Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa
File: 326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier: wUcP3dAuGmwS7SMZBeKyADz7Z5AQfs1qhLTwHmFyGaM=
Subject key identifier: F7:A9:50:76:5C:91:F9:91:D9:4C:98:5F:E9:B8:BA:1C:27:8C:DB:42
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 6E6350FFD76D7B73B5BF5B783E9E2B1F708FFA68
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa
Signing time: Tue 25 Mar 2025 11:00:03 +0000
ROA not before: Tue 25 Mar 2025 10:55:03 +0000
ROA not after: Tue 24 Mar 2026 11:00:03 +0000
asID: 214543
IP address blocks: 2a0b:4e07:5a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:63:50:ff:d7:6d:7b:73:b5:bf:5b:78:3e:9e:2b:1f:70:8f:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Mar 25 10:55:03 2025 GMT
Not After : Mar 24 11:00:03 2026 GMT
Subject: CN=F7A950765C91F991D94C985FE9B8BA1C278CDB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:ea:7b:8d:ce:89:99:cc:16:8f:99:f6:28:
35:91:aa:3d:aa:57:4d:53:a6:0e:6a:61:87:7b:c1:
72:30:9b:a3:f4:ae:a1:48:b2:1d:83:c3:f0:89:a9:
12:6d:96:8e:21:05:e2:5c:95:4b:5b:95:a7:17:a4:
fa:5d:07:e3:63:1d:96:5c:46:8b:dd:ba:a4:eb:8f:
14:b9:f2:06:93:c1:05:aa:89:5d:c1:e2:2c:77:ce:
68:59:28:bf:ac:47:a6:d2:7f:0a:d6:de:10:49:7b:
00:72:41:6c:9c:17:45:55:e2:52:84:15:42:a0:1c:
5f:17:ac:c3:38:f0:66:e7:e8:f9:52:ed:06:cc:dd:
95:0a:7b:db:67:22:2c:8f:bc:19:91:75:d4:a8:9b:
f7:79:d8:a2:a1:54:32:14:6e:68:51:e6:f3:8f:13:
ab:fc:66:d5:e4:4d:98:de:35:98:5e:02:8d:8f:7d:
ad:e6:17:e4:2e:d9:84:b8:55:b8:e7:4b:db:e8:bd:
26:0e:4b:0e:89:c0:9d:30:08:05:6b:a3:f0:51:79:
1c:f3:c3:61:d2:1d:26:b2:99:64:e3:21:f0:8f:6d:
f7:a1:c6:da:ed:e2:5e:74:c1:69:91:46:f9:64:29:
ef:4f:1b:3a:34:a8:60:5e:f0:ef:fe:bb:8c:f5:fb:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:50:76:5C:91:F9:91:D9:4C:98:5F:E9:B8:BA:1C:27:8C:DB:42
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3561313a3a2f34382d3438203d3e20323134353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5a1::/48
Signature Algorithm: sha256WithRSAEncryption
61:b0:2e:14:37:a0:59:a4:b9:7b:ce:bf:99:d2:23:10:a8:b5:
72:6b:c7:b5:36:6e:f4:56:9c:9b:96:dc:f5:4e:04:e6:99:7c:
9a:ba:85:96:7f:24:14:27:eb:30:a4:c7:4f:32:d2:1b:f6:b4:
37:28:d5:5a:c7:ba:6c:a2:bc:70:c7:7f:2f:e7:76:82:96:67:
96:fc:22:b8:0e:3c:01:d1:bb:d3:81:c8:5a:67:1d:24:d1:94:
b8:6c:85:62:96:dd:d8:17:88:5e:a8:2b:da:1b:0d:c2:6a:54:
6f:83:28:75:99:b1:09:74:34:fe:7f:15:fd:6d:0d:82:99:2c:
6e:41:80:99:4f:99:3c:f1:c5:73:4a:5e:70:a4:35:05:bf:a6:
c7:08:2b:05:43:6a:28:45:e7:8b:5b:8f:f8:f2:49:75:1d:4e:
1d:01:4a:17:3a:b0:78:ef:0b:72:b1:14:b3:1f:75:c0:8a:fe:
bb:94:2c:9e:36:aa:60:18:f5:50:d8:fd:6c:1e:fd:47:ac:61:
03:30:28:5a:a1:ac:1d:1e:25:21:c2:21:78:5c:30:5d:57:3a:
60:d3:3d:f1:75:25:2d:cd:58:ac:05:52:80:26:83:f9:b3:99:
9c:79:d1:de:88:a9:cd:44:88:b4:ae:3f:2b:eb:be:4c:2e:9a:
02:6f:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:59 2025 by rpki-client