Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633038303a3a2f34342d3434203d3e203438373030.roa
File: 326130363a313238333a633038303a3a2f34342d3434203d3e203438373030.roa (raw, json)
Hash identifier: DX8CjdRH3ZlmmPxZlftAPHR+EdLHKLFTJxSBHNf+Hhw=
Subject key identifier: 87:13:94:0D:3F:79:BD:B0:7C:40:D6:0B:89:6E:55:30:E5:54:E4:D3
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 57D6D08F6D8AAF1089A3BDF6B36F889458BC6847
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633038303a3a2f34342d3434203d3e203438373030.roa
Signing time: Sat 18 Nov 2023 21:47:30 +0000
ROA not before: Sat 18 Nov 2023 21:42:30 +0000
ROA not after: Sat 16 Nov 2024 21:47:30 +0000
asID: 48700
IP address blocks: 2a06:1283:c080::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d6:d0:8f:6d:8a:af:10:89:a3:bd:f6:b3:6f:88:94:58:bc:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Nov 18 21:42:30 2023 GMT
Not After : Nov 16 21:47:30 2024 GMT
Subject: CN=8713940D3F79BDB07C40D60B896E5530E554E4D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:63:d1:3f:b1:d5:98:de:54:12:89:44:10:
06:72:7a:41:33:e2:e0:27:4d:23:4b:83:b3:29:99:
3f:27:fc:51:cc:20:ed:45:8f:3d:e1:cf:0c:a0:38:
f7:bc:f1:70:3e:c9:4e:ed:8f:68:f0:61:8a:cc:b9:
97:0f:06:b6:8f:f7:26:12:39:ab:8b:4a:32:47:3f:
79:b6:13:7c:ce:39:cf:2b:86:a0:b1:73:48:22:93:
05:c1:92:01:0d:2c:a2:b8:ce:ef:16:a8:6a:8f:17:
87:4d:c0:7d:d5:e2:91:4b:f5:29:ba:01:58:fa:88:
19:a9:f5:cc:d9:75:0e:11:1e:61:36:9d:0d:fa:51:
56:dd:4e:92:83:27:93:ac:c2:d1:65:dd:87:d3:94:
e4:79:00:18:af:a4:72:9a:b3:24:39:56:73:d6:fe:
12:26:6d:e4:c0:2e:30:74:36:61:55:22:8b:eb:85:
9c:15:0b:61:f6:95:45:a2:ca:38:ad:9d:4f:21:35:
cc:6f:ec:16:45:74:aa:3a:5b:fd:e1:69:c9:a8:9a:
b4:14:8b:85:97:d5:77:d0:14:8b:8f:9e:fd:ee:37:
c0:86:bb:a0:d8:56:4e:0f:1b:9c:45:b4:54:b2:39:
26:f2:4c:ec:28:d3:82:25:bd:ef:0c:18:a9:70:f0:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:94:0D:3F:79:BD:B0:7C:40:D6:0B:89:6E:55:30:E5:54:E4:D3
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633038303a3a2f34342d3434203d3e203438373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c080::/44
Signature Algorithm: sha256WithRSAEncryption
78:99:66:fc:49:4e:2d:1d:9b:8a:48:e2:a6:87:68:d6:c3:0c:
36:05:e1:83:06:01:63:8b:51:7a:f6:47:3e:d6:4d:bf:6d:97:
5d:75:90:b6:42:88:67:81:a5:60:b4:7e:e4:2a:db:fa:07:54:
f4:e3:09:1d:7c:a2:c3:92:51:e8:43:f5:83:e0:0f:e3:fe:95:
72:85:e8:cc:be:a4:80:2f:77:56:ee:ea:9b:37:34:a4:3e:9a:
11:39:2d:58:1b:57:7f:b5:08:7b:6d:f6:a7:40:4d:cb:47:7d:
bc:ae:2d:a6:d3:76:20:ac:e0:a7:6b:7a:41:61:05:9e:6e:ad:
12:6d:05:6c:56:32:d8:d9:dc:e8:04:a3:4f:8a:d5:33:13:99:
15:77:d8:0e:e9:92:55:fd:1b:fd:01:27:db:e1:50:72:e6:e4:
f0:a0:06:45:8c:45:d3:cc:09:b4:ec:67:d0:ff:c2:e2:7b:e7:
d7:9f:a0:c9:3e:5d:f0:bf:40:44:41:4f:aa:63:b2:d6:b0:6e:
77:fe:83:2f:c6:68:aa:0e:b5:b3:e7:f5:3e:3a:be:62:75:d6:
5d:87:b6:db:97:48:81:8d:41:ec:d2:32:5d:24:4a:c5:0f:10:
f8:44:c7:9b:39:17:3e:a0:6f:cc:ff:a7:00:e5:9f:52:20:5f:
fb:d7:7d:d1
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUV9bQj22KrxCJo732s2+IlFi8aEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yMzExMTgyMTQyMzBaFw0yNDExMTYyMTQ3MzBaMDMxMTAvBgNV
BAMTKDg3MTM5NDBEM0Y3OUJEQjA3QzQwRDYwQjg5NkU1NTMwRTU1NEU0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiJ2PRP7HVmN5UEolEEAZyekEz
4uAnTSNLg7MpmT8n/FHMIO1Fjz3hzwygOPe88XA+yU7tj2jwYYrMuZcPBraP9yYS
OauLSjJHP3m2E3zOOc8rhqCxc0gikwXBkgENLKK4zu8WqGqPF4dNwH3V4pFL9Sm6
AVj6iBmp9czZdQ4RHmE2nQ36UVbdTpKDJ5OswtFl3YfTlOR5ABivpHKasyQ5VnPW
/hImbeTALjB0NmFVIovrhZwVC2H2lUWiyjitnU8hNcxv7BZFdKo6W/3hacmomrQU
i4WX1XfQFIuPnv3uN8CGu6DYVk4PG5xFtFSyOSbyTOwo04Ilve8MGKlw8Am9AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUhxOUDT95vbB8QNYLiW5VMOVU5NMwHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MzMwMzgzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM0MzgzNzMwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqBhKDwIAwDQYJKoZIhvcNAQELBQADggEBAHiZZvxJTi0dm4pI4qaH
aNbDDDYF4YMGAWOLUXr2Rz7WTb9tl111kLZCiGeBpWC0fuQq2/oHVPTjCR18osOS
UehD9YPgD+P+lXKF6My+pIAvd1bu6ps3NKQ+mhE5LVgbV3+1CHtt9qdATctHfbyu
LabTdiCs4KdrekFhBZ5urRJtBWxWMtjZ3OgEo0+K1TMTmRV32A7pklX9G/0BJ9vh
UHLm5PCgBkWMRdPMCbTsZ9D/wuJ759efoMk+XfC/QERBT6pjstawbnf+gy/GaKoO
tbPn9T46vmJ11l2HttuXSIGNQezSMl0kSsUPEPhEx5s5Fz6gb8z/pwDln1IgX/vX
fdE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:08 2025 by rpki-client