Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e2030.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: 2RREdahxI6rjC+r6L00HSgtXhxRhXXoPGUttkGX4T8M=
Subject key identifier: AA:86:DA:01:C6:46:60:29:37:A7:C0:80:2D:D6:BD:7A:CC:57:8C:34
Certificate issuer: /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial: 09FFE7AC7CCA5D267E256B9A216B95F65F9ECEFA
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e2030.roa
Signing time: Sun 12 Nov 2023 01:38:57 +0000
ROA not before: Sun 12 Nov 2023 01:33:57 +0000
ROA not after: Sun 10 Nov 2024 01:38:57 +0000
asID: 0
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ff:e7:ac:7c:ca:5d:26:7e:25:6b:9a:21:6b:95:f6:5f:9e:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Validity
Not Before: Nov 12 01:33:57 2023 GMT
Not After : Nov 10 01:38:57 2024 GMT
Subject: CN=AA86DA01C646602937A7C0802DD6BD7ACC578C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:0f:95:85:af:58:ee:27:35:15:2d:56:6d:
fe:52:25:2c:4d:5a:a8:4f:c2:cd:cb:b9:2d:c5:0d:
ed:c1:de:13:bd:17:0e:1a:32:f0:f6:e6:80:4c:80:
27:74:ef:3f:f2:5e:bb:da:44:b4:55:f7:df:ad:14:
a0:49:d9:94:08:2b:7b:9f:e8:76:4d:9c:1f:22:29:
41:36:66:be:62:5c:c0:c9:98:c5:ac:4b:c2:fc:41:
70:52:9e:a6:e7:c1:26:91:27:0e:f9:54:19:41:15:
86:b0:5d:fe:93:79:01:75:8a:1f:3b:3f:62:6f:bf:
74:fa:93:33:0f:af:d5:9b:0e:b0:1c:d6:28:fa:3f:
4b:4f:74:58:10:7f:9f:ba:8e:d2:df:89:de:92:2b:
9c:fe:af:d1:2b:90:a8:ab:db:ee:e7:7e:60:0b:d1:
ed:6a:40:09:16:9c:b0:48:5d:e6:7d:0a:9a:12:1a:
65:7f:32:ce:dd:b1:77:5f:c9:5d:76:dd:84:31:0c:
3a:95:33:16:ad:ac:1f:7a:40:b6:2b:b2:b7:f9:aa:
de:29:41:2b:3a:c8:f2:d2:2e:60:8f:fb:41:e6:77:
5e:d2:3a:57:90:5f:a1:87:77:1a:19:a5:30:d0:fa:
b5:f7:3b:c2:13:e3:76:b7:45:e8:78:9e:ff:90:8a:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:DA:01:C6:46:60:29:37:A7:C0:80:2D:D6:BD:7A:CC:57:8C:34
X509v3 Authority Key Identifier:
keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
18:4e:03:a6:08:25:7a:8d:10:a8:35:1a:b7:95:9c:f4:70:a9:
3e:b7:7a:a7:37:ff:e0:4d:57:cb:88:a5:7e:7c:4b:fa:f2:b0:
a8:89:54:8d:9c:86:3a:ea:d4:81:04:92:66:c2:b9:79:14:3b:
37:ca:fa:00:b3:e2:92:64:8a:00:47:cc:a6:4c:b3:c8:7c:3f:
c9:0d:f3:f3:bc:bf:8f:bc:1d:81:da:1f:03:16:3c:48:80:37:
81:7e:bb:5e:5b:88:c4:d2:27:f8:af:0f:3f:15:09:27:f7:8d:
73:00:ee:5f:2d:ed:05:8f:78:ce:55:4d:fb:c0:d0:a3:4a:ae:
15:c0:a7:e2:99:c2:43:b5:e1:0b:00:16:fd:8c:54:c5:ea:9f:
63:bf:1f:25:4f:2e:61:0d:6f:23:d8:d3:70:b1:96:f2:36:e5:
95:5d:7f:79:93:38:80:77:e7:a3:10:90:cb:3c:7b:d1:b3:67:
74:5a:1b:b2:5f:51:5e:86:7a:0c:39:42:32:49:2a:d2:ab:82:
5e:92:aa:42:67:ce:70:cd:36:a7:51:7e:40:b6:70:a7:de:3d:
cc:58:a6:f7:ea:00:54:de:91:8d:0e:45:ff:aa:bc:a5:3f:d9:
ee:59:a3:b5:fe:07:93:d4:b7:f0:66:e1:aa:f5:94:b2:53:80:
56:b6:31:f1
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUCf/nrHzKXSZ+JWuaIWuV9l+ezvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhC
RjNBNEI3OTAeFw0yMzExMTIwMTMzNTdaFw0yNDExMTAwMTM4NTdaMDMxMTAvBgNV
BAMTKEFBODZEQTAxQzY0NjYwMjkzN0E3QzA4MDJERDZCRDdBQ0M1NzhDMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIQ+Vha9Y7ic1FS1Wbf5SJSxN
WqhPws3LuS3FDe3B3hO9Fw4aMvD25oBMgCd07z/yXrvaRLRV99+tFKBJ2ZQIK3uf
6HZNnB8iKUE2Zr5iXMDJmMWsS8L8QXBSnqbnwSaRJw75VBlBFYawXf6TeQF1ih87
P2Jvv3T6kzMPr9WbDrAc1ij6P0tPdFgQf5+6jtLfid6SK5z+r9ErkKir2+7nfmAL
0e1qQAkWnLBIXeZ9CpoSGmV/Ms7dsXdfyV123YQxDDqVMxatrB96QLYrsrf5qt4p
QSs6yPLSLmCP+0Hmd17SOleQX6GHdxoZpTDQ+rX3O8IT43a3Reh4nv+QihJNAgMB
AAGjggJwMIICbDAdBgNVHQ4EFgQUqobaAcZGYCk3p8CALda9esxXjDQwHwYDVR0j
BBgwFoAUIcplhXxDOcaSPPWp+GKZSL86S3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzQvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNBNEI3OS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMjFDQTY1ODU3QzQzMzlDNjkyM0NGNUE5Rjg2Mjk5NDhCRjNB
NEI3OS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYt
ZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhkN2RhLzQvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KgpgRLALMA0GCSqGSIb3DQEBCwUAA4IBAQAYTgOmCCV6jRCoNRq3lZz0cKk+t3qn
N//gTVfLiKV+fEv68rCoiVSNnIY66tSBBJJmwrl5FDs3yvoAs+KSZIoAR8ymTLPI
fD/JDfPzvL+PvB2B2h8DFjxIgDeBfrteW4jE0if4rw8/FQkn941zAO5fLe0Fj3jO
VU37wNCjSq4VwKfimcJDteELABb9jFTF6p9jvx8lTy5hDW8j2NNwsZbyNuWVXX95
kziAd+ejEJDLPHvRs2d0WhuyX1FehnoMOUIySSrSq4JekqpCZ85wzTanUX5AtnCn
3j3MWKb36gBU3pGNDkX/qrylP9nuWaO1/geT1LfwZuGq9ZSyU4BWtjHx
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:26:58 2025 by rpki-client