Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
File: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (raw, json)
Hash identifier: 0VzNqelmh9PtWDyjtgcpmxTMLlHeWcLjX+PbF1U5A6A=
Subject key identifier: 8A:B8:66:E8:B5:D9:66:22:73:34:B6:6B:26:9E:91:4D:BD:18:E4:9C
Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Certificate serial: 3AD252044F61F73DA4E53DF90F56014A58707BD7
Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
Signing time: Wed 12 Feb 2025 09:21:09 +0000
ROA not before: Wed 12 Feb 2025 09:16:09 +0000
ROA not after: Wed 11 Feb 2026 09:21:09 +0000
asID: 214393
IP address blocks: 2a0a:6044:8ff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:52:04:4f:61:f7:3d:a4:e5:3d:f9:0f:56:01:4a:58:70:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Validity
Not Before: Feb 12 09:16:09 2025 GMT
Not After : Feb 11 09:21:09 2026 GMT
Subject: CN=8AB866E8B5D966227334B66B269E914DBD18E49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:fd:54:3e:8d:d9:0f:f4:9f:d7:ce:36:a3:
a9:d3:b1:f4:b3:dc:5e:5e:78:d8:1d:11:45:52:73:
50:f9:32:05:36:7d:d8:0c:4a:9f:89:54:7d:47:bc:
01:cf:38:b8:af:58:48:19:b3:05:0c:f6:f5:d3:91:
93:8a:ca:69:98:41:b5:cd:da:35:55:ad:a9:3d:d8:
ca:4a:66:a7:e1:f1:55:5e:a0:fd:8a:fa:50:d2:29:
54:2b:ae:44:bf:01:0d:a7:35:fe:83:52:67:0a:10:
65:e5:74:3c:f6:8c:6f:b7:d9:f1:b5:0a:5c:2b:a6:
a7:4a:7a:9f:b5:54:f9:36:19:10:cb:1e:06:ab:99:
58:af:fe:6a:13:21:c9:00:5c:be:14:26:d6:1c:ee:
4d:b0:db:ae:9f:55:2e:31:45:fd:25:a7:f8:48:d7:
4b:08:01:cb:d9:3a:1e:98:63:46:25:59:e9:f9:08:
4f:33:67:93:5a:ab:99:f9:3d:73:fb:ba:cc:38:12:
e7:b1:5c:bd:9c:b2:0f:b2:70:1c:56:e1:a7:b4:6e:
a2:35:78:64:0a:aa:6b:92:88:ab:2e:b0:43:97:31:
77:3e:84:b0:5f:b6:0f:3e:58:38:08:ce:c7:1e:0d:
9e:19:18:64:94:55:d0:18:4b:bc:16:a5:00:74:1e:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:66:E8:B5:D9:66:22:73:34:B6:6B:26:9E:91:4D:BD:18:E4:9C
X509v3 Authority Key Identifier:
keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:8ff0::/44
Signature Algorithm: sha256WithRSAEncryption
c5:ec:d8:d6:58:63:1a:a5:ac:44:cf:06:49:5c:a7:e4:da:09:
0d:d5:65:1b:45:be:7a:8b:11:f4:a5:1c:85:02:83:04:be:be:
6b:f7:24:1f:95:38:29:14:61:6a:93:3b:ba:09:88:6c:73:3c:
42:44:f9:05:e6:4d:76:f6:12:02:de:55:2c:71:b6:c5:60:54:
3f:3d:23:01:f0:30:e0:5c:b5:78:34:80:58:e2:68:6e:91:49:
d1:f9:11:f7:9f:6b:73:84:16:f9:ae:88:bd:8f:b5:42:61:8f:
9e:79:23:ba:6d:6a:be:50:20:36:08:a1:2e:78:b2:a3:48:ca:
d7:a0:5d:12:3c:3f:03:ea:6a:a8:f6:43:02:8a:5f:d7:f3:69:
59:61:5d:d0:47:78:69:7f:27:b3:2d:03:81:0c:36:01:85:6f:
a1:ca:ce:0d:4a:26:45:2c:c8:ae:34:e1:d2:3a:b6:e5:5a:94:
ae:37:12:8d:91:d1:26:5d:2a:6c:ed:21:98:46:61:22:8e:de:
cc:ca:22:df:eb:5b:75:f9:5f:90:08:09:f7:80:e0:a5:cc:4d:
31:d2:7f:76:8c:c9:35:37:24:e7:a8:1a:7b:75:a5:4c:79:37:
96:51:17:12:f5:93:24:0e:6c:fc:3a:f1:f2:51:ef:4d:b3:42:
94:5d:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:11 2025 by rpki-client