Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
File: 326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa (raw, json)
Hash identifier: u/g1f42E6P/frGoRhW48NlI6cEWKAL8li6GxYLhdhHk=
Subject key identifier: AA:26:A4:55:48:AD:3B:F6:22:DD:10:3C:17:33:DF:59:85:15:F6:F5
Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial: 4212E2E755F433E54981CB777EFF1CB5ECF060F2
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
Signing time: Fri 29 Aug 2025 10:37:06 +0000
ROA not before: Fri 29 Aug 2025 10:32:06 +0000
ROA not after: Fri 28 Aug 2026 10:37:06 +0000
asID: 216056
IP address blocks: 2a14:7580:790::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:12:e2:e7:55:f4:33:e5:49:81:cb:77:7e:ff:1c:b5:ec:f0:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Validity
Not Before: Aug 29 10:32:06 2025 GMT
Not After : Aug 28 10:37:06 2026 GMT
Subject: CN=AA26A45548AD3BF622DD103C1733DF598515F6F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:15:d5:5b:01:97:7e:bc:cb:49:8a:d4:67:
e5:91:8c:17:91:7d:cf:69:d1:5d:70:ef:fb:6a:f6:
f8:d0:80:27:83:78:14:7f:51:34:21:22:8c:83:e1:
c7:09:ba:8b:0a:e5:a1:5b:36:0e:c8:57:5d:cf:dd:
b6:64:6e:d5:89:57:ff:f3:65:e8:76:1f:2d:88:dc:
93:5b:28:41:6d:52:f1:51:ad:ec:36:90:7b:62:74:
06:da:4b:1e:47:eb:84:27:a8:96:c7:63:35:7f:53:
b4:30:22:48:17:53:d1:e4:97:be:05:ca:41:a2:ef:
f9:4d:21:e9:83:26:cb:b9:4f:c9:56:ca:7a:c9:ee:
16:0a:da:6c:b5:87:3f:c8:ff:5c:bf:67:66:bf:23:
8b:c3:50:a0:a6:2c:e4:8c:fe:35:06:f7:8b:e6:e5:
b3:06:e4:18:19:12:42:34:dc:40:39:3d:d6:16:d9:
d5:e2:8b:6e:70:eb:9c:34:fe:19:23:e2:1c:22:70:
ce:f2:99:8f:ce:0b:59:eb:22:80:1f:69:21:06:c1:
b8:05:82:56:14:bd:1a:10:31:7b:27:93:cc:b9:62:
de:66:c3:ce:5c:84:76:48:2c:81:6a:57:60:8a:04:
7a:bd:df:e9:55:88:c6:f9:b1:83:37:96:b1:e0:69:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:A4:55:48:AD:3B:F6:22:DD:10:3C:17:33:DF:59:85:15:F6:F5
X509v3 Authority Key Identifier:
keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:790::/44
Signature Algorithm: sha256WithRSAEncryption
6a:52:27:2f:d0:88:b9:8e:0b:46:af:f3:4c:29:9c:e3:ae:a0:
1e:18:d7:bf:ad:48:dd:57:b2:19:76:c1:92:61:c1:ff:4f:b3:
c9:03:c6:16:dd:5e:92:93:f2:b7:5a:9f:d0:03:31:58:82:02:
06:8f:43:38:51:4d:c9:9a:6d:10:88:fe:2e:e6:51:b4:cb:d7:
df:d3:2b:36:74:8c:ab:f5:4e:2f:ef:af:3e:e7:63:4c:c9:25:
40:30:b2:b4:f4:a6:81:5c:1d:a9:f2:17:19:2e:90:26:2b:a3:
9e:57:2c:15:86:74:10:47:42:3a:22:cf:09:a1:6e:38:f8:b3:
9c:b9:81:9b:ca:d2:66:27:b5:d6:59:1b:f8:4d:4f:cc:28:34:
f1:2f:97:b3:b6:5d:9d:9c:3e:7f:64:38:a7:5d:95:48:21:89:
1a:c6:e4:b7:58:fa:0c:9f:f0:ad:02:b1:9e:9f:ee:50:2d:64:
22:4c:e4:a1:b9:41:10:f8:19:6b:d5:ca:15:2c:02:fd:ed:03:
9e:45:a9:d9:c8:25:eb:74:1e:e0:0b:23:0e:61:cd:ed:6e:e3:
ea:c2:c0:3d:4b:fe:da:c9:9b:14:61:8d:52:54:17:91:63:c9:
5b:f6:72:67:a4:3e:9d:82:5b:62:b2:d2:5f:b5:4b:df:ff:b2:
9a:c3:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:22:58 2025 by rpki-client