Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
File: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier: agSFI/5Czj2ro7LalSLA5VrrKX4OU2U8yBjlSOiILcc=
Subject key identifier: A6:26:02:53:33:B6:3D:E8:32:58:48:A8:98:C6:2C:4E:3E:14:DF:8D
Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial: 124E70424004774EDD0651FD826BA92C0B1CA023
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
Signing time: Tue 11 Feb 2025 16:44:55 +0000
ROA not before: Tue 11 Feb 2025 16:39:55 +0000
ROA not after: Tue 10 Feb 2026 16:44:55 +0000
asID: 214223
IP address blocks: 2a0a:6044:aa10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4e:70:42:40:04:77:4e:dd:06:51:fd:82:6b:a9:2c:0b:1c:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Validity
Not Before: Feb 11 16:39:55 2025 GMT
Not After : Feb 10 16:44:55 2026 GMT
Subject: CN=A626025333B63DE8325848A898C62C4E3E14DF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:5b:fe:55:e7:0a:9c:0c:be:01:a2:b8:de:
8f:0f:2f:a0:38:59:54:d9:2d:42:b2:97:3a:1e:ca:
44:59:76:05:99:90:de:2c:46:a5:91:cf:b9:c3:dc:
e2:4e:a6:02:ba:a6:97:30:69:24:f6:b3:37:f0:5f:
3d:cc:e7:d0:b3:ae:e2:f3:9d:a6:3c:cf:c9:eb:67:
2f:5c:44:b4:51:79:54:59:e1:24:e9:65:31:d9:a4:
d9:50:a8:a2:1c:da:55:57:67:78:2c:92:33:ad:e6:
f5:67:88:07:58:85:a2:48:c3:8e:a9:ac:f4:db:45:
ed:7a:d2:4c:77:6d:7d:6b:42:da:ad:41:12:ff:44:
b9:fb:57:a3:03:ee:c5:6c:ac:5b:13:cf:0b:3c:c1:
1a:82:73:a7:06:6c:ea:98:b4:0d:0d:4c:27:a2:21:
98:08:39:fd:c3:2c:18:39:e9:93:5e:3d:24:8e:dc:
49:ef:eb:e9:e9:12:fa:90:53:25:64:d2:be:77:1d:
b8:18:25:a2:fa:bf:25:b2:56:54:da:e8:ff:1d:21:
c2:cf:f7:7b:1f:bb:bd:c8:a1:72:74:c1:b9:05:0c:
86:aa:d6:8e:23:77:1f:7a:4e:26:66:7c:64:e9:a8:
2f:b8:2f:4c:f1:66:1d:d6:83:53:c4:f2:aa:9d:4e:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:02:53:33:B6:3D:E8:32:58:48:A8:98:C6:2C:4E:3E:14:DF:8D
X509v3 Authority Key Identifier:
keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aa10::/48
Signature Algorithm: sha256WithRSAEncryption
79:74:4e:3a:81:43:d6:cf:98:20:a4:a7:9d:91:64:f6:ba:84:
81:dc:d4:cd:20:ce:2d:43:89:a7:5b:33:e1:d7:bd:39:77:47:
ce:3d:80:02:b0:50:19:2d:29:1a:ee:b1:7d:60:3a:0a:02:1e:
01:1f:7b:e2:9f:a9:2d:3c:91:d9:a1:40:b8:70:d6:2d:07:27:
fc:fe:72:d5:0c:c0:be:89:4c:ee:65:a7:56:fb:6d:91:bc:d1:
dd:46:73:73:87:0d:a5:ff:0b:ea:63:26:8c:5a:4c:c2:6d:85:
9d:9d:f8:de:39:e2:8a:5d:59:f8:4c:84:2b:2d:1b:6d:44:07:
32:42:44:ad:6a:9a:57:6f:2d:cc:13:8d:eb:75:ee:37:91:52:
e5:f9:23:79:56:0e:29:be:c6:9b:53:c7:ee:26:b6:8b:fe:c4:
39:de:61:5f:45:87:3f:33:aa:a0:65:46:b8:94:2d:e0:df:0b:
03:dc:b7:84:0c:e8:42:e4:9a:8d:1e:03:db:93:59:fd:9d:ae:
24:da:b3:52:87:c9:c6:42:a4:d9:70:ce:90:88:16:18:3f:96:
7c:16:51:9c:98:ca:05:09:80:0f:17:0e:6a:c7:30:cc:e5:0e:
98:ca:f3:b9:9d:5c:5c:5f:f0:96:16:c0:53:23:5c:4e:46:c9:
94:8e:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:24 2025 by rpki-client