Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa
File: 326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier: FBYGpLce3FDE2u8epNduIi1tbzg7JGxEeCJQSqzms9Y=
Subject key identifier: A5:1B:47:CB:A1:55:F0:57:7F:31:DE:5A:32:41:6C:A8:B7:C7:81:F6
Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial: 6279D90F23A3B8243D1975E91FE1B2358D9D2E02
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa
Signing time: Thu 19 Jun 2025 21:32:05 +0000
ROA not before: Thu 19 Jun 2025 21:27:05 +0000
ROA not after: Thu 18 Jun 2026 21:32:05 +0000
asID: 214223
IP address blocks: 2a0a:6044:6401::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:79:d9:0f:23:a3:b8:24:3d:19:75:e9:1f:e1:b2:35:8d:9d:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Validity
Not Before: Jun 19 21:27:05 2025 GMT
Not After : Jun 18 21:32:05 2026 GMT
Subject: CN=A51B47CBA155F0577F31DE5A32416CA8B7C781F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:bb:f5:4a:28:5b:17:3b:5d:f0:cd:d3:1c:
86:f7:ee:2a:19:d3:65:7e:15:6a:a6:3c:66:c1:be:
86:7b:f4:51:ca:93:81:82:62:ff:52:b2:91:fe:09:
ef:b2:7c:39:df:18:56:fb:e9:dc:d8:b5:1e:7d:a8:
ae:15:15:d9:af:a4:79:a8:b5:9f:11:ac:d8:dc:dc:
f2:7e:f3:f5:8a:7b:9a:f7:58:59:07:5f:f4:91:29:
9a:04:30:fc:a0:9f:79:f4:70:42:ab:23:76:ac:77:
3c:8f:5e:21:17:40:70:89:de:64:f4:ad:0e:a3:b2:
85:6a:ab:9c:33:d7:14:38:1e:68:81:fd:24:9a:b1:
42:6f:68:c0:47:99:16:72:52:2d:78:2c:28:ff:c2:
20:8f:f4:4d:34:fc:9f:ed:7d:ef:17:64:ea:b8:a3:
11:07:3e:f6:2a:3b:c3:7a:5f:31:c2:40:bb:39:b6:
ed:a9:53:19:44:ba:c1:22:f3:d0:0d:cf:58:cb:33:
eb:3b:63:d2:d5:44:55:0b:92:0a:9a:63:43:e5:d8:
16:f2:bf:80:15:4d:dd:88:46:84:45:bd:30:36:e6:
7b:3b:f6:68:8f:83:34:12:33:c2:8d:36:e9:a6:c2:
11:47:78:22:f1:3f:0b:19:9b:2d:ca:17:2b:e2:a3:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1B:47:CB:A1:55:F0:57:7F:31:DE:5A:32:41:6C:A8:B7:C7:81:F6
X509v3 Authority Key Identifier:
keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6401::/48
Signature Algorithm: sha256WithRSAEncryption
09:ce:da:4e:d5:25:1b:0d:96:50:83:62:1b:21:b0:90:af:ef:
83:e7:94:87:e0:8d:00:3d:4b:65:36:fb:e6:9b:7c:67:3d:f9:
93:9b:d7:3b:9c:2a:15:c8:3f:66:78:ee:99:28:30:5f:cb:e1:
d9:56:67:a5:d5:f1:ea:4c:57:25:12:de:57:c7:eb:96:b3:2d:
79:bd:61:d2:3a:4b:ed:f7:bd:23:c0:e9:95:7c:5c:1f:e1:0d:
fb:c2:0f:09:0e:3a:69:b4:f9:e7:ff:2e:a9:b0:8e:81:10:0d:
8b:20:7e:e6:db:aa:0e:45:20:c6:5e:5c:9a:cb:1d:66:99:bb:
78:e9:27:39:01:90:db:3e:54:9b:a9:73:43:0a:f8:bb:8c:d2:
e4:4a:4f:1e:da:1f:69:6a:d3:17:5d:2c:5f:1b:d0:6e:62:ef:
1f:0b:07:e1:6e:e9:86:92:6a:be:96:f2:09:f7:57:ce:be:0f:
e6:08:a6:a5:ce:79:6d:67:c4:36:29:7c:52:16:a1:ce:78:71:
7f:df:c1:d1:8d:8b:74:0c:9f:08:5b:c7:12:b6:8d:e6:33:b3:
2c:d0:fb:a5:a2:1d:c5:bd:be:1a:74:79:2d:a4:c0:39:61:17:
ae:b9:a3:c6:d0:96:46:51:45:40:d8:d2:b2:5d:94:de:93:cb:
30:a6:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:49 2025 by rpki-client