Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3430203d3e203437323732.roa
File: 326130613a363034343a3230303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier: KhRv9bjDPK8DpLX6xtyTShYerHzaNslNIdoUelcmERM=
Subject key identifier: E3:9F:D8:07:EA:F4:0F:22:88:20:0D:72:08:1D:D4:28:C7:08:B3:35
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 71A3543925A670EE089B7D6807B2847EE4B3EB70
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3430203d3e203437323732.roa
Signing time: Sat 25 Nov 2023 07:30:57 +0000
ROA not before: Sat 25 Nov 2023 07:25:57 +0000
ROA not after: Sat 23 Nov 2024 07:30:57 +0000
asID: 47272
IP address blocks: 2a0a:6044:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a3:54:39:25:a6:70:ee:08:9b:7d:68:07:b2:84:7e:e4:b3:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:25:57 2023 GMT
Not After : Nov 23 07:30:57 2024 GMT
Subject: CN=E39FD807EAF40F2288200D72081DD428C708B335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f1:ca:01:e7:7a:44:34:85:75:1c:e0:ee:
4f:93:76:d2:ef:41:85:d9:14:2b:8e:98:e1:27:7f:
87:28:82:2f:95:c6:70:2a:b4:99:c8:68:ae:04:57:
10:2f:f4:98:f0:f2:99:53:36:b3:df:f8:38:00:b0:
9f:b7:47:11:9b:79:a6:97:df:88:f7:9f:07:1c:d1:
c2:eb:ec:c1:f6:79:a5:17:08:7c:9b:e3:f4:88:fb:
e7:67:48:4d:df:2a:3b:b5:18:20:16:b5:5e:45:46:
04:f9:40:df:21:5f:bc:54:cc:3e:68:d9:af:2d:6a:
3e:77:91:a3:d9:e3:6f:88:b8:cc:49:01:17:e7:d3:
6c:8d:f8:bc:c9:3c:3b:79:c7:1e:c4:6c:89:8e:b5:
eb:2a:11:bb:1d:ed:14:00:8c:02:ab:4a:f1:ae:ff:
61:ec:92:e6:bb:65:05:24:82:49:93:48:4e:dd:26:
d9:04:a9:a7:6d:1a:eb:a6:b2:8e:50:b5:44:f7:e5:
9f:c9:84:0a:f5:c2:9b:67:40:48:7b:1a:50:57:cc:
db:bb:8b:9c:77:bd:cc:8e:ce:fb:34:71:64:fe:72:
4e:3a:48:a0:b6:b3:1d:86:b9:3b:15:60:69:03:fb:
ac:71:00:e7:6f:0a:62:7d:ca:89:f3:67:6c:24:8d:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:D8:07:EA:F4:0F:22:88:20:0D:72:08:1D:D4:28:C7:08:B3:35
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3430203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:200::/40
Signature Algorithm: sha256WithRSAEncryption
7f:92:1e:2f:99:fa:12:8d:9b:c6:5b:05:12:9d:ab:e4:d0:76:
a1:b0:e3:f4:3c:37:94:d1:05:48:15:0b:31:ad:72:d9:df:22:
7d:14:f7:5d:9f:e9:2e:3e:f5:f3:80:0b:55:c5:49:16:ed:b9:
d0:07:ed:27:01:9b:a3:a0:dd:6e:ab:ee:96:00:bf:64:b0:6c:
df:3f:58:18:66:e1:30:ea:40:b1:0e:67:1d:0e:ed:da:63:81:
c0:a0:92:2b:c2:97:13:2a:9b:38:6b:6c:4f:7c:87:db:15:9f:
87:30:c8:06:bb:b4:56:e1:9b:59:06:2a:1c:67:13:6e:47:9f:
14:05:64:e4:39:ba:66:35:f0:18:5e:5c:ae:cc:cd:22:0c:79:
63:c8:df:ed:9c:06:62:42:c6:40:6b:9a:fb:d2:13:6d:eb:43:
c3:70:3c:11:95:95:07:d9:df:37:72:ef:f7:f8:59:c0:12:ff:
66:5f:0f:d5:82:99:4a:60:5d:ef:87:7d:fc:6b:8f:d8:31:3d:
bd:62:6f:fc:b3:07:3c:0f:8c:68:d9:02:81:de:e9:b0:46:8e:
c4:7b:29:e7:9f:fc:ef:12:76:bd:5a:7a:29:c0:33:c6:a3:da:
46:0f:68:8f:02:d0:e6:ad:8c:3a:9d:b6:16:76:86:cf:8e:c4:
49:45:09:25
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUcaNUOSWmcO4Im31oB7KEfuSz63AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZC
N0U2RjU0NjAeFw0yMzExMjUwNzI1NTdaFw0yNDExMjMwNzMwNTdaMDMxMTAvBgNV
BAMTKEUzOUZEODA3RUFGNDBGMjI4ODIwMEQ3MjA4MURENDI4QzcwOEIzMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3vHKAed6RDSFdRzg7k+TdtLv
QYXZFCuOmOEnf4cogi+VxnAqtJnIaK4EVxAv9Jjw8plTNrPf+DgAsJ+3RxGbeaaX
34j3nwcc0cLr7MH2eaUXCHyb4/SI++dnSE3fKju1GCAWtV5FRgT5QN8hX7xUzD5o
2a8taj53kaPZ42+IuMxJARfn02yN+LzJPDt5xx7EbImOtesqEbsd7RQAjAKrSvGu
/2Hskua7ZQUkgkmTSE7dJtkEqadtGuumso5QtUT35Z/JhAr1wptnQEh7GlBXzNu7
i5x3vcyOzvs0cWT+ck46SKC2sx2GuTsVYGkD+6xxAOdvCmJ9yonzZ2wkjddPAgMB
AAGjggJ1MIICcTAdBgNVHQ4EFgQU45/YB+r0DyKIIA1yCB3UKMcIszUwHwYDVR0j
BBgwFoAUY1+5w5ovsPsB+PQTDIo//7fm9UYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0Yzc1N2QtM2M2My00YTBhLWIwZDktNDFlMGRlYzNl
OTI5LzAvNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZCN0U2RjU0Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZCN0U2
RjU0Ni5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDY0Yzc1N2Qt
M2M2My00YTBhLWIwZDktNDFlMGRlYzNlOTI5LzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKgpgRAIwDQYJKoZIhvcNAQELBQADggEBAH+SHi+Z+hKNm8ZbBRKdq+TQ
dqGw4/Q8N5TRBUgVCzGtctnfIn0U912f6S4+9fOAC1XFSRbtudAH7ScBm6Og3W6r
7pYAv2SwbN8/WBhm4TDqQLEOZx0O7dpjgcCgkivClxMqmzhrbE98h9sVn4cwyAa7
tFbhm1kGKhxnE25HnxQFZOQ5umY18BheXK7MzSIMeWPI3+2cBmJCxkBrmvvSE23r
Q8NwPBGVlQfZ3zdy7/f4WcAS/2ZfD9WCmUpgXe+Hffxrj9gxPb1ib/yzBzwPjGjZ
AoHe6bBGjsR7Keef/O8Sdr1aeinAM8aj2kYPaI8C0OatjDqdthZ2hs+OxElFCSU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:52 2025 by rpki-client