Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa
File: 326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa (raw, json)
Hash identifier: e3YPpDvHx8rPIAwM+wwNU0p7blaAVCCQT3k3Y+xIeS4=
Subject key identifier: 11:F9:11:AD:67:D7:4F:CB:F9:86:55:89:D7:71:65:00:E5:3B:27:0E
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 7126F1A8EFF8B5F45E4E03B474AAB106A1D4A163
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa
Signing time: Fri 07 Mar 2025 09:36:58 +0000
ROA not before: Fri 07 Mar 2025 09:31:58 +0000
ROA not after: Fri 06 Mar 2026 09:36:58 +0000
asID: 48981
IP address blocks: 2a0f:5fc0:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:26:f1:a8:ef:f8:b5:f4:5e:4e:03:b4:74:aa:b1:06:a1:d4:a1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 7 09:31:58 2025 GMT
Not After : Mar 6 09:36:58 2026 GMT
Subject: CN=11F911AD67D74FCBF9865589D7716500E53B270E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:78:b0:57:1f:09:e0:91:63:6d:19:fa:03:
c5:c0:bb:84:5d:81:4e:13:cf:d8:1b:fc:a0:a2:a3:
bb:03:ac:3d:ad:72:22:7e:11:8a:81:67:cf:df:4a:
40:d0:c4:dd:36:a7:70:2e:79:fd:60:f9:88:38:04:
70:1e:5c:4f:ac:1a:1b:67:0b:c1:58:bd:ab:ea:20:
88:f7:97:5f:f1:62:2d:3a:f0:a9:1a:3a:48:be:20:
6d:ed:eb:80:76:c5:7e:5f:0d:d0:1f:43:b9:a7:17:
4c:94:2e:1d:59:91:6c:b2:7a:4f:d8:2e:4d:6d:66:
68:bc:c3:c0:fc:32:3e:09:f7:ab:48:07:6f:6f:6b:
35:d4:f9:76:c1:ef:ea:03:32:8d:ef:48:20:dd:53:
f8:42:a5:30:f4:a4:75:91:d7:9b:6b:c7:36:fa:75:
1a:26:d7:a1:4e:85:43:13:98:d8:bd:34:e8:4f:69:
70:f7:d5:2b:92:61:b5:44:54:df:32:60:39:34:d0:
7c:55:83:c5:9d:5d:47:94:17:ae:b7:9b:fb:59:7d:
20:4e:68:28:d3:38:93:3d:91:82:54:0a:b1:a6:d5:
19:d0:ce:25:18:db:1d:b6:15:f1:8c:9f:e3:42:0d:
b3:8c:6d:9e:c4:38:b1:02:86:0c:f8:c7:62:89:f4:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:11:AD:67:D7:4F:CB:F9:86:55:89:D7:71:65:00:E5:3B:27:0E
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5fc0:beef::/48
Signature Algorithm: sha256WithRSAEncryption
86:1f:de:3d:62:34:ce:41:64:de:2c:dd:44:16:2a:08:41:a0:
cd:1b:9d:af:28:e4:96:8d:ac:a9:8b:ab:0f:ca:c0:51:01:06:
55:8a:a2:5f:65:8b:a6:30:51:05:af:c7:62:f3:85:62:c6:58:
09:d8:e2:bf:c5:3f:a9:13:02:1f:9e:6a:bd:cf:1f:9d:30:79:
91:f9:23:f6:50:16:a1:d0:66:4d:cd:ba:fb:46:59:5f:7c:35:
df:7c:40:1f:0d:b4:66:28:45:d5:e9:1a:03:81:a9:2a:60:78:
4d:32:d3:a1:07:bd:1d:b9:5c:25:05:ab:e3:56:8b:8f:c6:ea:
a5:a3:88:84:ca:0d:ad:0e:03:d0:85:f8:5e:cb:2a:bf:0b:2b:
68:19:25:ad:65:03:c3:9b:e7:bc:0e:15:6c:be:f3:54:fa:b7:
fc:e2:81:10:f4:6a:86:e6:a7:1c:71:0c:81:74:87:8e:5a:fd:
b2:19:cb:ec:e9:c6:50:ea:d5:bf:dc:44:c2:99:33:12:f3:62:
ee:25:cf:72:1d:c7:88:24:f9:db:d8:af:3c:4d:36:b6:cb:d8:
d8:f5:a9:07:1e:40:9c:d7:f8:aa:f6:95:c2:3d:fa:02:d8:57:
f5:e7:e6:35:e7:f7:e9:e5:ea:a3:2f:68:39:36:45:06:2b:08:
6a:e1:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:00 2025 by rpki-client