Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313730303a3a2f34302d3438203d3e203537383730.roa
File: 326130373a353463353a313730303a3a2f34302d3438203d3e203537383730.roa (raw, json)
Hash identifier: zZhobdBn1efAMF8w76wK4yytLQly991q2sKIb10ZSwg=
Subject key identifier: 34:17:01:5D:35:F4:16:D3:2F:04:9A:3F:C0:58:6B:F7:4C:D0:AD:00
Certificate issuer: /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial: 3CB04E4B23EB44841409B57DD475C4B8A544673F
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313730303a3a2f34302d3438203d3e203537383730.roa
Signing time: Sat 22 Apr 2023 20:22:01 +0000
ROA not before: Sat 22 Apr 2023 20:17:01 +0000
ROA not after: Sat 20 Apr 2024 20:22:01 +0000
asID: 57870
IP address blocks: 2a07:54c5:1700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b0:4e:4b:23:eb:44:84:14:09:b5:7d:d4:75:c4:b8:a5:44:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Validity
Not Before: Apr 22 20:17:01 2023 GMT
Not After : Apr 20 20:22:01 2024 GMT
Subject: CN=3417015D35F416D32F049A3FC0586BF74CD0AD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:8f:4b:a4:43:24:97:42:4c:a1:3e:b2:bd:
d3:2b:1b:a6:1a:b3:62:22:59:e7:57:cb:36:d4:03:
ce:c8:85:3d:d4:7d:3d:33:50:d8:d7:0e:fe:eb:51:
39:3c:4d:4e:7b:4b:78:5a:e5:94:b2:a1:d1:63:84:
ef:2b:29:f0:9a:b0:95:8d:74:eb:78:d7:67:b5:86:
aa:9c:5e:be:bd:e0:d9:54:eb:94:fa:28:8b:f6:c3:
25:f8:b3:a0:d2:06:36:d4:ae:91:f5:9e:63:f7:63:
53:eb:ca:27:e3:70:17:8b:83:06:5a:08:2e:6a:3b:
11:4f:e1:ed:ac:61:2b:6a:07:37:d8:65:4c:2e:dc:
ae:9b:1b:59:03:07:fa:dd:c5:68:f9:29:64:21:05:
df:c6:b9:2f:42:8d:82:52:77:fa:05:9c:1d:81:42:
35:b2:b5:fe:4c:2a:39:4f:4f:1f:79:e3:9b:77:5e:
5d:1a:7a:50:56:28:a6:97:18:9c:23:d2:89:ae:5b:
2c:4e:3b:15:76:51:8e:48:06:00:ec:3e:f1:a2:5a:
85:f3:59:e9:c4:f9:b2:4b:8e:e4:82:e0:b0:c8:20:
6e:24:1e:0f:65:66:64:d1:19:89:96:ba:5c:ec:f4:
6e:90:c6:34:9c:be:5b:8a:62:68:9c:ff:6a:ca:95:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:01:5D:35:F4:16:D3:2F:04:9A:3F:C0:58:6B:F7:4C:D0:AD:00
X509v3 Authority Key Identifier:
keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313730303a3a2f34302d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c5:1700::/40
Signature Algorithm: sha256WithRSAEncryption
0f:e0:d4:f4:c2:34:52:2f:a8:73:3e:16:45:9b:f2:ad:71:a2:
83:1e:81:b1:b6:c4:6e:c6:9e:98:b8:5d:59:3e:98:df:57:15:
c2:cf:9f:fd:b3:f8:26:89:65:d4:27:4f:6c:9c:3c:f2:2a:24:
df:67:0c:a5:1e:66:f1:1f:16:91:4c:65:ad:6a:8c:72:2b:6d:
0d:89:a0:74:70:66:00:be:70:30:41:83:69:ce:b7:cf:a6:03:
49:50:33:16:44:60:f8:e9:e4:86:c1:69:50:12:44:61:b3:f3:
3b:a0:29:01:68:e9:9d:57:58:e9:3b:cb:2b:23:ac:88:4f:70:
45:51:73:de:64:af:ab:ef:a9:9c:bd:1e:a3:81:02:26:ff:04:
a0:59:fe:bc:6f:f3:3b:bb:75:aa:ee:1f:f9:48:da:e3:d2:36:
f6:60:b5:99:46:10:9e:5b:93:e1:8e:c5:c2:ff:95:95:30:28:
2d:74:3b:dd:65:44:7e:22:83:9a:c9:48:d3:13:f3:86:66:dc:
06:f4:3e:27:fc:a7:bd:48:e5:1a:14:d9:a5:f8:d9:8c:f2:fa:
72:a1:b0:c5:c9:bc:01:41:6d:b7:6d:17:ab:d1:5e:a2:f4:2f:
27:21:60:77:3e:4a:37:88:10:47:48:59:db:e7:ed:98:bf:11:
5a:c7:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:49:01 2025 by rpki-client