Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
File: 326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa (raw, json)
Hash identifier: Tyub93Z/D3EMb4IHqWWXy5z/ffvXB65M6ndFcTSCgcg=
Subject key identifier: 1D:1B:64:61:B2:C8:5E:C9:2C:8C:3B:3E:88:6D:12:13:5D:F1:95:28
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 5EFF446EBFB032B0C362DBF5BC84F6FD97CE6B74
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
Signing time: Thu 01 Feb 2024 21:35:57 +0000
ROA not before: Thu 01 Feb 2024 21:30:57 +0000
ROA not after: Thu 30 Jan 2025 21:35:57 +0000
asID: 215605
IP address blocks: 2a0a:6044:7c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ff:44:6e:bf:b0:32:b0:c3:62:db:f5:bc:84:f6:fd:97:ce:6b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Feb 1 21:30:57 2024 GMT
Not After : Jan 30 21:35:57 2025 GMT
Subject: CN=1D1B6461B2C85EC92C8C3B3E886D12135DF19528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:a6:fb:48:7e:a8:f5:13:e0:69:57:00:19:
8f:16:b1:eb:73:78:16:c5:b7:20:88:36:4e:dd:f3:
93:c2:48:84:e2:59:19:11:9d:6b:5b:02:d6:bc:11:
ee:64:11:a8:c9:a6:7e:17:09:79:23:2f:12:65:d8:
ed:50:68:ff:d5:1a:66:d7:a2:ba:b1:62:8d:e2:d5:
f0:87:d4:80:3d:6b:d6:3e:e8:4b:15:84:d5:5b:50:
d2:51:fc:fd:29:56:88:8b:fe:bb:ec:d4:d1:22:75:
ff:8f:16:e5:59:7f:41:77:77:8d:af:c9:1f:13:e3:
6e:7b:6f:c4:d9:83:03:2d:75:5f:b0:76:0e:c4:a8:
09:2c:ae:bd:a6:be:14:5b:f3:ae:82:a4:90:43:b0:
02:1f:b2:46:7e:41:20:f1:24:c5:2c:7d:91:2b:4b:
5f:d9:36:b3:62:12:b9:16:1b:7a:1f:a6:6e:52:75:
a2:a2:21:98:15:60:4d:17:3b:6b:49:6f:3c:b9:31:
38:b4:2e:43:3b:1a:6d:ee:e4:0e:23:e3:e3:d7:fb:
0f:d3:39:cb:a8:a0:59:7c:d0:29:65:1e:9f:10:e5:
d8:3a:07:53:cc:68:40:e8:60:23:0a:74:7c:7d:fa:
df:00:2c:44:99:88:53:ff:40:0c:23:46:06:f6:89:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:64:61:B2:C8:5E:C9:2C:8C:3B:3E:88:6D:12:13:5D:F1:95:28
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
Signature Algorithm: sha256WithRSAEncryption
67:4b:6a:39:c3:d9:5d:ca:a5:e1:74:27:aa:7d:f8:a0:3c:f0:
0a:dd:e9:2f:76:83:96:1a:5c:f4:9c:a0:6b:1c:fa:84:68:90:
1c:83:0a:cc:88:59:ba:4e:65:9f:53:ad:d4:00:28:2e:a9:eb:
50:fd:7c:a5:b9:f3:b0:46:d2:23:11:27:05:f8:24:f4:63:e0:
20:df:33:b1:44:6a:81:de:b8:bc:8c:77:f7:88:bd:98:f5:99:
bb:b4:8d:78:f6:af:d0:11:c6:35:33:97:0c:14:66:c7:33:b2:
ba:bb:80:94:c5:3e:fd:33:22:bc:d3:29:61:e1:16:ca:8b:4c:
80:eb:32:a3:a9:e1:6b:ea:f5:c5:7b:db:c4:6c:87:89:e6:58:
21:38:78:82:9c:60:84:b7:75:bd:0d:96:59:8c:0f:ec:e7:b2:
02:fd:93:53:cd:b9:83:c7:cd:cb:ea:30:09:fe:bf:93:5d:15:
f3:fd:bc:b0:9e:c5:ad:6d:1d:f2:5f:f9:58:5e:ac:87:cd:a8:
09:8b:ad:bd:4c:e8:02:2a:42:b0:50:22:99:d5:7f:be:17:26:
69:d1:c1:3f:c9:83:c8:8c:10:bf:36:75:d1:9e:21:33:37:7b:
6f:21:88:69:db:ca:81:43:13:e3:39:69:af:d1:54:a5:72:e5:
25:e4:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:55:38 2025 by rpki-client