Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
File: 326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa (raw, json)
Hash identifier: HoZEJuAKu+6els2T6PIKuOyOTBFoyRTrXqu2tYv2JPM=
Subject key identifier: 51:7D:90:4A:1C:D8:B8:77:42:E2:C9:80:31:A1:22:15:62:35:0F:D9
Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial: 351952DEA6CB6EEFD09EB308A88261168F504984
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
Signing time: Fri 20 Jun 2025 15:01:48 +0000
ROA not before: Fri 20 Jun 2025 14:56:48 +0000
ROA not after: Fri 19 Jun 2026 15:01:48 +0000
asID: 214223
IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:19:52:de:a6:cb:6e:ef:d0:9e:b3:08:a8:82:61:16:8f:50:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Validity
Not Before: Jun 20 14:56:48 2025 GMT
Not After : Jun 19 15:01:48 2026 GMT
Subject: CN=517D904A1CD8B87742E2C98031A1221562350FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:12:ec:cf:60:d2:92:43:2f:e9:f1:86:40:
d8:37:ab:0d:4a:16:87:70:f3:ff:1e:17:6d:24:a8:
2e:1f:31:cd:1a:b7:fa:f9:35:7d:19:64:b5:fd:c7:
f8:65:6b:dc:d1:3c:13:89:08:b6:16:4a:e2:67:d4:
e6:01:a1:db:a7:8a:d1:81:ca:80:4a:69:47:da:07:
ab:c5:10:54:9c:cd:32:6c:a5:65:98:b7:c1:ee:5f:
56:3b:96:b9:3e:fe:2c:56:0b:68:89:78:25:3a:ef:
0a:83:4a:b5:8c:b9:3b:0c:c8:e3:f1:e8:4b:3e:d5:
1a:ce:8b:bd:9d:da:92:33:95:b5:09:01:81:8d:d1:
7c:74:df:dd:b9:47:e3:30:14:ec:7e:85:5a:fa:16:
6f:3c:56:1c:cf:76:f3:dd:27:6d:5e:4e:cb:e0:20:
90:06:78:93:d0:b5:5c:58:c2:e8:cd:98:26:ed:6b:
26:b1:7c:4b:6e:e8:89:81:64:ed:b1:dc:8a:59:26:
c2:24:61:e2:1c:db:69:0d:b7:2e:10:2e:62:45:f4:
45:a7:fa:d3:8d:83:23:81:5c:1d:9b:23:b6:7e:02:
15:d7:e5:bf:3d:3d:b1:00:61:86:ca:02:87:db:63:
49:a9:e7:c8:6a:be:58:0c:40:1d:98:cd:c9:ff:ec:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:90:4A:1C:D8:B8:77:42:E2:C9:80:31:A1:22:15:62:35:0F:D9
X509v3 Authority Key Identifier:
keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
04:37:a2:83:42:09:09:dd:a0:5a:50:05:7e:95:d9:fa:64:86:
e0:9f:4e:b5:f2:1a:f9:21:e9:03:d7:aa:f8:60:56:30:6e:89:
c2:9d:df:01:60:c5:2d:00:9b:c9:a6:73:c3:a2:d2:88:b1:b7:
41:e3:d8:a1:fb:56:aa:99:ca:a6:ee:d5:4a:e3:b9:e0:7b:fa:
87:10:43:da:48:3b:96:31:bc:9e:32:68:9c:5c:59:99:94:41:
b1:7c:cd:a0:a1:03:4f:be:d8:4b:de:6b:d8:b5:e8:47:a6:b9:
57:6e:dc:8d:ad:ec:40:e3:2b:6c:67:77:bf:b2:cd:28:55:5e:
d0:4c:5c:a8:b2:58:23:60:f6:8b:f9:5e:24:72:7f:eb:fd:d7:
25:c5:d1:02:ab:b9:22:95:24:05:f1:7b:08:d9:87:8f:15:f1:
ae:63:58:49:68:4e:8a:3a:e9:1d:33:46:67:57:ac:21:cc:7a:
cf:cc:2b:0b:c1:29:2d:3e:d1:84:0d:ec:ea:9e:ce:1a:9b:9d:
40:94:93:90:74:b7:07:eb:a9:f3:02:95:81:22:cb:b9:01:2c:
5f:b3:b7:aa:02:38:9e:41:fe:3a:05:16:79:10:b8:84:f4:17:
a9:c5:75:a7:04:0a:c2:a4:6a:d2:53:46:30:55:bb:55:c2:98:
a9:15:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:35:41 2025 by rpki-client