Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa
File: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (raw, json)
Hash identifier: gGGmoVRdDJpfumR8HrIQxuhNHolKOgXQjiMyUg//KAg=
Subject key identifier: 1A:69:7D:89:CC:A5:32:9D:D3:7B:13:42:4F:82:11:1B:3E:AC:55:27
Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial: 4FECC3F3157BDEC8B2F27AB3BD652926D995ADCB
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa
Signing time: Sat 14 Jun 2025 13:09:05 +0000
ROA not before: Sat 14 Jun 2025 13:04:05 +0000
ROA not after: Sat 13 Jun 2026 13:09:05 +0000
asID: 207695
IP address blocks: 2a06:1283:8b02::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ec:c3:f3:15:7b:de:c8:b2:f2:7a:b3:bd:65:29:26:d9:95:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
Validity
Not Before: Jun 14 13:04:05 2025 GMT
Not After : Jun 13 13:09:05 2026 GMT
Subject: CN=1A697D89CCA5329DD37B13424F82111B3EAC5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:e9:d3:d4:a1:6d:7f:02:d5:1a:a3:04:2b:
87:8d:fd:03:06:7f:d5:6e:a1:7b:cc:d5:d1:a1:a5:
e7:a2:7c:9c:cd:ed:0e:20:c1:b3:4b:2c:52:5d:5f:
c6:34:12:b8:57:ca:02:83:33:92:6e:94:b9:e4:b3:
43:92:10:c5:1c:bd:97:d3:45:79:a3:23:ae:58:5a:
64:4a:9e:ba:3e:6c:e7:8e:5e:be:ce:c4:73:b0:7b:
75:a0:f9:74:da:73:c7:09:f9:7f:95:e9:24:d4:6c:
80:50:ef:97:26:cf:87:3c:59:90:5d:27:35:a3:50:
79:48:8d:9e:ab:00:b2:1f:f4:87:e2:92:e1:0b:d2:
5e:1f:d1:93:de:78:76:37:68:b6:59:43:6f:1a:33:
b1:0f:3e:db:d2:1a:46:e3:74:42:ef:a0:b7:c6:04:
30:a8:be:28:31:8b:42:74:64:4b:fb:9d:86:53:04:
be:72:f7:91:33:d9:6e:4f:c5:46:8f:90:99:1e:a3:
2b:5f:a5:e5:23:47:60:e5:52:06:5c:af:4d:fc:a0:
38:db:c1:a5:84:4f:8c:84:5f:14:f7:d2:9f:88:54:
41:cc:25:cd:ac:c6:47:22:d1:b5:0f:e4:16:10:12:
bc:52:e1:c1:7f:a0:ee:fa:09:51:f2:2c:de:4c:20:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:7D:89:CC:A5:32:9D:D3:7B:13:42:4F:82:11:1B:3E:AC:55:27
X509v3 Authority Key Identifier:
keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:8b02::/48
Signature Algorithm: sha256WithRSAEncryption
58:7d:76:e5:1a:7f:00:df:dc:b6:b3:2b:38:6d:c3:6b:9d:28:
ff:71:27:4f:4c:d4:b1:24:7c:75:0b:8e:a6:80:57:a9:ce:ed:
ad:94:32:bb:c4:25:08:9f:0f:5f:9d:fd:c7:91:d5:1a:67:e7:
7c:1d:55:ba:9e:d0:79:d3:98:b7:95:7f:dd:08:13:23:83:d2:
ba:7e:db:c4:16:0c:15:66:42:75:cd:4e:1a:1c:cd:d7:1c:cf:
2c:67:35:84:3f:09:7e:2e:02:cc:05:f4:c2:6b:c0:0c:c6:66:
a7:d9:19:d5:d2:15:56:1b:44:b3:87:f7:f5:71:7c:cb:5e:42:
bc:c0:2a:db:12:ae:7b:9c:cb:57:93:96:09:54:c3:b5:ef:08:
fe:7d:ba:fa:7e:ce:89:c2:23:0d:12:67:37:97:b1:9c:13:71:
dd:67:26:72:4c:5d:8c:ff:bf:1f:dc:5a:17:92:6a:29:16:e9:
b0:93:09:22:f9:0b:eb:9d:7b:dd:20:d9:ef:2b:86:cf:1e:8a:
ca:b9:58:60:97:77:4c:5a:0c:6d:cb:e6:89:30:65:6d:b0:b9:
78:44:68:99:11:bf:be:20:4d:d6:7d:ef:34:eb:c7:62:1e:4d:
76:53:e8:50:46:c0:8d:82:1f:2c:8c:0c:3c:38:ed:98:b6:47:
cb:47:92:84
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUT+zD8xV73siy8nqzvWUpJtmVrcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3
OTg5MkM2QzAeFw0yNTA2MTQxMzA0MDVaFw0yNjA2MTMxMzA5MDVaMDMxMTAvBgNV
BAMTKDFBNjk3RDg5Q0NBNTMyOUREMzdCMTM0MjRGODIxMTFCM0VBQzU1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGOnT1KFtfwLVGqMEK4eN/QMG
f9VuoXvM1dGhpeeifJzN7Q4gwbNLLFJdX8Y0ErhXygKDM5JulLnks0OSEMUcvZfT
RXmjI65YWmRKnro+bOeOXr7OxHOwe3Wg+XTac8cJ+X+V6STUbIBQ75cmz4c8WZBd
JzWjUHlIjZ6rALIf9IfikuEL0l4f0ZPeeHY3aLZZQ28aM7EPPtvSGkbjdELvoLfG
BDCovigxi0J0ZEv7nYZTBL5y95Ez2W5PxUaPkJkeoytfpeUjR2DlUgZcr038oDjb
waWET4yEXxT30p+IVEHMJc2sxkci0bUP5BYQErxS4cF/oO76CVHyLN5MIFp5AgMB
AAGjggKHMIICgzAdBgNVHQ4EFgQUGml9icylMp3TexNCT4IRGz6sVScwHwYDVR0j
BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz
MDY0MkU2Nzc5ODkyQzZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF
BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz
NjNhMzEzMjM4MzMzYTM4NjIzMDMyM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz
MjMwMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiwIwDQYJKoZIhvcNAQELBQADggEB
AFh9duUafwDf3LazKzhtw2udKP9xJ09M1LEkfHULjqaAV6nO7a2UMrvEJQifD1+d
/ceR1Rpn53wdVbqe0HnTmLeVf90IEyOD0rp+28QWDBVmQnXNThoczdcczyxnNYQ/
CX4uAswF9MJrwAzGZqfZGdXSFVYbRLOH9/VxfMteQrzAKtsSrnucy1eTlglUw7Xv
CP59uvp+zonCIw0SZzeXsZwTcd1nJnJMXYz/vx/cWheSaikW6bCTCSL5C+ude90g
2e8rhs8eisq5WGCXd0xaDG3L5okwZW2wuXhEaJkRv74gTdZ97zTrx2IeTXZT6FBG
wI2CHyyMDDw47Zi2R8tHkoQ=
-----END CERTIFICATE-----
Generated at Thu Jul 24 08:18:02 2025 by rpki-client