Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861613a3a2f34382d3438203d3e20323135313437.roa
File: 326130393a353463333a663861613a3a2f34382d3438203d3e20323135313437.roa (raw, json)
Hash identifier: wmpNhCNx2wSiPER4bf1JgH0Dn5XjacxCi7eweWIuNBM=
Subject key identifier: CC:28:BF:C3:1F:34:08:4C:FA:BA:10:D3:14:4D:2E:8C:D1:EC:3A:DB
Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial: 5DEEF2A596C38A47E94DF1127C216061F110FF0E
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861613a3a2f34382d3438203d3e20323135313437.roa
Signing time: Tue 14 Jul 2026 17:04:02 +0000
ROA not before: Tue 14 Jul 2026 16:59:02 +0000
ROA not after: Tue 13 Jul 2027 17:04:02 +0000
asID: 215147
IP address blocks: 2a09:54c3:f8aa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ee:f2:a5:96:c3:8a:47:e9:4d:f1:12:7c:21:60:61:f1:10:ff:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912092CFA11F378852F52266C793AB678233205
Validity
Not Before: Jul 14 16:59:02 2026 GMT
Not After : Jul 13 17:04:02 2027 GMT
Subject: CN=CC28BFC31F34084CFABA10D3144D2E8CD1EC3ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:04:53:21:a1:f1:bb:1c:6d:d4:1b:88:3d:
00:11:e9:58:cb:6a:81:a4:81:90:73:6a:1e:ea:68:
6b:c8:0b:3d:75:ce:84:fb:f7:f7:53:2b:c1:30:ae:
7f:a9:74:c5:dd:79:92:c0:41:32:50:25:37:de:d3:
ea:f5:d9:94:81:5f:cb:7d:e2:ae:c8:e7:9c:de:2d:
44:2e:3b:77:b2:fe:3a:a7:ce:7e:92:0b:9e:e7:55:
a0:87:8d:ba:bc:f5:9f:18:cd:14:ba:04:0a:9d:1e:
ee:59:10:2c:0b:80:cf:7d:2f:74:01:54:7b:e6:ef:
35:23:f1:57:81:d0:d4:2a:88:2d:db:f1:89:63:f8:
2c:5f:65:f1:73:67:c2:07:b8:d1:b6:94:51:70:fe:
25:ff:12:73:f7:db:a3:4e:96:76:da:1f:e2:9c:a7:
95:5c:b8:6e:a4:19:24:ba:2e:b2:32:7f:cb:92:41:
d7:b5:b1:cc:c0:e9:98:2c:5f:06:0e:91:da:a1:35:
7a:7c:32:f8:07:c1:a9:a2:2e:86:a3:40:66:f7:9a:
38:fa:9e:23:af:b3:7e:86:c1:78:33:a2:1f:92:9a:
36:29:23:af:09:a8:47:ca:1a:9c:ed:53:a5:bc:be:
5d:1b:91:52:ec:33:90:46:fc:d9:0e:99:95:31:27:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:28:BF:C3:1F:34:08:4C:FA:BA:10:D3:14:4D:2E:8C:D1:EC:3A:DB
X509v3 Authority Key Identifier:
keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861613a3a2f34382d3438203d3e20323135313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c3:f8aa::/48
Signature Algorithm: sha256WithRSAEncryption
56:35:55:6a:f9:d6:64:f8:8f:1b:ef:32:34:85:a0:37:58:a9:
0b:1d:f1:eb:37:ec:6d:a7:ee:9c:0e:22:23:cc:84:32:e4:53:
1c:86:b1:bb:16:21:3e:dc:e8:29:69:58:34:49:f4:57:e2:3f:
ff:93:03:55:71:4d:ee:49:6d:c9:a9:b6:fd:86:86:30:e7:8a:
e0:6a:12:9f:01:7d:00:da:4c:71:f1:c3:66:e6:37:60:35:1c:
35:1c:27:5e:c3:23:9a:d3:d1:0c:a0:1c:a0:f1:ae:0b:3f:40:
a1:1f:09:da:e7:3f:ec:4c:7a:22:42:47:6a:aa:95:54:f9:22:
56:39:ae:c1:69:88:d2:b9:4c:13:7c:db:d5:1c:c9:95:41:22:
9a:b8:50:53:e1:f7:57:37:a1:67:6e:9a:08:de:80:6e:7f:cf:
7b:1a:ba:b7:8c:ce:41:de:91:1b:9b:be:88:86:07:e7:99:40:
bb:fb:b9:0c:11:99:0c:cd:dd:69:6a:c6:fd:56:e1:de:8d:9f:
f3:64:6c:5b:3f:38:bc:2e:20:c3:48:be:e0:54:2f:cb:af:6a:
70:22:f5:41:73:97:6c:a2:0f:06:57:12:ae:09:8f:14:29:5c:
ed:75:a1:58:6a:8e:fe:81:48:00:0d:33:6d:2b:6f:9b:6a:de:
18:6e:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:05 2026 by rpki-client