Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a313030303a3a2f33362d3336203d3e20323135313437.roa
File: 326130393a353463333a313030303a3a2f33362d3336203d3e20323135313437.roa (raw, json)
Hash identifier: xoWGfHWoP5Vh5WLGXe0FnSc0ppzS2QrH7fH4V+OZ/vw=
Subject key identifier: 99:22:AB:10:91:DE:06:FD:59:1C:AE:4E:E2:81:BF:FF:4B:A2:A5:3A
Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial: 139C962685683E0C03616ABBA685CA75341EBEE8
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a313030303a3a2f33362d3336203d3e20323135313437.roa
Signing time: Tue 14 Jul 2026 17:06:03 +0000
ROA not before: Tue 14 Jul 2026 17:01:03 +0000
ROA not after: Tue 13 Jul 2027 17:06:03 +0000
asID: 215147
IP address blocks: 2a09:54c3:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9c:96:26:85:68:3e:0c:03:61:6a:bb:a6:85:ca:75:34:1e:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912092CFA11F378852F52266C793AB678233205
Validity
Not Before: Jul 14 17:01:03 2026 GMT
Not After : Jul 13 17:06:03 2027 GMT
Subject: CN=9922AB1091DE06FD591CAE4EE281BFFF4BA2A53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:e9:ca:6a:f6:38:4b:f4:30:5b:eb:95:29:
60:fc:57:5c:75:f0:13:e4:ab:62:6d:73:8e:24:6c:
ff:61:ca:d4:6e:33:12:ad:35:95:80:e4:38:69:cc:
bd:38:ea:ac:97:45:a1:93:8b:57:33:27:99:b0:3f:
05:e7:44:6b:89:6c:f1:4c:c9:ea:ac:85:8f:12:e3:
e9:42:87:b5:5f:35:06:61:ee:1b:81:95:4e:bf:3b:
00:dd:d6:d3:b9:54:4e:73:b1:b5:a5:0c:08:a9:3a:
12:1e:fc:c8:01:eb:9e:74:48:eb:bd:21:c5:71:29:
1e:c3:ad:99:0d:30:cc:f3:1e:6c:bc:e7:20:6a:fc:
9d:ff:6c:0e:b9:4e:e5:ca:92:bb:e9:8c:d1:e3:1b:
52:f1:f2:8b:b1:3a:4f:3d:e0:e7:a0:54:63:9f:14:
82:9e:a9:d1:21:0d:5f:a6:18:b0:1e:83:f4:e5:c8:
c6:2b:26:1a:66:62:c2:46:c2:47:27:da:d5:3f:6e:
a1:34:3c:0c:39:79:c5:de:02:b9:99:07:8a:17:a5:
8f:60:fb:e3:b1:4b:07:c4:72:87:3a:e3:6e:c5:f9:
7a:06:1a:df:ba:4e:bb:a5:92:3a:51:ed:c0:93:a4:
cf:88:ff:2d:f5:f5:48:ea:fa:92:9c:25:00:a1:de:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:AB:10:91:DE:06:FD:59:1C:AE:4E:E2:81:BF:FF:4B:A2:A5:3A
X509v3 Authority Key Identifier:
keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a313030303a3a2f33362d3336203d3e20323135313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
51:70:e6:d0:1c:8d:a3:db:81:d2:ba:8c:e0:cc:14:61:1b:25:
3a:8f:7b:48:fe:d9:74:8a:37:86:d0:2a:7a:68:c8:75:28:89:
06:2c:a8:e8:81:3a:19:c2:b7:d6:3a:21:1b:c6:68:7e:4f:97:
4d:59:39:0f:5b:d4:fc:3c:49:8f:bc:ce:a8:81:9a:d4:5e:fb:
95:af:e6:4e:c3:db:11:de:bb:08:63:b2:e1:17:72:ec:78:ba:
38:e9:3f:26:0b:82:e1:4a:fe:28:8a:aa:8f:ea:a7:9d:58:ee:
7c:c2:91:df:9c:8b:34:59:53:e2:40:dc:1c:95:67:e9:f0:7c:
ef:34:c3:22:17:1b:97:21:18:1c:86:3c:00:bd:6f:86:b7:aa:
15:2d:70:e6:11:8a:ed:01:2a:b9:f1:2a:14:ec:cd:a5:97:c3:
6b:a0:ab:de:0b:f2:8c:5e:0c:50:dd:b2:e1:bd:83:8e:a5:07:
7c:3c:29:f0:28:b1:81:5a:bb:1f:18:04:3c:3c:c2:29:c0:8a:
8c:45:35:98:64:8c:e9:dc:57:f9:e3:ac:80:59:20:60:6e:64:
a2:0d:d0:58:b3:2f:a1:95:e3:f3:b4:de:39:f4:62:b0:e7:60:
d8:45:54:3e:87:8d:95:f5:87:99:fa:cf:a7:f2:1a:c5:14:ea:
17:82:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:04 2026 by rpki-client