:
5a:7a:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:55 2024 by rpki-client on console.sobornost.net