Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3735303a3a2f34342d3434203d3e20313534313835.roa
File: 326131343a373538303a3735303a3a2f34342d3434203d3e20313534313835.roa (raw, json)
Hash identifier: A7U5lZEytpd5xKbdjMit7AxXsIw/JGOcfTrohnPSnxg=
Subject key identifier: F4:4F:70:4B:AF:50:CB:C5:7A:9D:DB:18:56:7D:E4:E5:23:74:C8:7D
Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial: 7442C5AF58CA30684F42AFC363DF684B27F984A1
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3735303a3a2f34342d3434203d3e20313534313835.roa
Signing time: Fri 29 Aug 2025 07:19:36 +0000
ROA not before: Fri 29 Aug 2025 07:14:36 +0000
ROA not after: Fri 28 Aug 2026 07:19:36 +0000
asID: 154185
IP address blocks: 2a14:7580:750::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:42:c5:af:58:ca:30:68:4f:42:af:c3:63:df:68:4b:27:f9:84:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Validity
Not Before: Aug 29 07:14:36 2025 GMT
Not After : Aug 28 07:19:36 2026 GMT
Subject: CN=F44F704BAF50CBC57A9DDB18567DE4E52374C87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:1a:81:bd:0f:03:47:d7:18:a2:64:76:13:
e4:c0:fe:50:9b:e8:f5:21:d7:0e:6d:7f:a7:e8:d6:
14:73:b7:39:a0:9c:56:53:9e:00:ce:32:94:f4:49:
99:5a:7e:2e:67:54:b2:bd:51:e8:44:42:35:64:97:
82:4a:26:99:36:95:4b:8b:65:8d:d1:ca:97:ae:de:
a3:fb:49:39:93:84:6e:6b:0b:09:cb:1d:c5:7b:e1:
15:d2:b6:da:c3:12:66:6a:9f:07:af:56:60:1d:16:
54:24:49:25:f0:fa:49:2a:1c:e5:3e:56:c4:ff:10:
6b:bd:9e:9a:91:4d:bb:82:d9:71:9b:4c:6f:1e:df:
01:72:2f:ae:ac:67:a7:99:84:57:f0:c2:8d:96:45:
d1:28:8e:57:c9:65:8c:bb:8f:e5:23:07:e4:c8:8e:
7d:c5:a2:c7:61:af:6e:0c:87:e0:a2:88:8d:56:f6:
41:5e:8d:68:18:2c:48:5e:01:13:82:7d:38:da:e0:
bc:c9:3f:6e:6a:ec:fb:3a:af:45:7a:34:7d:c2:91:
51:de:6c:bd:4d:22:31:53:13:40:73:9a:8e:81:30:
b3:32:31:ba:91:a6:31:e5:49:24:16:54:b3:44:ad:
36:a3:e5:df:09:22:08:d7:af:96:8c:c9:86:4c:fe:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:70:4B:AF:50:CB:C5:7A:9D:DB:18:56:7D:E4:E5:23:74:C8:7D
X509v3 Authority Key Identifier:
keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3735303a3a2f34342d3434203d3e20313534313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:750::/44
Signature Algorithm: sha256WithRSAEncryption
23:61:98:02:8f:f8:cc:e9:8c:4f:e7:9d:cc:d6:08:00:0e:95:
60:fa:97:55:d9:cb:c4:de:48:c2:b1:2a:04:b8:4f:45:a5:d8:
98:6b:f1:45:d9:0f:ab:4c:73:61:5b:8a:fd:76:da:6f:eb:cd:
f3:39:3a:3d:f5:02:31:84:e2:67:b9:63:f2:ec:e9:e4:a6:f8:
d4:b4:36:ff:5f:97:ea:2a:48:b6:11:07:9c:d2:2a:18:63:32:
bd:e7:50:9d:14:72:25:9c:3c:bf:e3:99:7a:48:b7:bd:e6:a8:
3d:8c:a5:8b:79:6c:d6:4b:96:1a:e4:64:5c:4e:78:6b:52:b2:
91:bf:f4:45:a1:4e:1d:da:bf:35:62:bb:b3:e5:7b:44:9f:87:
b8:d9:17:e6:5d:2d:b7:ae:31:41:07:bd:ad:c5:2e:88:fd:6f:
2b:be:1e:85:98:58:ac:61:a8:7d:d0:4b:36:d7:92:da:bb:10:
1e:e8:7f:31:53:71:1d:84:7d:1d:f2:8e:70:fc:58:f8:2d:aa:
68:08:b3:6b:a5:ae:3a:e1:99:6d:36:a8:85:a5:c8:5e:fd:99:
3b:7f:03:28:f5:b1:20:4c:a7:a6:c7:af:80:a4:5c:b8:52:ef:
20:1e:c0:fc:f2:bd:cb:e7:2c:33:d5:03:b7:a2:c6:42:65:ad:
a9:46:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:22:58 2025 by rpki-client