Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa
File: 323630323a663736313a3a2f34302d3438203d3e20333937373330.roa (raw, json)
Hash identifier: UabIBDSP/jRxPjVYe42Rz6FfziQlrmtKMNVTrVjL1tk=
Subject key identifier: 13:C5:C0:4B:63:47:C6:53:40:D7:51:F1:89:97:1A:99:EB:90:6E:50
Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Certificate serial: 1779749D88FF0B713D364B329D3930C8EF1B21CC
Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa
Signing time: Tue 28 Jan 2025 19:05:02 +0000
ROA not before: Tue 28 Jan 2025 19:00:02 +0000
ROA not after: Tue 27 Jan 2026 19:05:02 +0000
asID: 397730
IP address blocks: 2602:f761::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:79:74:9d:88:ff:0b:71:3d:36:4b:32:9d:39:30:c8:ef:1b:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
Validity
Not Before: Jan 28 19:00:02 2025 GMT
Not After : Jan 27 19:05:02 2026 GMT
Subject: CN=13C5C04B6347C65340D751F189971A99EB906E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:42:23:c2:43:78:86:17:e7:dc:ef:b5:fb:
76:61:24:bd:c8:3c:1b:98:7e:33:38:c2:65:69:f2:
ab:13:c8:7c:6e:a2:9a:f4:60:b6:d9:31:c1:eb:43:
5f:e5:91:a4:9b:64:77:38:fa:c1:b3:1d:1a:22:6c:
69:2c:77:94:71:da:46:c9:bc:ed:29:27:0c:81:f5:
a1:d9:51:cb:6c:5e:a7:79:f4:52:68:be:0e:39:84:
f7:7e:fd:f3:16:b3:f5:21:9a:30:c7:c0:c6:69:0b:
96:2d:f3:19:8d:b5:b8:93:6b:0c:cb:b9:f5:44:8c:
64:bc:8d:74:6f:ad:b0:45:91:77:1c:cf:05:2b:58:
d0:63:ed:f0:ef:e5:f5:83:5b:99:06:68:55:4c:0b:
df:43:3f:7e:e2:15:95:ab:fb:c5:da:16:53:45:d6:
1f:85:8b:28:f9:18:8e:44:e1:00:ee:86:ea:25:6c:
aa:40:a4:88:2a:37:0d:98:66:25:c4:2a:21:ef:a8:
3d:f2:50:71:af:6e:68:13:3b:56:bd:40:fe:25:2b:
c7:e7:6f:10:5a:de:08:b4:09:e2:e9:0a:63:49:b1:
da:3d:57:15:c8:81:e5:50:43:b2:77:65:8f:25:96:
8b:a8:c5:ec:c6:65:67:d0:9c:28:4e:61:6c:f2:47:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:C0:4B:63:47:C6:53:40:D7:51:F1:89:97:1A:99:EB:90:6E:50
X509v3 Authority Key Identifier:
keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/323630323a663736313a3a2f34302d3438203d3e20333937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f761::/40
Signature Algorithm: sha256WithRSAEncryption
08:7a:2e:7a:0b:1f:be:ea:af:65:34:9f:01:64:c8:c7:8a:cd:
0b:6f:7d:b3:20:9b:f6:56:e7:6e:d4:b8:19:f3:7d:ff:b4:6d:
9c:65:7c:a8:3b:63:52:25:2f:3b:08:d4:80:af:98:c8:84:5d:
aa:d6:81:a1:24:d8:c8:3a:20:46:09:a0:b9:be:d1:20:de:be:
45:fb:da:8a:61:16:ee:b3:d6:51:c1:94:4c:cd:2b:fc:bf:58:
ed:1a:bd:b1:1d:e8:ec:aa:1f:df:a2:7a:20:29:4a:3d:cd:58:
9a:0a:aa:82:55:7e:7f:d5:14:19:07:fd:98:39:61:80:34:b3:
97:e0:4d:32:0c:73:ec:1c:9b:7d:77:7e:8e:ef:00:48:35:41:
0f:ef:77:ad:18:51:2b:82:8c:ae:29:2c:6b:64:87:53:aa:fe:
5f:91:8b:e8:a5:3a:06:ed:b2:44:f4:96:7c:5f:24:18:b8:5f:
75:77:4b:0f:02:6e:c8:12:ca:00:32:d1:4e:0d:23:b1:70:6b:
46:c4:94:9f:f2:5e:06:9f:94:fe:21:8f:2c:71:d8:b5:e8:ac:
49:92:ef:1e:fc:4f:53:f4:38:b4:7c:be:d7:62:1c:36:09:e8:
0a:94:f6:a9:c7:d1:17:ce:4e:cd:60:2d:c9:6c:18:6a:24:1b:
cd:07:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:17 2025 by rpki-client