Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34382d3438203d3e20323134323233.roa
File: 326130613a363034343a363430303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier: pElqx52eXaEyceTFsN0opOFtGiBz5pXUUUeA/nD9Izg=
Subject key identifier: 30:30:29:7F:C0:71:0F:98:05:FB:BF:1F:70:24:D6:C8:24:91:E8:57
Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial: 61CDCDA5E8F8D598267F6D6869B630B0BD7A68A1
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34382d3438203d3e20323134323233.roa
Signing time: Thu 19 Jun 2025 21:02:57 +0000
ROA not before: Thu 19 Jun 2025 20:57:57 +0000
ROA not after: Thu 18 Jun 2026 21:02:57 +0000
asID: 214223
IP address blocks: 2a0a:6044:6400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cd:cd:a5:e8:f8:d5:98:26:7f:6d:68:69:b6:30:b0:bd:7a:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Validity
Not Before: Jun 19 20:57:57 2025 GMT
Not After : Jun 18 21:02:57 2026 GMT
Subject: CN=3030297FC0710F9805FBBF1F7024D6C82491E857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:12:a4:23:35:2f:b8:c3:a3:1c:e3:d4:46:
3a:ad:31:6b:85:a5:2a:58:6a:93:96:b1:cb:26:38:
2c:27:ea:08:d6:f6:dd:58:09:f4:0e:16:8d:77:d4:
f8:f5:c3:1d:5e:0f:9d:88:04:1a:77:82:82:97:e4:
42:b4:3e:55:f9:ed:82:77:f0:c4:ec:95:f2:af:35:
3c:ad:42:19:82:c3:93:92:07:56:59:ad:42:fc:44:
9b:d6:7d:1e:13:07:9d:61:88:4a:f3:82:ac:23:d9:
94:97:af:53:e5:cd:52:95:85:fb:2a:b3:d7:97:f1:
90:eb:c9:c2:56:c1:89:69:3a:68:bb:89:fa:89:d0:
45:e4:e5:78:f2:10:06:14:5c:4f:79:83:62:c3:90:
b4:14:f0:57:10:54:3e:12:3d:48:30:34:f0:45:f9:
12:7e:b4:d4:e4:4e:16:b8:5f:a8:c2:5a:6c:20:91:
0c:d7:0b:b7:9d:b3:11:26:45:bd:86:b3:92:c9:27:
c9:a4:3f:7c:42:46:fc:d5:8b:4d:45:8f:71:60:13:
02:eb:3a:05:fb:4d:73:09:9d:ab:a8:18:3a:13:c3:
2a:03:08:63:a5:64:57:fa:8b:24:61:38:5f:85:b0:
91:d1:9e:3b:10:0e:ee:e9:ec:4d:de:98:29:11:8c:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:29:7F:C0:71:0F:98:05:FB:BF:1F:70:24:D6:C8:24:91:E8:57
X509v3 Authority Key Identifier:
keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430303a3a2f34382d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6400::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e6:04:5e:46:bb:f3:6b:49:9d:b2:ab:c9:73:d7:8e:d6:d0:
78:91:00:05:1b:f4:41:72:eb:16:11:a5:cb:f4:76:59:f1:78:
0b:f3:ab:04:8e:3c:69:61:a8:4b:67:c6:7f:71:b9:e6:8f:10:
91:ec:ba:ee:6a:34:c0:d7:ff:53:3e:ac:63:a1:e6:bf:ce:0a:
aa:6c:83:c8:3d:5f:c7:16:d1:f0:97:7a:89:bc:23:0f:f6:c9:
99:73:b9:a6:d6:c9:ec:3a:21:97:1e:cc:15:e0:bc:71:37:aa:
83:fd:b0:0a:32:89:d7:57:4e:9c:b9:b1:71:66:d3:be:ca:99:
36:e6:1f:1b:09:0f:28:44:2a:cf:76:92:b0:f0:e6:21:73:f6:
d1:a3:93:fc:90:b8:05:51:50:3d:63:c0:7d:b1:b9:3b:c5:59:
63:46:5f:1d:e5:32:80:f0:e6:e8:79:70:87:26:33:90:ad:55:
01:05:f3:69:d0:fe:d9:fe:e3:2b:50:be:4a:9b:b9:f1:b7:ba:
a8:4b:3a:c3:ef:01:68:fc:1a:0a:b9:d2:cb:51:25:7f:8e:ac:
4d:a8:3f:5d:0b:c7:22:63:a9:d5:d3:1b:99:d3:58:0e:ea:a9:
06:10:69:9c:91:ed:9f:c6:84:8b:b8:e1:0a:05:61:8c:be:2e:
9f:41:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:34:25 2025 by rpki-client