![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530323a3a2f33322d3438203d3e20323136303232.roa
File: 326131333a393530323a3a2f33322d3438203d3e20323136303232.roa (raw, json)
Hash identifier: y4b8Hres5FNDShykg4weLNg9yKjq0eOg2yJelhM+BJo=
Subject key identifier: 13:E9:6C:57:A0:B5:2C:9C:98:A8:A0:08:B7:94:22:6A:88:DA:35:93
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 593B30684D8F45CD277FA187599199013B16147C
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530323a3a2f33322d3438203d3e20323136303232.roa
Signing time: Tue 02 Jul 2024 10:32:02 +0000
ROA not before: Tue 02 Jul 2024 10:27:02 +0000
ROA not after: Tue 01 Jul 2025 10:32:02 +0000
asID: 216022
IP address blocks: 2a13:9502::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3b:30:68:4d:8f:45:cd:27:7f:a1:87:59:91:99:01:3b:16:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jul 2 10:27:02 2024 GMT
Not After : Jul 1 10:32:02 2025 GMT
Subject: CN=13E96C57A0B52C9C98A8A008B794226A88DA3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:a6:f6:a7:4a:3d:ec:3d:15:ac:8d:1c:90:
22:e2:55:6f:14:17:95:b6:47:6c:6c:28:fb:47:69:
e8:ce:f7:cc:e0:1a:4d:af:20:b8:71:1b:85:f0:2c:
57:7d:a4:87:fd:11:bd:87:1a:35:ec:4e:b8:05:74:
12:c7:0d:4c:ed:aa:28:f7:dd:20:13:66:28:01:4a:
6a:fb:68:d0:1b:cc:f4:ad:32:6e:e3:a2:81:84:61:
b3:f7:1f:73:f4:1e:d3:a6:8b:69:97:73:b8:1b:39:
8e:7e:f0:0a:18:c5:de:a9:6e:98:bc:c4:ca:63:c0:
5b:f3:b0:58:e7:3f:3a:dd:6e:27:fc:7f:82:6b:83:
96:29:3b:fe:d5:1c:56:26:12:65:ae:b5:67:3e:5d:
e6:39:fb:48:26:df:e6:ea:de:49:cd:01:6d:87:2d:
d4:e1:c3:d8:58:f7:c5:be:81:95:26:e1:50:64:cd:
2a:26:b8:86:5d:d7:7b:cb:60:b9:fb:89:76:0b:9e:
c5:a2:70:3c:23:ed:59:ef:78:f4:1f:8b:5e:ab:08:
f7:37:c3:e9:57:c9:b1:01:e2:57:aa:25:b5:17:af:
31:37:42:b4:52:99:93:96:36:23:e4:35:2a:58:2a:
b2:1c:95:e0:88:2f:0c:f6:0b:9e:62:37:82:5a:fe:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:6C:57:A0:B5:2C:9C:98:A8:A0:08:B7:94:22:6A:88:DA:35:93
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530323a3a2f33322d3438203d3e20323136303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9502::/32
Signature Algorithm: sha256WithRSAEncryption
41:e2:2a:7d:6b:bb:6e:4c:38:9a:8b:bc:61:fc:da:19:97:14:
28:d8:ca:f2:f3:34:72:b4:51:27:8c:e7:68:87:5f:34:56:db:
6e:55:2c:a8:64:15:6f:49:d4:c8:4c:86:20:03:7e:a5:ce:da:
80:de:28:95:23:b1:1b:9a:63:cd:1f:ef:1f:03:0a:e8:b0:38:
60:fc:9f:65:04:a5:ba:38:f0:ef:5d:0a:ba:92:bb:09:51:2b:
f5:d3:67:92:bf:72:21:9e:85:af:67:bc:ed:68:80:1b:5c:5f:
e9:b3:f6:37:2a:23:41:75:3a:83:73:5c:02:70:65:01:91:35:
95:53:a6:81:a4:22:f4:e1:ce:01:55:b1:72:d1:0a:c3:2b:b2:
b3:98:74:ea:b1:d4:bc:83:ff:aa:0b:3c:d9:95:30:af:53:7d:
18:0d:32:37:88:ef:40:c7:5a:bc:e9:d5:5e:d7:13:cc:0f:84:
ea:e8:fa:29:89:9c:12:87:04:99:5c:06:96:de:f4:7b:ac:aa:
e5:1b:ac:f5:bd:6e:1d:bc:f6:60:f8:dc:6c:5a:45:b7:30:ce:
7b:9b:7c:33:36:9a:81:ca:5f:01:8a:28:f8:1f:50:35:3d:46:
69:7f:24:08:d0:78:32:99:2b:4e:a6:e6:e9:03:e7:e7:f4:52:
ee:c0:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:27 2025 by rpki-client