Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
File: 323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier: GQFKRWCsbeY/q7rkt6N+yBTHWdsZfH3d3XZM3iqPY1Q=
Subject key identifier: 39:E7:C9:5B:F3:99:5D:26:9D:F8:5C:7A:2D:CD:F7:75:7C:BB:6E:3B
Certificate issuer: /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial: 49253FE5FC07EB5031092E63F5A54C6FC3786C6F
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
Signing time: Thu 09 Jan 2025 07:21:44 +0000
ROA not before: Thu 09 Jan 2025 07:16:44 +0000
ROA not after: Thu 08 Jan 2026 07:21:44 +0000
asID: 199518
IP address blocks: 2602:faa5:f05::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:25:3f:e5:fc:07:eb:50:31:09:2e:63:f5:a5:4c:6f:c3:78:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Validity
Not Before: Jan 9 07:16:44 2025 GMT
Not After : Jan 8 07:21:44 2026 GMT
Subject: CN=39E7C95BF3995D269DF85C7A2DCDF7757CBB6E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:20:44:64:68:84:8f:14:e1:f5:cc:a1:cc:
a1:b4:0d:97:8f:98:41:53:6d:4a:86:f2:f6:8c:66:
2f:11:b2:0d:eb:d8:27:5d:95:68:fb:8e:b4:0d:69:
0b:43:a7:49:a9:67:c6:24:3e:e7:ac:f5:a9:28:d2:
e7:7a:20:3a:91:1a:c4:f5:2d:f6:d3:6b:29:ce:c4:
76:a8:7a:9b:51:01:33:22:4e:8f:30:cc:92:3d:59:
48:79:4c:ba:52:63:be:64:c3:18:b4:0b:7c:b2:e4:
00:8f:b1:3e:39:91:ab:59:3b:49:cc:f4:84:82:67:
d4:f1:21:45:69:32:f7:46:ce:60:e1:b0:d3:ad:b9:
04:e8:bc:b3:7c:85:00:4b:75:d5:bb:27:ca:d9:ed:
23:a1:96:c7:06:70:cf:9e:8f:b5:eb:d3:d9:f4:dd:
c8:23:54:b6:f7:04:a1:ef:b7:28:c6:e4:68:00:b4:
ec:2a:8b:20:c1:c5:61:86:7c:97:c1:78:fe:b9:3c:
d0:20:a8:92:c8:f4:27:89:ff:a2:2e:40:58:99:83:
56:b7:35:0f:dc:9e:99:dd:c9:dc:56:6f:47:90:e6:
c9:d4:c9:16:86:ac:00:1d:58:34:25:fe:a4:bf:9d:
a9:33:87:91:14:31:cc:67:64:fb:cf:23:01:9c:f9:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E7:C9:5B:F3:99:5D:26:9D:F8:5C:7A:2D:CD:F7:75:7C:BB:6E:3B
X509v3 Authority Key Identifier:
keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa5:f05::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c9:26:c2:49:39:30:65:fc:e3:b2:8f:4a:e8:55:6d:bb:76:
81:22:3b:48:3c:06:91:ce:8b:72:9c:85:e2:dd:cb:1f:9b:68:
98:1f:6a:25:31:a2:24:75:f5:01:b2:8e:bb:28:f7:1b:e9:6f:
49:15:a2:7e:69:ab:d6:c4:20:32:31:6d:eb:b7:2a:22:6d:6b:
d9:91:24:f4:bb:8d:c3:a5:ea:fd:1a:43:b8:cb:c6:81:85:93:
da:92:32:ac:41:61:10:70:70:4b:59:0e:a6:87:00:09:b3:fa:
4c:49:74:b4:d4:25:ca:7a:cc:0b:a4:53:01:f1:48:46:6c:50:
f7:83:8a:3e:e3:90:c1:70:91:e5:7e:a4:f4:d9:16:3a:2b:0b:
ae:fa:ac:f6:21:fb:74:b0:96:ac:2d:19:a1:57:ca:6a:7c:82:
70:7a:58:72:94:47:c6:d7:e9:61:51:23:c4:b3:9b:9e:33:7b:
b3:e8:95:cd:f3:a2:6c:08:09:2e:99:72:c3:2f:eb:6c:65:cc:
29:17:8b:37:eb:51:fe:19:df:cd:0d:a3:ff:5a:df:6a:82:4a:
02:4f:f5:19:63:85:62:08:16:76:1c:df:a2:95:5b:a5:e4:ca:
94:bf:c9:f2:b3:c0:30:28:30:2d:c4:af:8e:4f:f7:04:a7:bd:
3f:b4:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:31 2025 by rpki-client