![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa
File: 326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier: DToeFVRij7k7udhjn/8/S/TXhvdpogw/E7MSr2ofUKs=
Subject key identifier: F3:00:86:70:9C:77:1E:B9:B4:0B:83:92:A2:6F:29:58:29:3A:1C:13
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 46494197AF40D2DC24119FAE4F3D26BACD955872
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa
Signing time: Sat 25 Nov 2023 07:52:33 +0000
ROA not before: Sat 25 Nov 2023 07:47:33 +0000
ROA not after: Sat 23 Nov 2024 07:52:33 +0000
asID: 47272
IP address blocks: 2a0a:6044:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:49:41:97:af:40:d2:dc:24:11:9f:ae:4f:3d:26:ba:cd:95:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:47:33 2023 GMT
Not After : Nov 23 07:52:33 2024 GMT
Subject: CN=F30086709C771EB9B40B8392A26F2958293A1C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:f2:ef:e7:5c:23:2b:d3:43:43:db:78:7d:
42:04:e1:47:c4:42:cb:64:9e:0d:89:d8:e2:b9:46:
ed:b7:df:b6:4b:88:92:2a:81:c4:da:78:da:c1:30:
97:1b:f1:80:c6:86:be:bf:13:65:fd:16:c9:9a:66:
18:64:34:7c:11:80:96:d9:5d:77:7e:93:6c:f9:98:
c4:64:97:cc:ca:ba:fb:33:05:4a:ac:26:7c:1d:3d:
35:ef:74:db:af:85:c4:ae:66:de:92:a0:76:73:a4:
83:fc:f9:29:f2:e2:31:f8:5c:0c:54:d8:4c:7a:a6:
10:67:82:4f:74:40:51:a9:57:46:19:de:f8:73:1f:
50:e8:4e:c2:ed:1e:c9:f2:7b:3f:83:55:fb:c5:1d:
e1:4e:40:e9:1c:7e:4a:99:16:8a:cd:4f:61:2f:07:
9c:61:39:ac:bd:fb:18:90:7e:9a:c8:7b:c7:05:b2:
24:17:e6:ed:31:94:33:72:39:6d:e0:5a:8c:7e:76:
4a:0e:53:05:8f:27:58:6c:5a:8c:65:20:a9:fa:d3:
e6:3a:51:a8:95:40:1f:a2:03:e1:75:e8:37:6b:4e:
ed:d0:72:39:77:c7:55:f7:90:0b:16:3e:38:0c:ae:
78:e2:ff:bc:59:7e:76:02:3f:74:6f:32:87:59:5f:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:86:70:9C:77:1E:B9:B4:0B:83:92:A2:6F:29:58:29:3A:1C:13
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a3230303a3a2f34302d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:200::/40
Signature Algorithm: sha256WithRSAEncryption
22:7d:9b:be:b8:db:1c:cd:b1:27:9d:60:da:76:db:17:df:5c:
fd:cc:cb:05:13:2f:bd:e4:25:cc:cb:ba:b7:6b:a6:5d:9a:9e:
72:b9:8b:2a:51:35:ab:0e:9b:84:38:f4:9c:e4:9c:13:87:c9:
e7:e2:0c:29:47:0b:6d:9c:62:35:a6:e6:1e:d8:62:6d:72:c0:
79:a6:bd:ff:8a:47:3b:63:81:bc:65:27:59:46:c8:6e:ca:95:
b8:d0:dd:80:8b:fa:93:b2:aa:91:58:54:68:0a:7b:9a:82:7e:
22:c3:53:20:ef:67:98:1b:80:b8:9d:c0:4c:44:f5:9c:81:e3:
d5:09:71:aa:0e:c0:0e:10:1d:59:34:f5:de:f2:ea:08:12:6b:
08:85:d0:cf:81:a6:89:b2:e7:36:bb:a3:62:14:fe:ab:8c:b8:
9d:ff:33:71:41:bd:3b:18:53:29:a5:7b:66:97:f8:aa:36:7a:
c1:40:0c:d8:cb:c7:04:af:b0:50:eb:4a:77:87:06:88:21:a9:
16:dc:46:7c:81:28:82:83:94:e3:28:2a:b3:cb:45:36:1c:d6:
5d:b8:d4:63:67:6c:1d:f8:32:c6:ce:a5:66:53:2c:03:82:81:
b9:23:1e:3f:09:8e:fe:f1:94:66:8b:14:ae:65:9a:58:0a:43:
d8:3d:a1:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:59 2025 by rpki-client