Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a343030303a3a2f33342d3334203d3e2030.roa
File: 326130363a313238333a343030303a3a2f33342d3334203d3e2030.roa (raw, json)
Hash identifier: 5NRHY8t8w00dGW2DtTiq2aXocmtNGJvNni1B9KMZFJQ=
Subject key identifier: 6F:69:40:CD:B1:55:8C:65:4A:90:9A:6E:1C:14:FA:B9:F9:92:9C:1E
Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial: 0F4664D872635B7BE15D7AB3ABE0B781EC6F3FA2
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a343030303a3a2f33342d3334203d3e2030.roa
Signing time: Mon 10 Mar 2025 09:34:18 +0000
ROA not before: Mon 10 Mar 2025 09:29:18 +0000
ROA not after: Mon 09 Mar 2026 09:34:18 +0000
asID: 0
IP address blocks: 2a06:1283:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:46:64:d8:72:63:5b:7b:e1:5d:7a:b3:ab:e0:b7:81:ec:6f:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
Validity
Not Before: Mar 10 09:29:18 2025 GMT
Not After : Mar 9 09:34:18 2026 GMT
Subject: CN=6F6940CDB1558C654A909A6E1C14FAB9F9929C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:8a:96:77:80:52:96:5c:c6:74:bb:38:2c:
7b:6b:fa:cf:7e:01:b1:f9:00:49:a5:52:d8:c8:62:
62:ba:a8:a9:8c:ae:9a:a3:cc:0c:f7:b6:08:b1:95:
4c:fb:7b:47:6c:6e:03:42:1c:43:1d:71:49:8c:d4:
d5:7a:eb:58:f1:e7:7e:cc:ef:0e:68:ca:d6:b4:d6:
80:d0:ad:9e:80:83:50:91:fb:1c:fd:69:48:ae:33:
43:98:21:42:7b:35:a4:a0:8d:bb:06:77:84:b1:43:
3c:18:6b:33:ef:f7:a5:40:c3:81:48:20:69:db:73:
9e:97:09:33:2c:5b:5f:7f:c1:77:d1:cd:40:6b:d6:
ae:27:c9:d6:81:18:4c:30:7f:04:dc:0a:ec:4d:e7:
6d:26:13:07:53:2e:d1:0b:1f:0f:d0:0c:78:82:a5:
56:83:70:c6:e1:17:83:e6:b1:68:50:bf:c1:e4:e7:
5b:b2:40:cf:a4:72:c0:14:88:6d:dd:ab:28:b8:6a:
9c:c8:54:9f:48:d9:77:0e:a8:f5:12:b4:ff:3e:b7:
e3:8b:d1:42:7b:0d:98:b2:e4:2e:02:14:65:9e:50:
a0:2c:40:cf:08:b2:70:43:2d:31:07:f3:7f:1e:dd:
05:4a:fa:c3:4f:55:f2:64:91:75:df:bc:e1:a4:55:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:40:CD:B1:55:8C:65:4A:90:9A:6E:1C:14:FA:B9:F9:92:9C:1E
X509v3 Authority Key Identifier:
keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a343030303a3a2f33342d3334203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:4000::/34
Signature Algorithm: sha256WithRSAEncryption
aa:48:39:40:5d:ac:60:00:44:0d:d3:9e:b1:5b:0f:46:0f:13:
9d:c2:69:d5:3e:e7:55:ba:42:8d:63:cf:60:2f:13:74:f6:30:
26:9d:2b:48:7d:05:36:b5:a1:dd:a8:b4:01:a4:30:a2:db:f6:
41:09:11:fc:11:7f:1b:47:fb:fd:10:f3:4f:7e:09:c5:8a:aa:
46:13:04:ab:d5:13:9c:1b:f7:d3:d1:27:14:7f:db:96:b4:19:
89:91:27:ef:11:d6:28:37:f2:35:9b:ee:f5:e4:0b:1c:c2:90:
3f:27:2b:1e:6c:93:52:de:82:79:f5:23:67:ed:45:e4:11:e1:
68:47:9f:5e:d2:05:ba:85:85:9a:53:14:8a:49:c3:34:d4:96:
b2:27:a7:2a:c9:af:6f:7c:44:04:97:46:72:9d:5d:98:04:ed:
83:fa:4e:9a:9d:20:c4:b4:56:c5:fb:a8:f6:02:5b:96:f9:94:
b7:24:2c:b7:ff:20:3d:4e:99:f3:61:27:fe:97:9c:00:e6:be:
4f:71:81:6d:ca:03:d8:0c:e7:06:08:ee:06:5e:32:b4:2f:47:
db:71:e9:bb:c3:f5:8f:a0:d7:19:5b:8f:81:44:70:04:76:d1:
68:b7:0a:3f:6a:6c:f8:40:37:a0:f6:c2:f2:7e:ce:22:f5:dc:
43:cf:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:16 2025 by rpki-client