Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa
File: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (raw, json)
Hash identifier: RiTHbb6fM/K2yy/mDsB7YR5onXWmom6kg2M7y+5zKRM=
Subject key identifier: 68:97:94:05:DA:44:61:4C:22:25:4C:E2:88:04:64:74:0C:FB:36:D6
Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial: 0E6EB3E398FAAAD9E219089357A788A6C2F19CB3
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa
Signing time: Wed 12 Feb 2025 09:21:10 +0000
ROA not before: Wed 12 Feb 2025 09:16:10 +0000
ROA not after: Wed 11 Feb 2026 09:21:10 +0000
asID: 215605
IP address blocks: 2a0a:6044:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6e:b3:e3:98:fa:aa:d9:e2:19:08:93:57:a7:88:a6:c2:f1:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Validity
Not Before: Feb 12 09:16:10 2025 GMT
Not After : Feb 11 09:21:10 2026 GMT
Subject: CN=68979405DA44614C22254CE2880464740CFB36D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:2b:7c:48:14:d2:7a:38:05:16:e7:4a:0f:
26:c5:60:76:a7:7a:79:92:82:58:b7:49:fd:df:5e:
4d:52:75:55:ae:9a:68:5d:7f:3d:e1:57:9e:21:7e:
67:da:74:44:4f:ae:e3:85:05:68:66:3c:00:8e:ee:
82:cb:35:7f:4d:a3:a8:ef:bf:82:db:24:a4:d0:1c:
14:26:ef:29:73:d1:0f:63:87:72:99:3a:55:12:11:
2f:15:1a:c4:20:d5:0e:6c:9f:63:1e:46:63:54:26:
32:dc:54:32:cf:9d:13:38:2d:d2:95:40:d6:a7:f7:
1b:e0:b4:b3:4c:53:cd:47:ad:e7:33:cb:70:2c:df:
88:b9:43:3a:db:38:d9:e9:85:8f:08:6c:fd:a9:95:
db:7b:91:5b:2b:bf:fc:82:5c:50:cc:a4:6b:a1:17:
f8:0e:79:8b:6d:04:54:9a:49:ab:2e:21:41:6d:40:
92:09:2c:72:58:9a:4c:e6:a3:ec:51:fe:74:69:b5:
8d:0c:3c:e1:2c:fe:42:98:13:c1:16:be:9a:43:c3:
75:29:1f:d5:1a:92:3f:39:fb:a2:e2:92:a2:7d:cc:
6b:36:bb:e8:86:33:da:3c:4a:79:e7:60:5e:40:63:
6c:cc:6e:71:25:0c:35:d5:fb:72:bc:c9:62:c5:34:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:94:05:DA:44:61:4C:22:25:4C:E2:88:04:64:74:0C:FB:36:D6
X509v3 Authority Key Identifier:
keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
b2:26:c6:92:64:75:37:1a:2e:30:d1:44:a2:43:ed:f3:60:75:
6e:d9:4d:4f:23:5b:ae:ea:5d:f7:43:09:31:2f:10:3d:83:38:
58:45:c1:bc:05:56:9d:04:0e:18:71:65:33:80:74:dd:e8:2f:
96:ef:d0:08:d0:3c:d4:7f:32:73:98:18:55:48:2c:dc:15:8a:
fb:cb:a2:df:db:b9:c9:13:d9:ba:02:14:6d:e3:d3:4c:a7:b7:
6b:20:38:2f:29:49:21:0b:f0:d6:5d:f7:64:d7:bd:be:c0:b4:
27:5c:a5:e8:98:bc:79:d2:5b:d4:5c:ff:dd:0a:af:5a:ee:ed:
5f:a1:32:9e:bf:a2:d3:68:1e:7a:b4:ad:3c:c3:92:3a:21:3e:
43:f9:15:ce:40:73:02:fa:d0:28:d1:d5:10:dd:82:03:6a:07:
36:1d:c4:a3:90:ce:58:3f:a1:e4:05:4b:89:e9:a7:05:2c:90:
b3:a2:d5:2f:fd:e0:5d:22:01:60:90:4e:c2:ab:0f:78:eb:91:
eb:fb:f5:e2:6d:b5:f1:2d:fd:80:c8:a6:24:a1:bd:3c:b6:1e:
21:ac:7a:9d:99:a2:5d:ba:a2:16:4e:8b:a3:e8:fe:3f:7a:07:
f5:27:ca:e3:50:3d:0a:6f:08:8b:11:64:6f:ba:15:ac:e4:a2:
36:65:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:44 2025 by rpki-client