Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
File: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=
Subject key identifier: CC:E6:64:86:98:DA:26:9F:BB:D5:A0:1A:AD:A5:44:EB:55:A3:3B:9E
Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial: 0941B2945CC07FC1AE612DEE0A72A3C8FE2172F9
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
Signing time: Wed 05 Feb 2025 02:02:08 +0000
ROA not before: Wed 05 Feb 2025 01:57:08 +0000
ROA not after: Wed 04 Feb 2026 02:02:08 +0000
asID: 215617
IP address blocks: 2a0f:85c1:357::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:41:b2:94:5c:c0:7f:c1:ae:61:2d:ee:0a:72:a3:c8:fe:21:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Validity
Not Before: Feb 5 01:57:08 2025 GMT
Not After : Feb 4 02:02:08 2026 GMT
Subject: CN=CCE6648698DA269FBBD5A01AADA544EB55A33B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:00:80:b2:7e:57:9f:63:cc:32:fb:7d:7b:
1c:97:eb:0f:09:78:11:ee:03:0a:c9:16:6c:35:f8:
37:76:ef:7d:d9:b2:70:29:30:9d:28:21:8a:2b:3e:
45:ce:50:5f:bf:7b:d4:04:b4:f8:e1:01:0a:e1:74:
3b:85:93:12:04:3c:63:e1:cd:5a:4a:91:4f:9d:3a:
1c:c4:b4:8b:48:6a:c8:95:9e:37:f8:13:a8:79:68:
da:b9:de:10:da:42:6c:6c:b6:c1:e9:06:45:18:f5:
b6:10:de:00:cd:c1:c9:e3:2e:59:cd:de:40:bf:c3:
58:b3:7e:f0:6d:f9:1b:6d:74:4c:3c:69:18:41:0e:
10:da:61:02:24:c5:31:70:ac:23:23:19:17:8a:f4:
3d:6d:06:4a:49:05:79:54:98:6c:37:53:2b:63:95:
40:91:56:1f:f1:6c:9d:6b:75:40:39:31:c8:73:95:
b5:89:d0:9d:60:ed:16:6a:70:9a:3d:85:a0:8c:d1:
9b:2d:70:e7:28:23:3d:37:ad:bb:b5:b6:2c:63:3e:
63:aa:90:c2:00:57:45:4b:1f:f4:f5:78:b4:23:41:
26:f9:b8:7c:b9:11:25:a1:7d:f8:c4:cf:08:31:93:
04:e1:bd:7f:67:d3:6c:97:34:4e:7b:c7:8a:87:f6:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:64:86:98:DA:26:9F:BB:D5:A0:1A:AD:A5:44:EB:55:A3:3B:9E
X509v3 Authority Key Identifier:
keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:357::/48
Signature Algorithm: sha256WithRSAEncryption
c3:83:d7:c0:fa:d9:09:c3:2b:0f:6f:c4:27:52:a1:22:ff:51:
07:bb:68:62:ce:07:df:4e:b2:cd:35:03:e9:86:d5:9d:6b:18:
a7:d1:41:2d:53:01:a1:34:d7:2b:13:69:f4:ef:52:ae:05:20:
ee:f6:96:22:7d:8b:16:a2:8f:0b:17:c6:db:4d:5c:02:40:c0:
a1:6e:49:fd:b5:de:3e:e3:55:4a:38:30:3e:b8:ed:27:c8:45:
20:47:6c:7d:05:51:de:6e:9f:2b:68:34:ab:00:b5:20:2b:5f:
6b:f8:b7:7e:f7:d5:62:8d:96:fd:81:64:35:64:4b:f0:be:04:
32:15:cb:dd:57:42:35:c8:07:00:de:ed:95:73:d2:b9:16:71:
c4:e1:26:3e:78:65:bd:96:e5:8c:81:27:e4:86:65:20:31:5c:
b0:2c:66:c4:48:27:86:9b:83:fd:d9:61:0e:2c:05:c9:17:09:
9b:43:46:c8:ac:a7:0b:55:1d:e3:0b:2b:dc:c0:18:d5:c2:dd:
87:40:ec:fb:de:2f:ad:c8:47:d3:e5:f4:88:0c:d9:a5:24:f6:
e8:37:7d:d1:0c:58:75:4b:a0:d0:93:10:03:e9:5a:12:2e:01:
58:c1:f7:41:cc:4c:33:08:a8:31:3a:4b:68:44:00:5c:ab:32:
0a:86:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:05 2025 by rpki-client