Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626130303a3a2f34302d3430203d3e2030.roa
File: 326130613a363034343a626130303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier: gMIeUzCrBP6hheRDECIWl5vNRjC6Tzh+Py6qWfLq2Ys=
Subject key identifier: 05:0F:94:72:EB:A1:22:8D:35:D4:A5:50:A1:06:C8:FE:1C:1D:66:5E
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 65490BBB9B2D1B26DA1F94B9308B61BCE2C66487
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626130303a3a2f34302d3430203d3e2030.roa
Signing time: Sun 22 Jun 2025 05:00:33 +0000
ROA not before: Sun 22 Jun 2025 04:55:33 +0000
ROA not after: Sun 21 Jun 2026 05:00:33 +0000
asID: 0
IP address blocks: 2a0a:6044:ba00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:0b:bb:9b:2d:1b:26:da:1f:94:b9:30:8b:61:bc:e2:c6:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 22 04:55:33 2025 GMT
Not After : Jun 21 05:00:33 2026 GMT
Subject: CN=050F9472EBA1228D35D4A550A106C8FE1C1D665E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:28:8d:ec:7d:f9:3e:f0:b1:53:1d:82:e8:
83:46:97:c8:0b:c1:8e:ac:04:5b:8e:e6:33:25:96:
27:80:1a:18:d1:59:9f:2e:0f:8c:8c:22:5f:c6:d2:
bd:54:37:12:2b:72:e1:1c:7c:90:da:45:15:34:0a:
f6:7f:31:45:a6:cc:f4:a4:fc:8d:98:6e:c0:cb:c7:
75:1d:44:98:a8:ff:fc:ec:c5:14:0a:b7:44:04:1e:
e5:bb:1f:54:62:4c:f4:1b:2f:39:c1:eb:30:38:87:
2e:50:e4:f6:13:73:e9:0e:76:10:9c:8a:0b:b7:a6:
9d:c0:08:c6:6e:b1:64:01:9a:79:84:22:b5:e8:81:
74:16:18:66:76:d6:fd:93:bc:46:e8:67:33:fd:e0:
b8:39:ce:69:f9:b3:bf:16:91:39:27:56:67:bd:0e:
90:33:fd:c3:ef:22:bf:6b:06:dc:df:e3:c2:82:54:
54:71:31:59:4f:82:37:d1:f1:95:5c:33:65:ab:31:
72:cc:1b:76:df:09:58:57:77:97:b1:a1:c0:53:c7:
e0:a5:d0:f1:2b:8d:6a:bb:2b:17:a4:51:f6:09:b2:
6f:49:45:16:30:48:4e:c9:dd:a1:06:d4:32:a3:0c:
04:e7:f7:04:fd:ee:71:bc:47:46:8e:e6:f7:9d:f5:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:94:72:EB:A1:22:8D:35:D4:A5:50:A1:06:C8:FE:1C:1D:66:5E
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626130303a3a2f34302d3430203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ba00::/40
Signature Algorithm: sha256WithRSAEncryption
a1:45:80:b9:ff:85:66:0a:e8:03:fa:1f:89:ec:d0:70:03:34:
c7:dc:e5:59:75:0b:1a:cb:f6:48:bd:69:d7:29:62:27:17:39:
f6:99:1d:b2:f9:70:9e:e4:40:4b:b7:eb:3a:4c:4e:8c:51:7f:
0d:d9:96:4a:db:31:0d:ee:de:26:6a:c4:12:94:0e:4e:a1:63:
fc:48:ca:40:26:ed:5d:a4:76:ee:50:c1:31:5a:1f:1b:3f:b3:
cf:90:94:b3:58:10:a0:7e:a5:54:44:d4:44:61:e3:d1:c1:8e:
b1:e5:d8:da:e9:f0:40:8f:ce:14:df:d4:72:d5:ea:90:c2:88:
8d:3a:bc:a5:66:25:2c:b0:47:69:d7:22:42:bc:9f:a7:ad:7b:
3b:25:a8:65:fc:d6:18:b0:8b:b6:c0:ec:3b:e7:18:2b:58:a1:
8a:df:5c:a5:db:e8:02:81:17:68:84:d7:1f:5f:2f:c2:92:82:
46:be:d4:f0:62:2c:93:f6:41:24:35:fc:68:c5:7e:31:ed:98:
92:fc:4c:0c:f4:db:be:1f:9d:24:8f:1e:dc:1f:0a:a1:0c:05:
4b:9c:51:94:7f:e5:ff:f5:33:6f:67:6e:87:4a:60:70:31:04:
c7:e9:f5:c9:6e:3e:38:18:8b:af:9e:0c:50:a4:8f:02:16:09:
44:85:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:54:33 2025 by rpki-client