Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa
File: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (raw, json)
Hash identifier: eIcNuMQVK00NVTttAcCUkEiDTJRni4+mtCPYV/BBYmk=
Subject key identifier: 50:28:91:EA:80:08:F7:15:09:13:B6:47:01:1F:A1:E7:59:EF:F2:62
Certificate issuer: /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial: 5884B2A293102F070B848CEEBD948498C731C43E
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa
Signing time: Fri 29 Aug 2025 08:52:48 +0000
ROA not before: Fri 29 Aug 2025 08:47:48 +0000
ROA not after: Fri 28 Aug 2026 08:52:48 +0000
asID: 211575
IP address blocks: 2a14:7580:7e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:84:b2:a2:93:10:2f:07:0b:84:8c:ee:bd:94:84:98:c7:31:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Validity
Not Before: Aug 29 08:47:48 2025 GMT
Not After : Aug 28 08:52:48 2026 GMT
Subject: CN=502891EA8008F7150913B647011FA1E759EFF262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:3a:3c:f4:c3:9b:60:8d:31:02:ac:b2:82:
5a:87:e1:7f:c2:7b:f1:d2:09:64:3e:71:a5:40:8b:
e5:b3:a6:34:fb:02:7b:ce:ce:dc:35:41:92:ed:14:
5f:bb:c9:21:4c:6e:32:62:54:92:a8:2d:47:8e:f1:
11:c3:7d:75:d6:8c:cf:7d:db:b1:4d:28:f7:df:af:
42:0b:b1:0e:48:27:86:08:64:59:22:6d:75:68:4c:
de:a4:03:85:f1:a2:4d:cd:b6:bc:7b:36:db:44:27:
63:99:39:75:7c:40:98:d6:97:ae:8f:8c:67:a8:45:
df:60:16:12:97:b6:06:3f:33:cc:f5:08:e8:35:f7:
16:36:35:5c:ee:25:8b:7f:bb:cc:5a:09:4a:27:ed:
5b:94:a7:1a:d1:ea:96:38:d9:7f:c0:4a:fb:8b:b6:
60:46:3c:02:88:a1:92:06:9e:47:47:4d:f5:2d:43:
9a:4d:7a:ee:b7:1f:20:69:1d:51:a7:2c:1c:16:e5:
24:c9:27:da:4e:6e:1f:c9:ed:1e:de:c0:71:c2:bb:
ba:a1:e4:8a:00:0e:a2:33:89:43:1a:ce:76:ec:19:
47:61:a7:11:99:e2:bf:73:07:9b:aa:45:25:89:e9:
5f:6b:7f:9a:c9:7b:09:cc:b0:4f:48:b5:46:26:04:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:91:EA:80:08:F7:15:09:13:B6:47:01:1F:A1:E7:59:EF:F2:62
X509v3 Authority Key Identifier:
keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7e0::/44
Signature Algorithm: sha256WithRSAEncryption
23:8a:8f:1f:e8:69:d3:bf:27:05:80:2a:15:af:33:5e:66:fb:
3e:d7:e3:62:37:cb:15:c1:b7:ac:28:f0:8b:8c:a4:45:1f:70:
f5:3a:2a:ae:7e:e8:dc:75:30:e1:6e:2a:80:3f:88:04:be:9e:
fa:08:d4:1e:7d:87:35:80:41:bc:1b:db:8c:be:fd:32:f8:13:
b5:0a:25:b8:20:d8:a7:14:88:78:3e:b8:cd:70:77:07:5a:3b:
67:15:e5:20:68:bb:81:98:a7:cf:9d:c4:93:7b:0e:1e:06:2b:
18:d9:8c:b7:97:91:9c:2d:8a:e6:25:52:8a:7a:1a:d1:99:ce:
12:ec:5a:f5:48:95:78:3f:c8:95:67:5f:70:eb:19:10:8e:22:
75:c0:fa:7d:07:a5:cb:a8:81:96:c5:13:14:d0:53:67:eb:44:
24:c3:65:5a:af:77:57:f1:f6:36:01:9e:17:39:04:c1:c5:43:
f2:34:c6:f5:6f:17:62:2e:21:1a:96:cb:50:7b:e4:cc:aa:fd:
7f:80:c9:90:83:02:38:d1:c1:13:a8:66:1a:4a:b2:da:62:0d:
f7:65:f9:3b:fb:44:b5:11:4e:1c:c6:05:f0:91:41:75:5e:ec:
60:5b:af:d7:e9:3e:4e:79:43:5e:49:34:08:c3:1b:6d:05:62:
4e:c6:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:44:34 2025 by rpki-client