Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
File: 326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier: a/78n91+DY7jAyd+Ajw1PEOkFA3mBhqcmL02KyOP9qE=
Subject key identifier: 2B:59:F5:2F:A6:1A:54:38:05:28:8C:BB:00:0B:34:CA:77:2D:51:2B
Certificate issuer: /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial: 202FF24D3FD13D4DFA48838A67E49D927077D227
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
Signing time: Sun 25 May 2025 06:46:19 +0000
ROA not before: Sun 25 May 2025 06:41:19 +0000
ROA not after: Sun 24 May 2026 06:46:19 +0000
asID: 199763
IP address blocks: 2a0a:6044:bc66::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2f:f2:4d:3f:d1:3d:4d:fa:48:83:8a:67:e4:9d:92:70:77:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Validity
Not Before: May 25 06:41:19 2025 GMT
Not After : May 24 06:46:19 2026 GMT
Subject: CN=2B59F52FA61A543805288CBB000B34CA772D512B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:08:ad:54:f2:4a:9f:f1:14:8b:8b:16:54:
ff:89:c6:a3:ae:86:79:4a:19:e9:db:4c:72:6a:d5:
42:8b:51:97:60:6e:89:21:19:bc:fa:7d:c0:45:f6:
c5:46:fb:b8:cf:9d:99:55:12:5c:89:f7:ba:1c:71:
da:b3:7f:e1:0f:3e:d8:4f:ea:71:15:60:17:23:61:
dd:d9:ef:8f:b4:e4:25:0f:ba:f2:c7:ed:ec:87:38:
c7:66:48:55:ae:bb:f7:94:a1:17:13:d0:e5:64:2c:
13:50:12:94:64:4c:5a:70:c8:e0:78:7d:02:3b:cd:
79:f3:84:46:82:91:39:d0:65:c8:dd:ae:0b:cf:f7:
54:da:3d:e3:a8:98:b8:7e:86:ff:68:13:d3:07:13:
66:02:6e:5e:b0:5b:3d:c6:e9:97:b2:66:61:54:42:
66:fb:9b:dd:db:aa:ed:3b:b8:fe:e3:12:a7:03:8b:
be:f9:87:ec:09:8a:b3:96:6e:7f:4d:4f:30:b5:6e:
51:8c:b0:7f:19:37:74:36:dd:d5:f6:0f:6d:a9:8e:
f8:60:cd:8a:13:f6:2a:7a:58:2c:25:9d:0a:cc:1e:
e3:4f:43:79:04:47:ac:1a:4e:b1:f9:01:a1:b6:b2:
37:14:70:0c:27:59:8a:ab:f7:17:bd:16:22:89:70:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:F5:2F:A6:1A:54:38:05:28:8C:BB:00:0B:34:CA:77:2D:51:2B
X509v3 Authority Key Identifier:
keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc66::/48
Signature Algorithm: sha256WithRSAEncryption
44:f7:9d:bb:c6:57:ae:ba:02:d0:2e:03:2c:b3:af:77:6c:93:
89:7a:6b:4d:42:9d:9b:a6:56:fc:08:17:64:51:11:9a:7e:53:
20:ba:3c:37:1a:af:6d:ea:66:63:2b:b9:0e:a6:ce:bd:9a:f8:
43:1d:c3:d4:70:82:17:2b:26:5d:e4:16:31:21:04:4f:ec:c0:
e6:0e:cc:60:09:27:f7:b8:0a:1b:16:fc:9d:30:b1:c4:71:ae:
ae:39:c9:a8:c8:18:84:2a:e8:50:a1:0d:ab:f4:1d:c4:a1:8e:
ec:ab:b2:b1:ad:9a:b7:1c:48:42:24:88:42:45:59:4b:45:a6:
f9:a0:4c:42:49:d4:6e:20:8b:e3:ea:8a:aa:21:d5:d5:4b:ab:
8d:cd:90:9e:8a:c2:33:0b:38:98:0b:cd:5a:e6:c1:45:0a:dc:
05:b3:38:54:bd:a9:f1:f6:e7:4c:da:8d:15:db:8f:c4:ec:67:
6f:69:da:7d:c7:5a:84:04:3e:b7:65:ce:4f:d0:83:eb:f7:67:
be:73:50:ef:b1:dd:36:9a:74:4a:20:c3:7c:82:99:45:6e:2c:
b6:80:7a:22:da:ef:51:c8:db:c4:ba:12:5c:99:09:60:31:68:
81:b8:1c:64:01:4f:f4:4d:6b:da:fc:af:d2:3d:06:8f:31:8f:
2c:d6:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:02:07 2025 by rpki-client