Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365313a3a2f34382d3438203d3e20323133373638.roa
File: 326130613a363034343a363365313a3a2f34382d3438203d3e20323133373638.roa (raw, json)
Hash identifier: Sr9otsafI4NvEFDveNtt5Mj9mjDo0SUWNgGpno0I5GU=
Subject key identifier: C9:FD:71:B1:2C:17:CD:02:48:5E:3C:97:35:CF:BE:5F:6E:BA:DB:15
Certificate issuer: /CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Certificate serial: 2E575DB16B7CA9A91B4EF4B74821A83C83034E82
Authority key identifier: 77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365313a3a2f34382d3438203d3e20323133373638.roa
Signing time: Mon 20 Jan 2025 12:31:58 +0000
ROA not before: Mon 20 Jan 2025 12:26:58 +0000
ROA not after: Mon 19 Jan 2026 12:31:58 +0000
asID: 213768
IP address blocks: 2a0a:6044:63e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:57:5d:b1:6b:7c:a9:a9:1b:4e:f4:b7:48:21:a8:3c:83:03:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7796B1C4EEB415B656CB468A71B181E93F2C50BB
Validity
Not Before: Jan 20 12:26:58 2025 GMT
Not After : Jan 19 12:31:58 2026 GMT
Subject: CN=C9FD71B12C17CD02485E3C9735CFBE5F6EBADB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:30:68:b8:66:d1:6c:af:73:0e:ee:f4:d3:
e0:95:b7:85:ac:a7:a8:e9:26:60:0c:93:d7:c0:f9:
b8:b4:f4:18:bf:41:e0:1c:ac:27:1f:da:b4:47:17:
20:fd:f5:2f:8f:df:8b:90:8f:6b:b7:54:d2:5b:94:
56:25:26:f0:4c:b3:53:f7:ad:5c:e7:d4:25:b7:5a:
88:df:b1:40:1e:70:aa:7a:a9:52:41:6a:7b:df:0e:
7c:5a:e9:ea:10:df:71:38:a1:17:cd:d0:a1:eb:17:
27:47:24:1f:48:64:b3:93:6c:55:df:1f:77:e3:e5:
57:3c:22:fd:d2:b6:a9:00:f5:ba:1e:95:c0:23:4d:
5c:91:14:45:36:b2:cf:32:d6:2f:18:2b:d6:0e:60:
9d:ff:5b:0d:4d:ed:73:c1:fb:4c:a7:a2:64:da:56:
47:0f:7f:76:d3:fd:ba:fc:2d:af:ff:22:6f:bc:a4:
06:e2:c4:7b:46:f6:9d:db:c9:2f:8e:c2:4c:a1:22:
45:b2:bd:4f:5b:f4:b5:ef:0f:35:35:9b:ef:5a:76:
f9:c6:2a:3a:f7:42:64:cc:43:84:80:c3:17:df:c2:
dc:7a:71:f2:b7:46:8b:67:46:4c:0c:d5:70:5f:d6:
4f:c5:40:27:fa:d7:49:6f:40:84:20:80:9a:74:61:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FD:71:B1:2C:17:CD:02:48:5E:3C:97:35:CF:BE:5F:6E:BA:DB:15
X509v3 Authority Key Identifier:
keyid:77:96:B1:C4:EE:B4:15:B6:56:CB:46:8A:71:B1:81:E9:3F:2C:50:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/7796B1C4EEB415B656CB468A71B181E93F2C50BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/0/326130613a363034343a363365313a3a2f34382d3438203d3e20323133373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:63e1::/48
Signature Algorithm: sha256WithRSAEncryption
06:e2:ea:45:c0:3c:a8:22:c7:00:54:24:7f:72:55:40:c8:42:
6b:09:1e:d4:d9:cc:ab:26:da:3f:92:2d:a5:01:93:64:ba:75:
b4:0d:3a:d4:34:68:ac:b1:41:a3:ae:ec:1a:9d:6f:88:b0:84:
1d:e4:bc:36:60:3e:d1:5a:2f:44:00:d6:d8:7d:0d:19:70:6a:
46:93:14:14:f8:0e:13:84:69:74:cb:bb:45:49:aa:7a:99:a0:
ff:fb:d9:de:90:33:c7:b8:1a:3e:28:8c:11:18:85:42:09:5b:
bc:28:7f:e4:6f:bd:1b:2d:05:c6:3a:dc:7d:3f:d6:c6:46:6e:
d4:40:5c:f3:20:1c:18:60:3f:5d:20:b5:12:78:09:a8:58:47:
0d:81:98:b1:87:8f:a1:bb:e7:6a:5e:e7:6e:04:f6:99:0d:46:
1f:32:60:ef:10:2f:c3:93:f8:0b:c4:58:10:ae:0b:31:91:b2:
a3:73:54:35:5d:05:72:ec:9d:dc:6d:ad:60:00:ed:b0:c8:19:
a2:36:1b:d7:a5:f1:b4:28:4f:79:76:b4:f6:2d:df:82:95:99:
42:a3:4d:52:77:8f:1a:af:a7:61:fe:7f:e4:52:5a:89:4c:09:
de:a6:00:2c:e4:ac:44:50:fd:5a:db:4f:a1:68:e9:cf:50:b2:
ae:47:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:59 2025 by rpki-client on console.sobornost.net