Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
File: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (raw, json)
Hash identifier: K3dsxrFQ81jShWe7HJ7EQUeBE0EnGjXf57qbgrA7Yxc=
Subject key identifier: 2F:3F:79:6D:42:14:84:5B:77:D0:F7:89:9F:2B:66:51:0E:13:20:D7
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 382245757BBA118C863BA21C210A214110670111
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
Signing time: Fri 07 Mar 2025 09:36:58 +0000
ROA not before: Fri 07 Mar 2025 09:31:58 +0000
ROA not after: Fri 06 Mar 2026 09:36:58 +0000
asID: 205036
IP address blocks: 2a0f:5fc0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:22:45:75:7b:ba:11:8c:86:3b:a2:1c:21:0a:21:41:10:67:01:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 7 09:31:58 2025 GMT
Not After : Mar 6 09:36:58 2026 GMT
Subject: CN=2F3F796D4214845B77D0F7899F2B66510E1320D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:95:7a:77:bf:31:41:2b:8e:00:ac:d1:9d:
73:9f:27:0b:f8:c5:5a:11:df:2f:d3:c1:75:99:55:
74:2d:fb:1e:de:92:05:98:3c:7b:d0:55:b8:a9:8b:
11:79:f7:e3:d5:0c:8d:6a:70:c1:35:b9:b4:79:3d:
fa:8a:89:29:49:ba:8a:84:cc:c1:8d:11:66:c4:17:
84:e0:fb:64:78:bc:96:06:58:fc:9e:36:fa:f5:de:
fc:0a:a2:70:76:27:ce:99:53:27:8f:13:84:19:83:
e5:87:46:f0:07:69:f5:71:f1:6c:82:8f:8a:e5:f0:
01:af:6f:15:57:e9:ce:1d:ec:16:b8:4c:cc:3c:43:
4e:50:3c:2f:f5:4f:a5:28:da:3c:6e:90:13:d3:ce:
05:18:5e:71:33:89:9f:79:ab:e9:28:3f:72:42:0e:
fb:68:3c:90:5a:c0:7a:29:bf:62:e9:22:b3:0b:4c:
b6:53:1e:90:cf:05:db:29:d4:c3:49:d6:90:01:28:
2e:10:aa:1c:6f:3c:f6:2f:63:1c:a1:9b:1c:4d:40:
33:09:fb:66:60:22:3d:99:0a:ea:d5:41:f9:e1:90:
f8:00:fd:99:a5:1a:e8:54:bb:f1:52:f0:c2:5f:de:
13:66:6d:b3:06:a6:c8:37:88:16:56:47:80:e1:9f:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:79:6D:42:14:84:5B:77:D0:F7:89:9F:2B:66:51:0E:13:20:D7
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
38:bc:a7:fd:2b:cb:3e:3a:5d:44:d6:bb:7b:fa:b4:f6:7f:d5:
28:18:ea:8b:20:a2:22:72:63:da:a1:10:dc:dd:12:68:f1:bf:
a1:ab:2c:66:c1:22:55:72:1d:12:75:9f:4b:f8:5c:94:a6:99:
50:2f:86:81:e9:c3:f7:87:f4:1d:41:82:57:f0:d3:1e:71:18:
f5:76:44:d3:a7:dc:c9:a5:c1:ff:60:c1:6a:c3:92:38:96:89:
ef:f3:3e:d0:fa:88:ca:df:cb:3a:d5:46:9d:92:00:15:c3:7c:
93:36:28:6a:34:e5:81:b3:92:73:ce:ef:d7:3a:44:5b:98:ca:
fd:14:e7:05:14:04:bd:d2:29:1c:e7:23:39:81:0e:58:88:e7:
8f:bb:15:0b:fc:93:da:3c:e0:3e:73:59:1e:68:25:cd:68:a5:
69:84:06:65:18:ee:c1:5b:4c:09:59:18:5a:cc:bb:c6:ed:d2:
c3:b9:89:e9:11:ca:a9:5c:22:a8:d4:72:d0:14:35:ef:3b:e8:
d7:69:4a:21:ee:12:56:68:39:9a:e3:3b:ed:6e:a4:54:ea:3a:
2e:46:ce:08:2f:e4:05:34:cf:73:b4:f4:c2:f4:ff:57:c7:34:
e3:21:ff:be:b2:c3:24:dd:de:3b:2d:a9:e4:fb:03:c0:22:f1:
ff:85:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:38 2025 by rpki-client