Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
File: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (raw, json)
Hash identifier: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM=
Subject key identifier: D8:60:80:7D:24:7D:F0:C7:83:78:5F:70:58:71:35:F5:39:FF:58:58
Certificate issuer: /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9
Certificate serial: 22C8B4DF322521123BDAF6AAE879B2A706217B96
Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
Signing time: Mon 14 Apr 2025 21:24:12 +0000
ROA not before: Mon 14 Apr 2025 21:19:12 +0000
ROA not after: Mon 13 Apr 2026 21:24:12 +0000
asID: 151704
IP address blocks: 2a0b:4e07:1c01::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c8:b4:df:32:25:21:12:3b:da:f6:aa:e8:79:b2:a7:06:21:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9
Validity
Not Before: Apr 14 21:19:12 2025 GMT
Not After : Apr 13 21:24:12 2026 GMT
Subject: CN=D860807D247DF0C783785F70587135F539FF5858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:36:85:ff:25:86:d1:2a:e7:ca:6f:fb:fe:
ba:48:92:97:e9:bd:18:58:5d:80:df:a4:35:94:ea:
54:5c:24:61:e1:df:97:c8:20:33:d4:79:1d:f5:8c:
a4:4c:f5:83:bd:63:2d:4b:a2:c8:4c:2c:8c:45:a7:
e5:58:fb:3f:5e:b3:4b:21:79:ed:a3:66:af:ce:63:
7d:1a:e4:bd:f0:50:23:8e:48:26:78:ae:5c:65:54:
71:a0:b8:6e:b1:81:8f:70:ea:36:67:45:97:32:22:
54:f6:a1:83:a9:ae:cf:b7:7d:ec:32:8b:45:cb:37:
5b:d3:4e:e6:d5:67:35:65:1c:94:ad:2c:24:11:b7:
e7:54:ee:af:cc:9c:12:1c:cb:f5:a1:4b:41:7c:d9:
b0:24:62:30:20:36:8c:09:15:fe:8a:3f:54:23:a1:
db:fa:4a:b9:d9:90:6f:e3:3d:6b:e3:18:1f:59:f5:
16:c8:ec:3a:3f:15:14:28:db:d9:c8:14:58:be:ac:
4c:ac:a6:42:7d:3d:61:ac:6c:cb:d0:57:ac:03:3c:
36:47:1d:1f:a5:5d:2b:c9:d5:bc:2c:15:19:cb:c9:
af:1b:6a:b0:77:b8:99:db:d2:f1:13:31:b7:5a:0b:
ee:9f:31:3b:03:38:70:32:e1:6b:3d:8b:2b:91:c5:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:80:7D:24:7D:F0:C7:83:78:5F:70:58:71:35:F5:39:FF:58:58
X509v3 Authority Key Identifier:
keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1c01::/48
Signature Algorithm: sha256WithRSAEncryption
11:d6:9a:8b:7f:cf:d3:93:d9:ca:7f:a3:7c:34:89:83:22:5b:
1f:57:7f:71:6f:ee:d4:56:69:67:ea:76:9c:6f:8f:75:37:cb:
f1:d3:7f:fb:d5:39:14:de:0d:46:d8:a1:94:4e:e2:83:fd:ea:
3a:e1:41:5a:d1:79:f5:8f:8a:0c:99:c7:ad:2c:53:8b:ad:fa:
39:60:a2:69:5c:96:d5:8d:55:e0:d2:b5:19:26:40:28:d7:96:
cc:33:fb:fd:81:77:7d:83:67:f1:65:75:01:2e:64:46:c7:ce:
42:28:f5:ef:b3:02:6e:82:a6:f6:4f:80:4c:4a:10:63:e0:38:
ea:ac:a1:0c:4e:ee:48:6e:90:bf:a7:0c:f1:34:64:50:9e:25:
86:8a:3f:75:55:00:5e:43:0e:46:40:c9:6d:66:ef:be:4e:5d:
58:72:2a:e8:63:10:be:42:d0:6b:fa:15:ef:fe:6e:56:77:d6:
81:52:a5:4d:2c:60:91:97:04:f7:d0:01:37:2a:ea:7b:32:e5:
79:82:e6:cb:86:21:7b:49:96:92:0e:de:0a:ff:34:0a:e6:cb:
39:5f:a2:4f:02:99:5d:68:f1:b5:14:a9:91:ad:58:53:fb:c6:
d6:e5:9b:bf:23:77:10:d5:7d:bd:42:0e:93:49:8c:9e:29:0d:
3b:09:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:17:11 2025 by rpki-client