Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363330303a3a2f34342d3434203d3e20323134313239.roa
File: 326130613a363034343a363330303a3a2f34342d3434203d3e20323134313239.roa (raw, json)
Hash identifier: wVTjXuJ00T/lAzK+tRH7ltdAxpfZfU6P0QMWyGG52GY=
Subject key identifier: 6D:30:CE:AF:59:03:C1:7B:02:41:9A:0E:39:AD:90:EC:1B:9F:99:2B
Certificate issuer: /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial: 66E31019C02F0C29F175101FE21437BF8561CB2C
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363330303a3a2f34342d3434203d3e20323134313239.roa
Signing time: Fri 20 Dec 2024 17:27:42 +0000
ROA not before: Fri 20 Dec 2024 17:22:42 +0000
ROA not after: Fri 19 Dec 2025 17:27:42 +0000
asID: 214129
IP address blocks: 2a0a:6044:6300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:10:19:c0:2f:0c:29:f1:75:10:1f:e2:14:37:bf:85:61:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Validity
Not Before: Dec 20 17:22:42 2024 GMT
Not After : Dec 19 17:27:42 2025 GMT
Subject: CN=6D30CEAF5903C17B02419A0E39AD90EC1B9F992B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:70:90:bf:64:cc:27:43:ed:bb:60:9e:f7:
9c:21:7e:45:c6:e7:e0:80:ab:5c:42:46:98:13:5b:
8e:8a:e7:3f:d3:e1:cc:b4:5a:26:56:c2:4f:3d:71:
a9:a9:6e:2f:b6:28:68:e3:a3:fa:c3:f4:6e:85:33:
d9:b6:77:31:8a:1b:17:1e:5d:e1:49:70:b5:b9:49:
0e:57:33:ca:4b:ef:8f:21:37:19:4e:72:af:58:6d:
37:b7:57:5c:7e:12:e5:93:13:cf:f3:07:ca:a8:f4:
7f:43:d4:cd:90:da:24:9d:9c:16:f8:2a:db:16:5b:
ec:2d:01:f5:e2:73:a6:c6:e9:19:83:2c:26:c3:f4:
07:b5:93:47:37:89:2b:d3:c1:a9:f8:67:b6:d3:9f:
18:bf:78:90:a7:63:26:58:8f:e8:49:f1:7d:4a:84:
24:c1:b7:24:b4:44:49:61:6e:dc:e6:6a:b8:39:ee:
3d:38:1e:b1:e5:cc:b7:a9:dc:d9:ff:44:93:00:58:
f9:cc:df:bf:f1:f0:db:5a:2f:fd:c7:12:9e:8c:cd:
cf:3f:6a:a1:8b:ec:e0:4b:48:a6:ee:e0:21:09:f8:
89:a5:35:bd:c3:4e:c5:07:e2:d3:31:2a:df:ea:06:
7b:1d:7d:fb:25:8c:83:bb:0e:d3:83:91:e7:38:7b:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:CE:AF:59:03:C1:7B:02:41:9A:0E:39:AD:90:EC:1B:9F:99:2B
X509v3 Authority Key Identifier:
keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363330303a3a2f34342d3434203d3e20323134313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6300::/44
Signature Algorithm: sha256WithRSAEncryption
bd:71:ce:c2:b1:c2:fe:2e:c0:01:1d:dc:15:0b:33:1c:e4:2f:
ce:16:f8:13:35:1f:9f:a7:36:f5:b1:f3:38:c1:8d:56:69:d0:
bc:e1:c9:43:6a:e6:2a:5e:b6:97:fe:d1:37:df:3a:70:2b:50:
3f:49:bb:95:45:ec:23:92:7e:c5:f6:37:31:33:68:7a:47:10:
bc:cf:3d:25:ba:7b:0b:0d:4f:c2:82:1b:56:cf:fc:6f:fa:65:
15:4b:17:b3:a1:39:2d:af:d1:90:b1:56:b7:bc:3b:b6:16:29:
e3:cd:7f:ee:34:1e:1d:cb:1f:30:87:35:f7:85:ec:0b:da:0f:
4f:6d:21:3a:ef:9d:5b:3a:f7:a2:73:2e:7c:b1:8c:17:ae:47:
28:41:6b:06:9a:e1:5a:ad:5e:ca:4a:27:54:92:bb:1c:1e:3b:
93:3f:ae:41:26:47:ce:2c:55:71:3e:94:09:79:32:25:d7:bc:
9e:64:6d:71:24:19:f2:9e:0d:ae:e2:12:c2:ff:84:d2:66:ec:
73:f5:51:d9:47:cb:b1:47:71:62:ba:21:e7:c8:52:f2:76:66:
fc:98:f3:60:9a:f2:c1:fc:5f:aa:bc:82:97:b0:ef:38:13:3a:
33:3c:42:5f:d2:29:1e:bb:a5:8b:22:4a:3d:9a:2a:4f:f6:15:
2d:40:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:56 2024 by rpki-client on console.sobornost.net