Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
File: 326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa (raw, json)
Hash identifier: gmP83JW4qpjwkT59V7HY5PuP7Y/0EDJxliISMSaqhQU=
Subject key identifier: F6:97:6E:AE:70:C4:FB:D7:58:08:92:10:C3:8C:90:22:E2:BA:A7:9F
Certificate issuer: /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial: 6E657D4AE34EC499CAF42F8AC78064BB36E2C6D7
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
Signing time: Sun 02 Feb 2025 15:20:01 +0000
ROA not before: Sun 02 Feb 2025 15:15:01 +0000
ROA not after: Sun 01 Feb 2026 15:20:01 +0000
asID: 214223
IP address blocks: 2a0a:6044:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:65:7d:4a:e3:4e:c4:99:ca:f4:2f:8a:c7:80:64:bb:36:e2:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Validity
Not Before: Feb 2 15:15:01 2025 GMT
Not After : Feb 1 15:20:01 2026 GMT
Subject: CN=F6976EAE70C4FBD758089210C38C9022E2BAA79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:26:d3:f4:af:5f:69:8d:63:30:91:00:2d:
96:c4:76:b5:d5:b0:fa:7e:2f:35:ca:dc:6c:fb:d0:
9c:41:dc:86:85:52:45:98:f6:83:59:fe:c0:b9:92:
f2:a3:8c:a8:7c:5f:7d:bf:1d:e6:9f:83:09:b2:0e:
36:aa:6d:72:5b:d5:c7:07:7a:6b:bc:22:e6:51:10:
22:b2:b0:cd:4a:72:fb:2e:df:c8:08:63:da:16:c1:
60:1d:50:96:8f:00:5c:32:63:c5:61:b2:aa:da:e6:
27:2e:ab:78:2f:e0:c4:0a:53:0b:c7:45:47:1a:bb:
96:6b:cd:57:17:58:41:d0:38:7b:1f:7d:2a:60:cd:
b7:4a:2b:e5:7a:22:cc:3c:13:b1:d8:e6:bb:4b:36:
ba:61:dd:c7:14:7c:ce:03:aa:90:98:c7:8c:1f:dc:
5d:83:ca:23:1c:5d:92:7a:61:8f:fd:9f:3d:30:d6:
15:01:10:a5:f5:b3:a3:32:88:1c:ad:5c:52:df:87:
5a:36:6e:f6:ef:c5:1d:5b:75:87:9b:6a:63:73:02:
34:aa:7d:d4:c6:d8:14:4d:5b:d2:57:58:b4:42:2d:
87:6b:1c:7b:59:58:ee:23:46:99:85:1b:ed:9a:99:
c0:74:a3:c2:af:11:c1:65:d4:67:7d:67:5e:35:59:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:6E:AE:70:C4:FB:D7:58:08:92:10:C3:8C:90:22:E2:BA:A7:9F
X509v3 Authority Key Identifier:
keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6400::/40
Signature Algorithm: sha256WithRSAEncryption
b4:aa:9c:1a:54:37:3c:97:86:14:2c:a5:5a:ed:0c:c3:87:b4:
38:72:b0:4e:12:18:37:c9:5c:09:b9:72:c0:17:e4:37:0e:17:
d4:68:2b:d0:77:9b:84:54:fb:f2:95:20:7c:7a:b6:3d:fd:c5:
2e:f1:39:15:42:35:05:c7:3f:fe:f0:5f:f9:c2:c8:78:10:d0:
71:96:c9:1a:a7:af:29:9d:db:d8:09:78:4c:3f:6e:20:3d:7e:
b6:63:37:85:fb:1d:87:b9:fa:c7:ff:cd:84:83:d1:6a:2f:93:
c1:8c:b3:e0:99:cd:c0:3a:90:6d:32:3f:d9:af:cd:c6:0e:89:
d8:36:9a:62:33:1b:fe:ce:a1:f1:09:21:14:68:62:07:75:90:
9e:d1:50:ea:e9:fd:72:95:62:f6:2e:15:f5:d8:b7:ea:c5:81:
ea:6f:b5:91:3b:14:14:da:25:72:87:73:5d:eb:df:d9:8a:f4:
32:73:38:bc:80:38:63:7e:da:44:87:7b:bf:9a:8e:86:88:b3:
9b:01:3a:20:e0:0e:d5:3c:27:4e:d8:bb:d1:8d:6c:b0:d4:be:
eb:39:b4:6b:ec:1b:7b:ee:28:fc:90:95:6f:e7:c0:2b:5e:b0:
df:36:72:a0:e1:d1:90:29:4c:27:4c:84:9d:8c:dd:fb:4e:ef:
c2:5d:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:12 2025 by rpki-client