Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a3a2f33322d3438203d3e20323135313437.roa
File: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (raw, json)
Hash identifier: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=
Subject key identifier: DF:99:EB:37:DB:D0:9A:25:19:16:1D:E0:95:09:44:F4:85:8A:56:AB
Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Certificate serial: 58D5D56A826017A31F1AFC6E3914A42961D3A23A
Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a3a2f33322d3438203d3e20323135313437.roa
Signing time: Sat 15 Feb 2025 19:43:50 +0000
ROA not before: Sat 15 Feb 2025 19:38:50 +0000
ROA not after: Sat 14 Feb 2026 19:43:50 +0000
asID: 215147
IP address blocks: 2a09:54c3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d5:d5:6a:82:60:17:a3:1f:1a:fc:6e:39:14:a4:29:61:d3:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4
Validity
Not Before: Feb 15 19:38:50 2025 GMT
Not After : Feb 14 19:43:50 2026 GMT
Subject: CN=DF99EB37DBD09A2519161DE0950944F4858A56AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:fd:87:f0:f6:b4:be:3c:42:60:df:4e:65:
6f:c0:b4:dc:5c:a4:34:8c:ef:55:8c:f6:e7:ef:21:
9b:c7:4f:9a:87:91:95:71:f0:02:eb:bb:81:cf:36:
fa:a1:77:a3:11:e7:71:a4:1a:2e:c2:a9:15:3a:b8:
aa:4f:c3:14:da:76:f2:cc:c6:a4:a7:12:86:cc:a7:
9e:ff:a0:7a:d8:03:d6:c0:ae:15:bb:b0:85:18:94:
4d:e3:e3:09:19:09:6f:c8:3b:3c:79:4f:c9:7b:34:
e4:95:1d:5d:14:c9:05:2f:25:3a:0d:26:a6:f2:22:
e7:58:ec:83:c3:33:1f:8b:4a:e5:b5:03:ff:ad:0a:
69:d2:16:83:83:6e:d5:8d:9d:82:81:5b:dc:3d:25:
4d:dd:b2:56:20:da:8f:dc:cd:cc:71:22:1e:69:c9:
ec:05:00:5e:2a:92:67:37:c1:52:51:68:29:b8:3e:
7f:c4:8c:a4:3b:e9:17:52:c5:c2:ee:fe:a2:40:ac:
d7:c9:e1:9e:82:63:8d:5a:6c:b6:27:07:f1:7e:20:
09:ed:fe:cd:d3:ce:54:9d:73:95:0b:1e:9a:a4:3a:
39:d4:92:7a:f4:7c:24:7d:83:1a:79:e2:ce:83:42:
ae:0b:fc:93:2c:d6:38:c5:c5:4d:8e:be:cc:c2:ed:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:EB:37:DB:D0:9A:25:19:16:1D:E0:95:09:44:F4:85:8A:56:AB
X509v3 Authority Key Identifier:
keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/326130393a353463333a3a2f33322d3438203d3e20323135313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c3::/32
Signature Algorithm: sha256WithRSAEncryption
30:10:f4:7f:0b:d5:31:7d:cb:2e:c0:21:a2:99:85:5f:ed:a4:
dc:66:40:78:08:7d:c5:f9:30:32:11:d1:9d:02:6f:32:a7:14:
2d:22:c0:34:f5:48:96:66:d0:78:c0:85:cf:59:16:80:9c:3a:
25:3a:b9:d2:f1:64:f1:f3:aa:1b:99:25:72:68:91:f0:5b:50:
1c:bf:47:ab:3b:76:6a:de:6c:f0:a5:05:92:35:e4:d2:74:fb:
f8:2d:c4:53:14:59:05:da:35:56:08:c6:cc:3f:3f:4b:a6:e1:
9a:40:bd:5e:68:e6:f5:81:61:c8:58:9b:e8:a9:00:2a:c9:5f:
df:83:93:71:c0:c6:6a:b7:6f:64:d0:84:3b:57:6b:13:55:06:
92:ac:85:72:e3:ec:77:f0:49:52:e4:96:51:7a:4a:a5:d9:3b:
a7:5a:eb:a3:84:9b:37:03:4a:96:27:b2:75:44:9c:48:52:05:
0b:c4:aa:8f:c9:ea:94:83:70:77:97:43:93:28:cd:5c:28:e5:
2b:d7:ed:c5:d0:3c:56:33:61:37:01:eb:1e:22:4d:af:fb:30:
f3:25:d0:10:a6:d7:db:00:10:55:9d:cb:6b:9c:10:ec:d9:45:
7a:81:d8:50:3c:54:d9:62:88:68:79:23:68:34:a7:65:96:c8:
6c:c6:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:14:12 2025 by rpki-client