Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326130363a313238333a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: UiZJu3CKT5bSWjK9szpiDiHrPt+eiuE4xNxiacsszyY=
Subject key identifier: DA:89:58:4F:3B:3B:E2:F4:D4:AC:6E:5C:4A:A3:77:69:DD:0F:96:4A
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 4F2EF954EB041108BEBFA3B3F3877C61541B01D6
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Sun 12 Nov 2023 20:48:39 +0000
ROA not before: Sun 12 Nov 2023 20:43:39 +0000
ROA not after: Sun 10 Nov 2024 20:48:39 +0000
asID: 212149
IP address blocks: 2a06:1283:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2e:f9:54:eb:04:11:08:be:bf:a3:b3:f3:87:7c:61:54:1b:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 12 20:43:39 2023 GMT
Not After : Nov 10 20:48:39 2024 GMT
Subject: CN=DA89584F3B3BE2F4D4AC6E5C4AA37769DD0F964A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:32:b8:a5:47:4e:4b:be:03:1b:5a:f0:42:
4d:d1:1e:7a:53:02:f5:e6:54:41:4f:60:ba:2b:88:
f5:f3:a7:f6:5b:50:31:d0:c2:57:cf:23:18:b9:55:
36:81:98:34:9c:ca:c4:28:cf:c1:5a:b8:90:fc:e3:
4e:ce:21:59:2b:3f:56:16:eb:3a:02:56:67:f5:77:
08:20:2b:9b:f7:26:78:53:9f:89:a8:b7:fa:cb:4a:
06:c5:1d:21:48:05:fc:c0:fd:92:23:87:52:00:e4:
31:68:e5:f7:10:58:4a:51:a4:d2:f2:75:85:9e:2b:
27:02:af:55:27:42:e0:f5:81:f1:a5:87:32:a6:fd:
25:35:c9:a3:83:c4:bb:c3:df:3e:42:d3:a7:5f:4f:
cf:bc:bf:7d:13:e1:d0:35:1f:c1:ee:b4:2e:14:c4:
db:47:b2:47:68:c4:32:b3:28:46:49:e4:e5:03:13:
91:97:0c:2f:2a:ca:2b:e5:a6:b5:d6:70:79:f2:eb:
77:24:a0:b6:30:31:53:d5:c3:1e:27:21:5c:1f:02:
53:96:88:1e:64:e5:6e:68:ef:1f:2b:cd:91:04:c8:
be:a2:a0:6c:89:8d:86:20:9e:66:97:5f:4f:e7:23:
56:65:f2:73:85:6a:6a:10:b0:44:6d:7e:f2:c5:4f:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:58:4F:3B:3B:E2:F4:D4:AC:6E:5C:4A:A3:77:69:DD:0F:96:4A
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
23:b8:61:41:90:da:56:b4:79:05:cf:28:dc:5b:05:49:68:6a:
97:22:29:26:cb:4b:3a:b2:82:ea:8f:3c:2b:27:5b:50:1c:dd:
b4:43:5b:e4:70:29:ba:05:65:4a:34:e7:63:f3:52:57:ed:fc:
09:83:62:d4:c4:69:28:f6:d2:e4:69:e2:76:8f:2c:1c:57:3c:
53:7d:2a:bb:94:fb:b5:a7:84:53:ba:1f:3d:8b:15:cc:cc:02:
a4:d7:24:db:5a:7e:39:bc:78:a2:70:e2:68:3b:51:17:e8:1a:
3a:25:39:4c:2b:5e:4d:b3:c0:01:5f:03:4f:83:15:24:73:33:
72:97:79:d9:9b:11:b9:3a:3a:4c:61:90:a8:12:87:d9:18:c4:
f3:88:f9:2f:fd:5c:5f:85:fe:75:89:39:93:50:07:a7:6b:23:
07:bf:65:1f:0e:03:a8:c4:df:f7:28:ab:d9:4f:83:4a:f1:3e:
c7:b1:5f:68:0c:e2:3b:61:13:1e:6a:50:f4:0b:b5:29:31:f1:
00:b4:29:1a:e7:89:64:b8:7c:21:c6:cf:7c:c7:ad:87:ff:90:
9c:47:c7:07:34:9e:98:8a:5c:55:ee:85:77:e5:50:b0:13:10:
db:e7:bd:77:38:52:f1:44:eb:ba:3c:e2:d8:f2:d9:ec:8e:21:
da:e3:ca:41
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUTy75VOsEEQi+v6Oz84d8YVQbAdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yMzExMTIyMDQzMzlaFw0yNDExMTAyMDQ4MzlaMDMxMTAvBgNV
BAMTKERBODk1ODRGM0IzQkUyRjRENEFDNkU1QzRBQTM3NzY5REQwRjk2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkDK4pUdOS74DG1rwQk3RHnpT
AvXmVEFPYLoriPXzp/ZbUDHQwlfPIxi5VTaBmDScysQoz8FauJD8407OIVkrP1YW
6zoCVmf1dwggK5v3JnhTn4mot/rLSgbFHSFIBfzA/ZIjh1IA5DFo5fcQWEpRpNLy
dYWeKycCr1UnQuD1gfGlhzKm/SU1yaODxLvD3z5C06dfT8+8v30T4dA1H8HutC4U
xNtHskdoxDKzKEZJ5OUDE5GXDC8qyivlprXWcHny63ckoLYwMVPVwx4nIVwfAlOW
iB5k5W5o7x8rzZEEyL6ioGyJjYYgnmaXX0/nI1Zl8nOFamoQsERtfvLFT3exAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQU2olYTzs74vTUrG5cSqN3ad0PlkowHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMxMzQzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGEoOwCzANBgkqhkiG9w0BAQsFAAOCAQEAI7hhQZDaVrR5Bc8o
3FsFSWhqlyIpJstLOrKC6o88KydbUBzdtENb5HApugVlSjTnY/NSV+38CYNi1MRp
KPbS5Gnido8sHFc8U30qu5T7taeEU7ofPYsVzMwCpNck21p+Obx4onDiaDtRF+ga
OiU5TCteTbPAAV8DT4MVJHMzcpd52ZsRuTo6TGGQqBKH2RjE84j5L/1cX4X+dYk5
k1AHp2sjB79lHw4DqMTf9yir2U+DSvE+x7FfaAziO2ETHmpQ9Au1KTHxALQpGueJ
ZLh8IcbPfMeth/+QnEfHBzSemIpcVe6Fd+VQsBMQ2+e9dzhS8UTrujzi2PLZ7I4h
2uPKQQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:46 2025 by rpki-client