Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa
File: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (raw, json)
Hash identifier: RRkb0bnNKnbeFbaERnfQOBi5pO2OGjCSeplsy38bpxQ=
Subject key identifier: F7:78:82:A6:D1:EB:76:0E:CF:24:E3:C0:76:1A:C4:62:0E:33:75:A2
Certificate issuer: /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial: 352A0FED56FC46F84AA1A2816FE203657FCBECA4
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa
Signing time: Fri 29 Aug 2025 08:54:10 +0000
ROA not before: Fri 29 Aug 2025 08:49:10 +0000
ROA not after: Fri 28 Aug 2026 08:54:10 +0000
asID: 214534
IP address blocks: 2a14:7580:7e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2a:0f:ed:56:fc:46:f8:4a:a1:a2:81:6f:e2:03:65:7f:cb:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Validity
Not Before: Aug 29 08:49:10 2025 GMT
Not After : Aug 28 08:54:10 2026 GMT
Subject: CN=F77882A6D1EB760ECF24E3C0761AC4620E3375A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:85:84:4a:58:63:7a:d5:2d:bf:2d:6d:2e:
76:7b:77:6d:1e:b4:7c:d2:96:f6:c6:93:5a:fa:c1:
2c:bb:09:ba:fa:ce:7b:ba:b1:40:a5:c6:6f:31:c4:
71:58:eb:32:c5:f4:96:bb:8a:51:f5:b7:81:1a:78:
86:0c:47:a4:fa:11:fc:e6:01:b1:fe:58:e2:89:b4:
a5:aa:1b:05:ab:94:36:8f:43:7e:9a:e1:45:e2:d9:
45:d7:bb:77:f9:66:3c:26:b4:11:f1:f4:47:b0:49:
5d:81:c3:a1:5f:c4:e3:09:ef:d4:dd:83:7f:5c:66:
a4:9b:99:4e:35:f8:3c:23:9f:16:05:d0:79:fb:6a:
12:39:50:17:98:46:3b:6a:2a:e2:4e:14:60:ad:17:
b9:29:f1:6a:29:c1:d8:24:1e:ff:bf:c1:55:30:bc:
39:99:96:2b:34:13:d3:47:34:9a:33:43:e7:68:77:
eb:13:86:42:a4:ac:65:db:92:13:13:e8:3d:41:51:
f0:6f:a0:1b:de:e0:ad:ed:b8:fb:65:5a:d0:6f:8c:
38:4d:41:9f:b4:a3:fb:e8:1d:95:60:07:27:67:56:
5e:19:ae:1f:58:ff:36:a7:ac:33:c1:3c:31:50:33:
29:a2:94:74:21:cb:d1:b9:39:cf:9a:ac:53:e6:ae:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:82:A6:D1:EB:76:0E:CF:24:E3:C0:76:1A:C4:62:0E:33:75:A2
X509v3 Authority Key Identifier:
keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7e0::/48
Signature Algorithm: sha256WithRSAEncryption
96:a5:65:11:c0:4a:9f:a4:23:db:9a:3d:08:02:3c:d7:4e:4a:
87:3b:e4:18:fc:2e:69:21:8a:7d:4f:e0:94:05:a3:fa:47:30:
65:55:9c:5d:a6:7f:12:95:df:02:a0:c2:72:07:f7:09:3c:d4:
ba:76:40:20:f8:1a:ca:a8:ac:8e:9d:27:fa:10:87:6f:2b:5d:
a4:2e:0c:50:4f:23:68:4e:5b:ec:19:1a:8c:1c:de:73:56:66:
ff:e9:8c:61:c9:f4:9d:c6:ed:b0:1a:7a:af:0b:25:8d:ef:a4:
11:46:46:ec:c7:9a:1d:d8:43:ac:79:32:c9:bc:e2:c7:8e:12:
ca:e5:0e:87:dd:66:bb:f6:a9:0c:ad:fd:88:46:d5:5f:5b:eb:
20:a5:b7:fe:1d:96:48:6a:fe:05:89:9a:e9:27:23:e0:5e:70:
fb:28:5b:5c:3b:4b:37:0c:86:cf:6c:d3:cd:09:8c:df:a4:05:
03:7a:e8:69:6b:b7:8b:8f:35:1a:32:b0:98:ce:ef:54:5a:5c:
e7:9e:bc:f1:f5:b9:c0:e6:a9:32:05:96:61:ea:c3:04:95:7d:
e6:a6:f2:54:dc:a7:14:10:70:47:65:db:c7:98:95:c8:ef:34:
2c:7c:cd:7a:bd:bb:30:d6:f8:d4:c0:c2:19:29:97:4d:4e:8f:
64:6f:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:44:32 2025 by rpki-client