Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
File: 326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: 8w2LS88lzBVq8UoojUuK3Otxn47XSmbhT2rjBtW/Iuc=
Subject key identifier: 5E:B2:C2:7A:D9:09:4B:AB:9F:4A:45:FD:2A:86:F9:1B:0F:7D:BD:48
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 29C2D3D25E856677AE5036C6A1AA6CD07B1A13E1
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
Signing time: Thu 10 Apr 2025 17:54:12 +0000
ROA not before: Thu 10 Apr 2025 17:49:12 +0000
ROA not after: Thu 09 Apr 2026 17:54:12 +0000
asID: 0
IP address blocks: 2a0a:6044:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c2:d3:d2:5e:85:66:77:ae:50:36:c6:a1:aa:6c:d0:7b:1a:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 10 17:49:12 2025 GMT
Not After : Apr 9 17:54:12 2026 GMT
Subject: CN=5EB2C27AD9094BAB9F4A45FD2A86F91B0F7DBD48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:14:fe:8f:fa:09:57:61:5a:14:18:c9:d2:
ab:6f:fd:77:4b:e1:93:3b:49:cf:06:66:0a:96:a4:
ea:a8:51:f2:dd:f3:50:dd:11:0c:79:b9:c6:b8:e5:
14:a8:d3:40:7f:6b:a7:aa:1a:bb:b4:44:d4:5a:d0:
ab:ae:98:88:df:e2:c4:64:8d:73:79:01:70:b9:75:
9f:2c:fd:af:81:1b:21:5f:be:84:d6:bf:e4:85:8a:
78:e4:82:93:8c:3f:34:85:52:23:93:e3:ea:61:7b:
e5:01:8c:76:47:41:49:c6:d4:b7:6e:ac:51:30:08:
f2:e0:8e:b8:30:c0:fa:16:78:14:ea:99:4c:0e:88:
41:f5:b1:38:fc:dd:f9:21:ab:5f:5e:8a:81:9d:0f:
fd:fb:fd:51:d2:e9:7a:b6:f5:d5:9f:9c:96:09:86:
65:3a:e2:aa:06:4d:67:78:b8:6e:0b:c5:2c:9c:ef:
d2:4c:3f:11:e6:39:05:d5:e6:83:7a:5c:cd:95:2e:
43:8c:6a:db:25:3d:c5:fd:95:55:32:49:dd:c3:0e:
cf:b0:a8:03:49:e6:29:22:69:6c:cd:c2:6f:38:38:
b4:73:35:77:1a:b5:14:73:2b:e8:82:36:44:4e:3b:
50:f2:46:02:f1:e9:e1:d4:21:83:da:42:b7:ef:97:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:C2:7A:D9:09:4B:AB:9F:4A:45:FD:2A:86:F9:1B:0F:7D:BD:48
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a383030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
15:61:af:17:55:c8:f0:c5:dc:91:7f:f1:bf:a6:49:fc:6d:79:
33:a8:9e:c3:ac:1e:71:06:36:21:f1:89:d4:95:89:d0:b4:81:
2b:23:fe:50:e4:c6:7d:b1:a7:ae:7b:48:47:c8:2c:94:e7:c7:
0d:10:e9:62:f6:68:7a:25:7a:08:3d:0e:53:24:df:77:20:66:
23:f7:fd:38:84:1e:b5:7d:4c:9c:d6:0c:35:b3:f9:23:cd:1e:
23:1d:6f:38:94:ef:a1:71:4b:9e:eb:87:b5:bf:d6:d5:78:00:
5d:0c:e5:83:0a:9c:9e:c1:f5:c3:0d:49:8f:5d:dc:dd:97:a8:
11:8e:9f:f2:3d:a0:ab:14:28:1a:33:ef:e9:51:3f:ea:2f:e7:
fa:9c:09:d4:e4:cf:1a:83:d0:1a:9e:c2:e9:49:d8:6e:9a:d3:
6e:15:f2:f5:ac:93:a9:32:5a:a5:69:19:6f:80:19:69:f3:b9:
e2:24:e0:8b:af:a2:79:67:77:06:72:2b:f6:33:1e:b1:0a:55:
d4:4d:ef:c7:8d:40:fb:73:3d:6f:fa:b4:93:e5:29:03:b4:23:
c9:2e:84:65:f3:57:f3:c0:d1:75:5a:6e:03:63:99:0e:bd:35:
2c:4e:82:8d:59:5d:47:70:06:6c:10:69:ba:19:9d:6f:09:fc:
0b:9b:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:54:30 2025 by rpki-client