Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
File: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json)
Hash identifier: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=
Subject key identifier: D9:F1:35:9C:20:CD:10:1D:1A:12:B1:A1:95:F5:A2:6C:75:CB:4C:89
Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial: 485C3979B9508F867127F7511C988DA67A057AE3
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
Signing time: Wed 05 Feb 2025 02:02:08 +0000
ROA not before: Wed 05 Feb 2025 01:57:08 +0000
ROA not after: Wed 04 Feb 2026 02:02:08 +0000
asID: 215617
IP address blocks: 2a0f:85c1:363::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5c:39:79:b9:50:8f:86:71:27:f7:51:1c:98:8d:a6:7a:05:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Validity
Not Before: Feb 5 01:57:08 2025 GMT
Not After : Feb 4 02:02:08 2026 GMT
Subject: CN=D9F1359C20CD101D1A12B1A195F5A26C75CB4C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:2a:d9:b8:6e:44:ec:af:09:a4:66:99:c2:
9c:fa:e9:7d:af:89:04:ba:bb:79:91:b0:70:28:86:
b0:dc:d4:6a:93:78:d5:05:e7:df:91:26:94:04:ed:
66:13:6a:4c:6b:33:14:63:b2:0e:df:ab:0d:83:54:
d3:f1:ce:da:64:dd:1e:95:8f:f2:fa:ce:82:64:16:
25:86:12:2d:d3:b2:67:99:c3:8d:a2:dc:4b:ae:5f:
fb:13:b4:66:56:c3:69:20:aa:8d:64:84:c3:ac:68:
c0:32:a9:b7:22:12:67:8a:c0:cd:c3:dc:9a:a5:1c:
62:6d:1b:5b:b2:2b:74:67:6d:a6:4a:5d:b5:61:ab:
94:4c:7c:93:67:a8:36:b5:cc:3a:da:b8:d9:eb:f7:
9a:16:a5:73:1a:03:1d:e1:4c:be:e3:cc:3d:5c:cf:
ab:0f:e6:ba:73:1d:df:6d:2b:a0:88:9c:09:41:e4:
0e:60:c5:7b:1d:03:34:07:62:be:9d:0c:84:cb:05:
bd:4d:5a:78:2d:d4:d1:a6:8c:38:9b:15:90:8a:56:
56:2f:cb:13:0a:54:45:98:63:c9:b2:b1:4b:14:fd:
70:dd:9a:c9:54:e3:cf:a5:d9:9f:a0:d3:f6:e1:33:
0c:fd:4b:88:da:c2:80:51:ea:23:c5:80:19:13:51:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:35:9C:20:CD:10:1D:1A:12:B1:A1:95:F5:A2:6C:75:CB:4C:89
X509v3 Authority Key Identifier:
keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:363::/48
Signature Algorithm: sha256WithRSAEncryption
19:3e:02:dc:8b:2a:31:2f:95:d5:40:23:d4:e6:d3:17:c0:38:
f4:f0:cc:14:39:29:7a:d0:d6:54:28:15:02:73:f9:1f:bb:5c:
9b:cf:60:99:24:df:2f:d8:8a:09:96:fb:78:15:49:5a:c4:fc:
bf:35:dc:31:9d:20:70:61:a1:d6:12:bf:c1:d2:46:97:fd:5f:
e3:84:e5:1c:75:c5:86:ca:b9:ac:83:6a:3c:76:1e:88:30:4a:
17:1d:eb:09:d2:23:37:2b:11:49:a0:97:30:c3:36:de:5e:6b:
64:5c:e0:20:6c:99:bf:6b:49:4c:e7:18:8b:a5:8d:ae:0f:5d:
5b:76:a5:84:af:01:f9:95:64:f4:f0:8b:fd:b5:ea:90:c5:02:
02:22:e3:46:1c:31:b4:12:5a:47:a8:5a:63:88:7a:3f:81:c0:
e5:63:90:fa:0d:c5:bd:78:35:2f:dd:04:ec:80:bd:24:69:07:
b3:b5:8f:d8:b0:09:68:76:00:b1:ec:ea:e9:aa:b6:b9:dc:05:
20:fe:99:f5:be:bd:56:63:e2:1d:61:3d:f1:e8:73:5f:aa:2a:
96:c2:0b:34:5f:51:28:0b:a5:a6:a4:f3:4d:23:b7:8e:6a:ed:
b1:3b:cc:06:ea:64:db:45:e3:5a:f3:44:21:11:ca:51:02:df:
58:31:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:49 2025 by rpki-client