Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa
File: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (raw, json)
Hash identifier: J6IQBtHqaQrudykWH0k2e1lLzY1YgfTAocpTPX/tyNY=
Subject key identifier: D2:98:A6:A1:10:F8:F6:9B:14:34:CB:B6:FB:94:68:1A:1D:28:EC:EC
Certificate issuer: /CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Certificate serial: 57685AAEB55E0CB21AC1301AEE2460A76AD76BD5
Authority key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa
Signing time: Sat 22 Feb 2025 23:52:34 +0000
ROA not before: Sat 22 Feb 2025 23:47:34 +0000
ROA not after: Sat 21 Feb 2026 23:52:34 +0000
asID: 214701
IP address blocks: 2a0b:4e07:6000::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:68:5a:ae:b5:5e:0c:b2:1a:c1:30:1a:ee:24:60:a7:6a:d7:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Validity
Not Before: Feb 22 23:47:34 2025 GMT
Not After : Feb 21 23:52:34 2026 GMT
Subject: CN=D298A6A110F8F69B1434CBB6FB94681A1D28ECEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:93:a1:4a:dc:a5:31:a8:59:27:5a:e6:bc:0c:
f2:4d:e0:69:9d:98:4d:c5:4a:fb:24:ab:e9:db:73:
a3:83:74:5b:01:78:d2:22:9a:c5:fd:93:e9:da:55:
cf:37:c3:c7:6b:92:b4:da:cd:8c:6b:2b:2c:27:0d:
27:f8:5a:1c:2e:37:84:76:f9:12:9c:02:6a:f0:0e:
24:bc:bb:48:f1:ad:65:86:8e:8f:04:48:90:b8:d1:
7e:1e:33:7c:cb:07:55:3d:51:2c:09:51:e9:90:5d:
e1:81:c3:eb:9b:86:dd:0e:12:4d:b5:40:17:5f:4c:
58:4c:3b:2b:ba:5c:7e:1d:08:bd:05:6f:83:b0:53:
5e:33:1c:d9:f0:9b:9a:ef:6e:8a:da:f4:82:b4:ba:
bc:31:2e:96:f3:4a:f5:0e:55:8f:33:4e:8a:75:b7:
74:dc:5e:bb:39:71:9c:ac:4b:65:1c:dc:62:d6:2b:
57:33:35:a4:e2:e4:46:c6:38:85:b0:53:30:d2:e3:
98:54:a2:1d:1a:d2:86:7a:53:4c:4b:28:b8:1c:9d:
7e:c3:63:69:15:3a:06:f4:1c:9c:cf:a6:ba:2b:04:
5f:b9:af:ac:f5:0d:c1:28:74:6d:40:49:f6:28:a1:
8a:89:40:a1:7e:22:25:2d:b2:dc:ac:b6:bf:3a:d9:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:A6:A1:10:F8:F6:9B:14:34:CB:B6:FB:94:68:1A:1D:28:EC:EC
X509v3 Authority Key Identifier:
keyid:1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:6000::/41
Signature Algorithm: sha256WithRSAEncryption
49:47:ec:ea:83:3e:f9:8c:e4:dd:00:00:37:7f:2b:eb:ac:a3:
58:f2:4f:4e:42:e7:53:9e:4f:c8:68:44:05:82:5e:d1:4d:0e:
ae:7b:e6:83:e1:28:da:2f:cb:18:8d:70:c8:09:a3:bc:5a:bb:
65:0e:c0:3a:24:ec:53:97:14:8f:14:28:ac:b2:48:63:5d:1b:
cf:b3:98:30:ac:a5:01:4e:f3:41:7d:23:2e:ff:00:24:c5:91:
92:91:8d:ae:89:6e:db:27:25:4b:04:c8:c1:03:ae:18:09:1d:
c6:f1:33:0a:a9:61:80:15:74:d4:25:68:32:12:1a:f0:11:22:
4e:c2:c3:8c:11:77:6f:b6:d5:cb:b1:30:4b:9f:88:f1:38:86:
04:fa:13:5d:da:48:56:57:73:7a:6c:e1:53:9f:ef:13:4b:78:
29:9d:a9:83:38:3b:98:46:b8:9d:23:03:0c:3f:a5:ac:b7:3f:
89:fa:01:4b:77:63:b5:3f:f6:d2:b4:da:de:c3:a3:18:3c:0b:
f8:44:ec:35:0a:f8:c2:b2:4f:ca:d0:bb:30:f2:13:b0:cd:58:
e4:34:00:0f:c3:97:89:0f:ee:52:cc:b2:b5:8c:a7:08:9d:26:
1e:6e:ab:46:fe:84:db:70:05:d6:dc:79:dc:b1:9a:33:bf:73:
1c:eb:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:25:23 2025 by rpki-client