![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: sJw0FJmTjzYzNyLBWCSsJ1wvYg4u43jSbr3L0yFA9Dw=
Subject key identifier: 81:6C:F2:F7:43:08:06:ED:55:9B:AF:7A:85:04:64:EA:FE:D4:5B:38
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 3F743A58B7F6C21CAFB55A4538926E6388B58A11
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
Signing time: Thu 27 Jun 2024 19:30:27 +0000
ROA not before: Thu 27 Jun 2024 19:25:27 +0000
ROA not after: Thu 26 Jun 2025 19:30:27 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffd1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:74:3a:58:b7:f6:c2:1c:af:b5:5a:45:38:92:6e:63:88:b5:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Jun 27 19:25:27 2024 GMT
Not After : Jun 26 19:30:27 2025 GMT
Subject: CN=816CF2F7430806ED559BAF7A850464EAFED45B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:6e:79:ec:61:f5:58:1e:11:54:0d:7e:5c:
02:aa:66:68:19:58:8c:9d:e9:e0:86:32:78:4e:ba:
8d:41:be:bf:59:b4:b5:ed:d5:e6:ba:70:50:cd:6c:
b8:83:6c:7e:67:9d:48:49:d3:16:15:cb:b9:0a:6f:
9b:4b:31:4e:a0:93:81:95:d8:fe:93:70:9f:d4:5f:
b0:fc:26:36:63:0c:6d:cc:db:45:c8:2e:d3:ba:ae:
c6:e9:e9:c8:dc:a8:52:db:bc:2b:24:d0:bc:c2:45:
f8:89:e1:be:ae:04:20:0b:8b:17:c7:f7:68:32:5f:
7b:cc:27:f0:86:ae:b9:25:0e:4e:23:fa:ab:ff:7c:
3e:31:3c:79:77:78:15:60:9c:e4:d1:76:43:5f:90:
09:00:fe:2d:14:46:eb:82:93:f9:64:c4:66:5c:9b:
b1:b8:2f:fb:06:2a:6a:a3:e2:30:63:c7:9c:08:bb:
f6:71:e2:06:d1:c3:a3:1c:3f:bc:5f:70:22:84:83:
c8:ec:46:1a:a6:6a:58:72:e2:3f:ae:c6:59:c3:0f:
78:76:d4:20:d7:03:cd:12:00:08:75:4d:c2:4d:a6:
21:59:d8:7d:26:34:4b:2f:23:06:c8:3d:16:6f:db:
7d:24:19:75:a5:03:88:1e:9e:d2:b4:a5:a2:21:fb:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:F2:F7:43:08:06:ED:55:9B:AF:7A:85:04:64:EA:FE:D4:5B:38
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd1::/48
Signature Algorithm: sha256WithRSAEncryption
46:d4:63:b4:88:a3:d8:60:be:de:d5:cc:38:9d:58:cf:92:42:
83:f5:50:f9:38:6b:5b:f7:db:23:c1:de:44:c8:81:c3:f5:1b:
e6:f7:25:2b:84:ce:51:5e:4f:50:3b:fe:d2:8c:81:1e:0a:84:
3a:a6:5d:dc:cd:26:d9:57:4c:5b:a6:a5:fe:36:80:f3:96:e7:
96:0f:c7:3c:d1:e7:10:c8:ae:63:fb:b0:d6:39:f1:41:3a:2f:
bb:98:c0:c4:31:f0:9e:5d:13:7e:55:e9:dc:2f:fb:89:15:97:
b7:d6:0e:c8:a8:18:83:51:d2:83:4f:42:b4:57:ea:87:d3:63:
9e:44:6b:d6:eb:6a:a8:3f:67:bc:e3:db:06:63:c9:a9:5e:a6:
16:fe:8c:af:91:64:1d:04:2b:bb:6c:d4:14:c8:41:dd:af:07:
93:8c:2b:a8:ce:65:f9:df:ed:df:ba:34:2a:b2:8b:b8:4c:76:
1c:cd:c8:67:73:c9:37:5c:a1:5f:3b:10:89:35:4c:82:41:9f:
13:4b:e0:63:cd:d2:53:70:18:11:9e:15:67:6f:09:a6:40:15:
2a:af:d4:41:4e:4c:6d:21:7f:16:1f:cd:6a:8d:b5:e0:39:aa:
41:6f:e9:bc:75:b3:55:8e:ee:a0:10:a5:7d:94:f0:c7:be:a4:
94:f6:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:15 2025 by rpki-client