Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa
File: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (raw, json)
Hash identifier: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=
Subject key identifier: FC:DC:53:A1:AA:52:92:5D:94:9E:EC:75:C8:AE:07:9C:DC:AC:7E:27
Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
Certificate serial: 285F71D395D5A97622DD6378502A16AFD3B70074
Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa
Signing time: Mon 10 Feb 2025 14:55:09 +0000
ROA not before: Mon 10 Feb 2025 14:50:09 +0000
ROA not after: Mon 09 Feb 2026 14:55:09 +0000
asID: 26006
IP address blocks: 2a06:1287::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5f:71:d3:95:d5:a9:76:22:dd:63:78:50:2a:16:af:d3:b7:00:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB
Validity
Not Before: Feb 10 14:50:09 2025 GMT
Not After : Feb 9 14:55:09 2026 GMT
Subject: CN=FCDC53A1AA52925D949EEC75C8AE079CDCAC7E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:b0:d1:6d:ea:26:0d:3a:43:60:a1:30:e2:
33:b7:ef:bc:dc:be:8d:cf:f1:b8:cf:0a:ae:2c:c0:
f4:8e:08:38:a0:3f:1a:1c:12:fc:a6:9d:52:3b:c0:
9c:7d:51:51:12:50:c9:61:7c:8e:07:96:a5:3b:1c:
5b:32:91:2b:4e:99:c2:05:cb:a0:00:5c:03:1d:33:
5f:97:33:d5:9f:f1:47:f9:36:0d:f5:9e:aa:8e:e8:
dd:49:61:88:8b:0d:6b:8b:77:67:a6:3f:2a:1c:46:
6e:a1:16:d1:20:2f:93:2c:e6:55:0f:dc:ad:ce:44:
5b:29:2d:c5:fc:1b:f5:24:27:d5:6b:2b:fe:ea:e4:
5f:15:a9:ae:c2:86:e0:ca:0f:27:18:b5:ff:9b:e6:
bf:2a:1d:b1:dd:93:0b:9a:37:11:8d:c2:f2:62:cf:
b1:bd:09:48:4a:d7:72:5a:61:9c:15:31:60:73:78:
b0:1f:7e:e8:c6:ef:19:97:af:f9:5f:c1:a3:d8:00:
e1:ca:5c:93:37:54:f3:2c:87:87:9d:7d:99:d7:ce:
d4:be:60:4c:58:d6:46:6d:7c:84:18:6d:35:42:00:
c9:1c:b5:e7:a0:06:d3:7a:9a:22:22:bb:cb:2a:98:
c3:9d:46:69:f8:cb:41:05:b5:ac:66:8d:c2:8e:05:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:53:A1:AA:52:92:5D:94:9E:EC:75:C8:AE:07:9C:DC:AC:7E:27
X509v3 Authority Key Identifier:
keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/326130363a313238373a3a2f34382d3438203d3e203236303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287::/48
Signature Algorithm: sha256WithRSAEncryption
25:d9:a5:af:d4:62:53:57:1b:0d:69:38:d3:87:3f:af:a1:51:
a2:6e:10:c3:5f:0c:d7:bd:9f:55:e4:cf:e2:39:82:28:b5:59:
93:77:a0:e1:61:11:bf:04:6a:f0:44:38:8e:8e:fd:37:3b:ee:
3d:27:df:4d:bb:a1:1c:b7:4b:c9:22:8c:f1:63:5e:3d:90:d5:
44:e8:19:b4:3d:2d:d5:a8:e6:10:88:07:33:12:df:16:9f:4d:
c8:b0:f0:6c:a8:4e:7a:0c:6d:e7:be:9d:7a:79:9c:82:84:88:
e3:05:99:ca:25:87:1b:36:40:88:cd:b5:15:e2:79:22:c0:32:
3d:0a:69:7a:1f:fa:fc:35:6d:be:6e:a4:c6:07:a9:e8:fa:c8:
24:34:da:c3:1d:de:de:92:dd:cf:24:cc:9e:1a:cf:56:70:14:
03:ce:8a:1e:bf:bd:9e:4c:6a:e0:aa:9b:c4:4c:9e:ba:23:02:
ec:f4:39:7b:03:15:27:a3:83:35:e3:16:a4:ac:18:b4:49:8d:
17:15:e0:5a:4e:6c:9f:f8:9d:0f:7a:a8:87:f0:17:b8:84:2a:
c9:e1:04:24:12:c5:43:c1:49:81:98:e3:2c:a3:57:4d:0b:e2:
5f:51:5c:3d:ee:76:cc:43:b8:af:4e:5f:4f:73:63:58:08:84:
93:c9:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:47 2025 by rpki-client