Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa
File: 326130363a313238333a3a2f33332d3334203d3e20313937343737.roa (raw, json)
Hash identifier: qySEHWSqGyB/2ZvC2CCIWl3xnjFAJ4Mo1CqpJIA7Q3g=
Subject key identifier: 7F:7B:53:0E:BC:AB:90:37:23:1E:F7:C0:77:C4:C1:A4:64:04:A8:6E
Certificate issuer: /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial: 6A0EF522C99444CC3C2B611C00CF5F8635CA0E72
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa
Signing time: Fri 14 Mar 2025 20:14:41 +0000
ROA not before: Fri 14 Mar 2025 20:09:41 +0000
ROA not after: Fri 13 Mar 2026 20:14:41 +0000
asID: 197477
IP address blocks: 2a06:1283::/33 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0e:f5:22:c9:94:44:cc:3c:2b:61:1c:00:cf:5f:86:35:ca:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
Validity
Not Before: Mar 14 20:09:41 2025 GMT
Not After : Mar 13 20:14:41 2026 GMT
Subject: CN=7F7B530EBCAB9037231EF7C077C4C1A46404A86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:e2:b7:29:75:03:42:ac:3d:fd:b7:1d:7e:
1d:0a:6e:57:2c:2f:49:57:57:17:b1:2f:50:f9:79:
ce:78:ba:f5:2a:fd:a1:b8:47:7a:9a:e6:f8:83:24:
08:e2:f4:8f:98:2e:da:95:13:70:4b:b5:5c:5c:92:
ed:f0:3a:11:dc:89:67:7f:d2:c6:cf:91:c6:80:5b:
d5:21:b2:1d:fc:ec:61:ee:6a:5e:f7:af:21:e8:4d:
97:b5:e6:43:fb:27:07:6a:98:1d:24:ec:4a:f9:25:
dd:47:25:12:dd:d4:2d:fc:ff:81:33:13:5a:f0:08:
ca:9c:c0:92:bf:88:38:78:af:bd:be:56:01:8f:55:
fc:91:bf:8b:3b:88:d8:e1:01:b7:a9:1e:ca:8f:cb:
13:a0:ae:8c:d3:02:36:d0:71:9f:c1:ce:04:19:9a:
78:cd:eb:85:15:51:be:56:52:55:38:7d:dd:ce:88:
ec:1d:0c:ea:cb:11:1a:dd:52:4c:5f:56:77:3f:b5:
49:9e:99:d5:6a:2c:3e:c9:66:c2:76:a4:fb:dd:e2:
ac:ae:df:c5:ed:da:51:fb:f0:a1:32:c0:36:5d:0a:
06:c5:16:3e:68:03:f6:18:72:d4:46:b8:af:ba:78:
ae:c0:e8:e8:a7:49:e4:60:c2:7c:53:ed:a4:5e:eb:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:53:0E:BC:AB:90:37:23:1E:F7:C0:77:C4:C1:A4:64:04:A8:6E
X509v3 Authority Key Identifier:
keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a3a2f33332d3334203d3e20313937343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283::/33
Signature Algorithm: sha256WithRSAEncryption
b7:d1:08:d0:1b:ca:66:89:fa:9d:b0:d4:03:0a:25:17:11:79:
76:d8:3e:b8:88:11:bf:50:c3:d1:22:9c:ff:2f:54:b0:9a:08:
e0:90:84:5f:b9:29:00:98:f8:af:5f:6c:dc:23:09:18:f0:e7:
c7:9f:31:46:63:10:85:ca:8d:c0:a3:7f:d1:f8:4a:41:01:ba:
2e:eb:91:14:2e:cc:5f:f9:21:5c:d5:0b:49:f2:f9:9d:90:71:
33:05:0c:8e:9d:e9:b6:24:db:df:d9:4e:5f:f9:79:f0:00:68:
fc:c8:12:6a:02:3c:59:51:71:3f:2f:c8:b1:12:0e:1f:29:e9:
d8:ea:33:b4:52:24:6a:44:09:dc:06:6b:d8:d3:97:68:c2:e5:
a2:39:63:a0:0e:4a:c8:db:57:e4:5f:8f:ae:e0:15:c0:a9:ec:
63:06:ef:50:a2:08:28:e7:0c:89:03:27:a0:f7:59:7b:24:27:
f0:2a:99:a8:72:ef:ae:62:fc:ce:a1:58:16:c8:8e:47:d8:60:
1e:70:fa:a9:93:2d:47:d7:f8:42:7a:cd:6d:82:bc:70:d4:f8:
2c:bf:f5:4d:88:ec:39:c8:9f:c2:fd:d4:fd:ad:02:33:51:b5:
de:8a:d7:9f:2a:18:b0:01:71:89:41:ab:b7:ce:ae:2e:0d:bf:
e3:69:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:20 2025 by rpki-client