Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa
File: 323630323a666161353a3a2f33322d3332203d3e20323030343534.roa (raw, json)
Hash identifier: AnufvhzXvyGDMVr32yYVPYSlcpdY9O0xa4qN27nJSSo=
Subject key identifier: 24:3C:68:DF:12:84:0E:24:1D:A1:F9:B6:65:BC:30:65:4A:1F:8B:36
Certificate issuer: /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial: 2EE26A14311ADEC9B7A3C5FEBE1FCA8AD7B97996
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa
Signing time: Fri 03 Jan 2025 18:21:08 +0000
ROA not before: Fri 03 Jan 2025 18:16:08 +0000
ROA not after: Fri 02 Jan 2026 18:21:08 +0000
asID: 200454
IP address blocks: 2602:faa5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e2:6a:14:31:1a:de:c9:b7:a3:c5:fe:be:1f:ca:8a:d7:b9:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Validity
Not Before: Jan 3 18:16:08 2025 GMT
Not After : Jan 2 18:21:08 2026 GMT
Subject: CN=243C68DF12840E241DA1F9B665BC30654A1F8B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:86:47:f8:57:59:a9:63:b8:28:a7:a2:ce:
69:cc:fe:84:aa:fd:ee:9c:59:15:d6:4c:08:93:8f:
40:71:94:95:b7:ac:8d:98:38:e3:61:55:d5:5f:34:
9a:3f:74:25:47:cb:45:6b:e3:70:1f:46:16:04:3f:
35:89:6b:bb:24:e5:94:d3:d8:cb:23:8d:be:16:52:
22:35:a2:2a:5b:69:80:9e:f4:d8:ca:e9:05:c7:b1:
7f:bb:e7:7c:8e:ee:a4:85:c9:67:49:34:b3:40:23:
46:b4:dc:1a:7f:e5:fb:32:f7:d9:b4:b4:9d:5c:bf:
4b:d8:e1:8e:bf:37:02:46:48:1d:d5:34:74:28:ae:
e5:34:76:b1:13:fb:52:04:4e:39:52:be:da:40:21:
48:ca:fe:16:99:9b:33:e8:a0:8e:6c:83:a7:77:cb:
c1:dd:69:03:5b:d3:1c:fc:51:ae:a2:66:92:d6:85:
9e:cc:e1:e9:25:43:29:17:ea:51:88:87:7e:a5:47:
38:ec:a8:e5:30:c8:42:a3:f0:d6:bb:62:54:d7:3c:
4d:82:90:9d:bb:d9:ae:c9:d2:e8:59:cc:9b:4d:a7:
9e:6f:0b:9a:ef:f5:bc:5e:0f:ed:bc:83:c9:b7:8c:
9d:d0:85:2e:46:fa:d7:04:18:f9:0d:73:20:2f:0a:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:68:DF:12:84:0E:24:1D:A1:F9:B6:65:BC:30:65:4A:1F:8B:36
X509v3 Authority Key Identifier:
keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa5::/32
Signature Algorithm: sha256WithRSAEncryption
7f:bb:c5:1a:3a:e0:f0:ed:53:01:83:88:55:1b:29:d9:a5:fc:
1b:57:29:78:64:f9:d5:81:55:58:4c:24:ae:6c:52:8d:7e:4b:
cc:b9:83:8f:21:0d:1e:ff:29:e5:d3:e3:25:0c:25:a6:c4:43:
a0:6d:d3:34:41:9d:52:d3:45:0f:13:eb:7d:37:b8:c3:1d:46:
0f:ed:35:01:78:e5:31:92:60:07:8b:5e:96:94:45:1b:e0:f3:
24:b1:16:cf:2c:5a:0e:29:60:59:dd:3c:40:f5:e1:97:88:48:
ea:d9:a1:93:73:77:78:3d:4c:39:9b:48:77:52:98:59:10:7a:
09:dd:61:6e:72:38:81:e8:63:84:b4:32:d8:18:e5:bf:89:f8:
e8:c3:42:79:8a:91:2e:67:05:2c:c3:68:7d:66:85:0d:29:21:
ee:91:ad:91:06:7d:1e:70:cd:29:19:b7:15:27:bc:62:ef:09:
48:8f:b9:f8:fa:67:d3:8c:a6:be:d9:44:14:2e:49:e2:4f:c4:
22:c7:d9:18:b1:1c:19:73:88:0c:17:2b:09:83:8e:fe:23:fa:
b0:7a:ae:14:02:7c:a3:12:58:91:60:78:77:03:73:e0:b1:0b:
fd:08:7c:40:d1:5b:94:31:08:a1:cb:05:d7:1f:b5:77:26:e1:
4b:15:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:32 2025 by rpki-client