Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa
File: 326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa (raw, json)
Hash identifier: Uyoylso5KC+koMrzLhaoDxxcmsnWRlm3191WrHv1hNg=
Subject key identifier: 39:B9:51:50:6C:5A:E7:0D:72:98:D9:DA:88:69:A2:C4:5A:8D:BF:A2
Certificate issuer: /CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Certificate serial: 47DDD99D6B1F4790D0998B3265EAEED7123ADB85
Authority key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa
Signing time: Sun 02 Feb 2025 15:20:22 +0000
ROA not before: Sun 02 Feb 2025 15:15:22 +0000
ROA not after: Sun 01 Feb 2026 15:20:22 +0000
asID: 214223
IP address blocks: 2a0a:6044:c110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:dd:d9:9d:6b:1f:47:90:d0:99:8b:32:65:ea:ee:d7:12:3a:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Validity
Not Before: Feb 2 15:15:22 2025 GMT
Not After : Feb 1 15:20:22 2026 GMT
Subject: CN=39B951506C5AE70D7298D9DA8869A2C45A8DBFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:da:a1:02:b5:cf:7c:67:b4:70:10:85:be:
39:4a:1c:4c:c9:03:e7:76:0c:48:fe:bc:6c:9e:6e:
62:7a:9b:92:38:53:46:34:e2:2f:7d:59:58:6d:5c:
44:d1:54:12:67:e8:a5:7e:bd:52:d6:60:af:38:ac:
25:25:10:69:94:7f:30:77:9e:81:ec:cc:16:94:a0:
f8:78:4c:6a:5e:b6:20:48:35:97:ad:97:ad:11:76:
40:18:56:41:42:9c:10:63:68:05:11:10:a1:65:b3:
59:b0:bb:f1:75:f2:ab:5f:32:68:2a:ad:e8:54:8d:
25:f2:0f:80:b7:71:b3:1d:5f:2d:8b:fb:e7:bf:78:
c9:36:31:9c:d7:17:3c:9c:9b:1a:45:ca:e0:0e:ce:
69:15:38:90:6e:df:79:2a:d8:32:f4:ed:f6:a2:d3:
0b:21:04:70:cb:dd:21:f4:ab:b6:82:ab:cc:9e:66:
40:c6:02:25:2b:73:73:da:41:43:2f:73:14:70:1a:
60:2e:5c:df:4e:bc:e0:04:03:99:e5:f5:d4:67:be:
a1:cd:e8:84:1f:d6:c0:b0:d6:fc:74:2f:75:4e:77:
9e:e3:b4:75:75:06:5e:46:fa:6c:11:dd:f5:cc:50:
50:24:42:bd:1a:73:77:28:c9:0f:93:96:88:58:a8:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:51:50:6C:5A:E7:0D:72:98:D9:DA:88:69:A2:C4:5A:8D:BF:A2
X509v3 Authority Key Identifier:
keyid:4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:c110::/44
Signature Algorithm: sha256WithRSAEncryption
42:33:49:8e:3a:2d:6c:49:f2:5f:a5:f4:09:d8:5f:a6:3d:f1:
58:5b:f7:17:09:6a:84:33:0d:9b:21:8a:56:85:db:37:82:db:
92:1d:3b:d6:49:c9:7d:6b:d0:0f:53:ad:f7:b5:78:0a:e8:7b:
e9:6c:fb:66:1e:64:82:a5:46:f7:b0:9f:50:eb:4e:df:b8:48:
fd:3d:d7:bb:13:3d:d3:ec:c2:2c:7e:5d:f0:2e:5e:a2:0c:e4:
e3:26:4f:c4:23:a5:9b:70:a5:17:56:8c:de:70:0e:07:8f:e5:
a9:9d:21:aa:25:e5:a8:7d:d4:97:13:c3:60:bf:cb:42:3f:51:
c9:e1:6a:0d:d3:9a:46:3c:07:48:78:5f:5e:9a:c1:f3:34:f8:
f7:b8:6b:07:0d:9c:ff:c6:ee:c3:df:14:99:ca:6f:01:79:b9:
9a:a7:57:0a:71:d4:dc:29:56:23:37:17:1f:fb:ae:7f:56:0d:
61:c5:d2:26:54:5c:c0:63:42:c2:17:12:b0:31:fd:b3:af:11:
d3:b2:0b:7b:3e:f8:bb:fb:f1:44:ba:ad:e1:13:5e:02:b1:e7:
7a:4e:1e:9d:87:e3:a5:4e:a8:53:53:2c:71:a8:f8:0a:71:02:
bb:0d:ce:02:9a:9b:5b:b5:34:05:e1:01:ca:44:5a:cc:23:19:
56:03:7d:66
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUR93ZnWsfR5DQmYsyZeru1xI624UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFMzY0QjlBM0FGNTQxRkFDMUMwQzBGQTcwOEZGN0U4
RTgwMjRCNjAeFw0yNTAyMDIxNTE1MjJaFw0yNjAyMDExNTIwMjJaMDMxMTAvBgNV
BAMTKDM5Qjk1MTUwNkM1QUU3MEQ3Mjk4RDlEQTg4NjlBMkM0NUE4REJGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrdqhArXPfGe0cBCFvjlKHEzJ
A+d2DEj+vGyebmJ6m5I4U0Y04i99WVhtXETRVBJn6KV+vVLWYK84rCUlEGmUfzB3
noHszBaUoPh4TGpetiBINZetl60RdkAYVkFCnBBjaAUREKFls1mwu/F18qtfMmgq
rehUjSXyD4C3cbMdXy2L++e/eMk2MZzXFzycmxpFyuAOzmkVOJBu33kq2DL07fai
0wshBHDL3SH0q7aCq8yeZkDGAiUrc3PaQUMvcxRwGmAuXN9OvOAEA5nl9dRnvqHN
6IQf1sCw1vx0L3VOd57jtHV1Bl5G+mwR3fXMUFAkQr0ac3coyQ+TlohYqGEvAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUOblRUGxa5w1ymNnaiGmixFqNv6IwHwYDVR0j
BBgwFoAUTeNkuaOvVB+sHAwPpwj/fo6AJLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi
ZTA0LzIvNERFMzY0QjlBM0FGNTQxRkFDMUMwQzBGQTcwOEZGN0U4RTgwMjRCNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80REUzNjRCOUEzQUY1NDFGQUMxQzBDMEZB
NzA4RkY3RThFODAyNEI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yZjBkNGI0ZS05Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMi8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYzMzEzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRMEQMA0GCSqGSIb3DQEBCwUAA4IBAQBC
M0mOOi1sSfJfpfQJ2F+mPfFYW/cXCWqEMw2bIYpWhds3gtuSHTvWScl9a9APU633
tXgK6HvpbPtmHmSCpUb3sJ9Q607fuEj9Pde7Ez3T7MIsfl3wLl6iDOTjJk/EI6Wb
cKUXVozecA4Hj+WpnSGqJeWofdSXE8Ngv8tCP1HJ4WoN05pGPAdIeF9emsHzNPj3
uGsHDZz/xu7D3xSZym8Bebmap1cKcdTcKVYjNxcf+65/Vg1hxdImVFzAY0LCFxKw
Mf2zrxHTsgt7Pvi7+/FEuq3hE14Csed6Th6dh+OlTqhTUyxxqPgKcQK7Dc4Cmptb
tTQF4QHKRFrMIxlWA31m
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:16:47 2025 by rpki-client