Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
File: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (raw, json)
Hash identifier: E3loOF/+LS5IiF7GzEmsDHz7HtJNOU2+FzEpT4hHn0s=
Subject key identifier: 68:ED:04:5F:5B:8D:38:4E:B1:92:D9:F2:2E:59:3E:B7:B4:8A:B2:DC
Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial: 68BBFA2BC9A6ABBFE5B341954333327D1891F956
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
Signing time: Tue 01 Jul 2025 20:29:42 +0000
ROA not before: Tue 01 Jul 2025 20:24:42 +0000
ROA not after: Tue 30 Jun 2026 20:29:42 +0000
asID: 211066
IP address blocks: 2a06:1283:8f00::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:bb:fa:2b:c9:a6:ab:bf:e5:b3:41:95:43:33:32:7d:18:91:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
Validity
Not Before: Jul 1 20:24:42 2025 GMT
Not After : Jun 30 20:29:42 2026 GMT
Subject: CN=68ED045F5B8D384EB192D9F22E593EB7B48AB2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:12:9b:cc:45:59:d7:e3:e7:24:44:02:a0:
ba:37:2b:43:6b:dc:e4:3f:dc:6f:c4:42:d3:5d:b0:
7f:c3:e5:91:1e:41:1a:e7:24:08:83:75:0a:c6:d6:
a2:d8:e5:7c:a6:8d:48:7d:2c:ca:51:3c:ee:a3:95:
e9:f6:49:27:52:64:c3:50:16:2e:87:e7:ec:cf:d7:
78:bc:e7:12:96:2e:45:0f:e9:e8:f0:d6:dd:c6:12:
1f:86:94:1f:de:4f:d7:06:17:29:4c:1e:80:09:96:
14:a5:24:8a:a7:63:38:9b:4b:82:50:a3:4c:35:8a:
8a:3f:3e:e5:ba:01:75:06:fa:30:76:a3:eb:96:3d:
15:9d:d5:89:12:37:59:07:f3:8b:b7:df:73:c2:d0:
39:f9:30:0d:33:1d:c7:57:5b:9c:46:6e:d1:45:6c:
67:ea:66:a8:25:25:a1:1b:d5:3d:0f:fd:18:4e:9d:
6c:6a:05:88:d1:41:cc:06:79:24:e4:4f:fb:f0:77:
4d:f7:c1:2b:c4:07:af:d1:c8:02:96:3b:e1:be:6d:
71:d2:50:0b:63:c2:ab:34:31:9d:6c:34:a9:aa:5c:
09:04:6f:78:e3:41:6e:07:a6:ad:54:4e:9d:05:c8:
d0:f7:58:24:d7:83:ad:4d:10:a2:0d:f8:db:48:4c:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:04:5F:5B:8D:38:4E:B1:92:D9:F2:2E:59:3E:B7:B4:8A:B2:DC
X509v3 Authority Key Identifier:
keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
5e:57:ed:8e:83:0c:41:8f:a0:2e:9f:33:09:66:01:8b:09:b1:
8a:81:5a:0f:af:5d:a3:31:b3:db:f5:25:4d:6f:d4:de:76:ad:
cf:35:f7:c6:73:10:4b:28:06:cc:bc:43:96:53:dc:75:65:a3:
01:59:21:e7:7b:53:e3:a1:cf:01:38:3c:c9:8b:4c:a4:65:25:
96:91:a8:6b:6d:06:34:b9:4f:91:a7:e0:47:a1:d7:18:85:89:
5b:bf:97:e7:13:f1:a1:c5:d1:11:74:85:2c:60:2e:fa:a2:76:
b9:ad:be:60:3b:07:c7:6b:1f:cc:16:b6:1e:df:3d:c2:61:36:
e4:b6:14:bb:76:f4:be:44:6c:a4:d6:14:a9:01:da:f7:a8:63:
02:31:aa:09:44:24:aa:38:2a:e0:52:f6:b4:56:5e:be:26:fc:
cc:6c:69:1f:31:f0:78:1f:62:7f:4b:4b:cd:25:27:56:f9:57:
ea:85:14:6d:89:4e:c3:71:a8:fc:f3:c9:b8:bd:76:36:de:56:
b8:00:9e:78:77:e3:a2:83:07:50:06:e4:51:b3:f9:d4:c0:6d:
3f:ee:09:1c:a3:be:e1:8e:d0:1e:c3:8e:61:67:30:59:69:81:
e6:cf:7b:7a:18:64:94:70:66:5a:9a:6a:0f:73:04:6d:06:23:
29:81:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:19:15 2025 by rpki-client