Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa
File: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (raw, json)
Hash identifier: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=
Subject key identifier: 5F:3A:2E:4C:27:5C:AA:91:71:2E:08:31:6F:3D:C5:F2:B9:34:9E:0B
Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial: 26FF84B456A1A1B09E44AAAF7E8115D0CBE58FC3
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa
Signing time: Thu 06 Mar 2025 23:02:36 +0000
ROA not before: Thu 06 Mar 2025 22:57:36 +0000
ROA not after: Thu 05 Mar 2026 23:02:36 +0000
asID: 199950
IP address blocks: 2a09:be40:2800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ff:84:b4:56:a1:a1:b0:9e:44:aa:af:7e:81:15:d0:cb:e5:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Validity
Not Before: Mar 6 22:57:36 2025 GMT
Not After : Mar 5 23:02:36 2026 GMT
Subject: CN=5F3A2E4C275CAA91712E08316F3DC5F2B9349E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:0e:88:68:09:2d:77:70:de:a6:d7:d3:f2:
a7:6a:5a:1d:cc:40:b9:96:c8:08:3f:2d:2b:c2:1e:
43:36:21:d8:f5:77:c8:78:67:3c:15:b0:3d:71:b3:
28:d1:15:c1:52:c4:15:08:b3:01:62:f3:f2:fc:d8:
56:9f:27:e4:66:0b:b1:37:ea:2d:27:8b:67:bb:22:
90:80:af:b6:b6:09:68:c4:0d:3d:d8:d9:e8:d6:3f:
fe:e5:51:9b:b9:72:30:b1:9d:04:7d:cc:77:79:3c:
f8:2b:e8:cb:4c:d3:10:93:f7:1b:cb:13:7f:4e:f6:
87:0c:4b:ec:44:5f:cc:9e:4c:ce:3c:34:c7:aa:48:
a6:d1:7e:23:a5:4d:6a:2e:0c:2f:fd:62:43:03:48:
73:e1:e3:a3:a6:d9:d9:7d:b0:58:ed:7e:9f:4d:f5:
a8:71:22:8e:ca:ee:1c:cb:25:55:b8:04:f1:68:51:
4c:b6:71:44:e6:4a:2d:d7:3b:37:fd:f0:bd:c6:b2:
e6:d3:15:0c:21:e4:34:55:c9:2c:0a:25:3b:6d:fa:
10:88:a1:74:6f:07:0e:99:1c:65:9e:a1:da:bf:df:
7e:89:f0:1d:f4:32:c0:7b:a2:d3:4b:c8:a0:7a:e0:
35:f7:ae:74:7d:5b:cd:78:69:09:61:d9:ff:4f:80:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:2E:4C:27:5C:AA:91:71:2E:08:31:6F:3D:C5:F2:B9:34:9E:0B
X509v3 Authority Key Identifier:
keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be40:2800::/40
Signature Algorithm: sha256WithRSAEncryption
23:98:b8:5d:ac:16:f7:7a:e8:fd:a3:a1:05:64:8e:e1:dd:f2:
f0:d5:02:f4:c5:8d:d7:30:e8:90:7b:94:bc:72:a2:f4:b0:04:
9d:df:b1:7d:21:34:c8:4a:b1:28:32:91:9d:2c:dc:c7:f4:b4:
1b:9a:b5:ed:77:4e:ae:38:23:bf:7e:f4:99:3e:94:9e:e2:61:
e2:ae:87:48:6a:e1:d4:0e:9b:1a:0a:85:87:d9:38:fb:12:70:
bf:46:04:b2:c4:51:40:49:6d:b7:30:29:4b:a0:e4:6b:9e:a9:
6b:b5:6e:ba:dd:db:b6:5d:73:af:c0:88:d6:da:94:99:d0:38:
ab:8a:b6:02:2f:eb:e3:b1:e1:64:0b:db:3c:10:8c:67:a2:7a:
ca:6a:08:c9:af:e9:04:81:20:47:49:5f:a4:fe:a8:2a:4e:78:
1b:0e:f8:e3:d7:4e:28:cf:97:53:7f:fc:08:eb:93:c7:b5:06:
85:20:57:b8:c6:43:73:cd:8e:70:5f:f0:2f:94:d9:34:76:fe:
8e:71:a4:51:e2:c4:f7:05:4e:18:6d:30:60:2c:05:4a:bd:59:
0a:f4:6a:e7:ab:a6:a9:bb:18:dc:0d:ff:8c:0c:33:ae:84:19:
fd:7e:a9:88:89:32:72:9e:68:e3:0f:20:8f:94:03:cd:f2:74:
6a:f4:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:46 2025 by rpki-client