Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
File: 326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa (raw, json)
Hash identifier: oNQxbpoUJAksnf4R3EvjzP2h4atl7lk6VggaZ+8nE6g=
Subject key identifier: 98:36:A9:49:CF:C5:B6:8C:C1:8C:DB:99:EA:B4:9E:9D:52:47:DC:58
Certificate issuer: /CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Certificate serial: 79917B57DFAAC4772C458D267CD05624CF191B34
Authority key identifier: 63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
Signing time: Sat 25 Nov 2023 07:30:56 +0000
ROA not before: Sat 25 Nov 2023 07:25:56 +0000
ROA not after: Sat 23 Nov 2024 07:30:56 +0000
asID: 207424
IP address blocks: 2a0a:6044:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:91:7b:57:df:aa:c4:77:2c:45:8d:26:7c:d0:56:24:cf:19:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546
Validity
Not Before: Nov 25 07:25:56 2023 GMT
Not After : Nov 23 07:30:56 2024 GMT
Subject: CN=9836A949CFC5B68CC18CDB99EAB49E9D5247DC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:88:af:89:9f:6e:02:27:0d:20:19:4e:b5:
2c:f8:dc:57:37:58:fe:9f:ba:c0:57:c6:d0:03:12:
12:7d:c1:b9:28:90:b0:41:2d:74:16:b1:0b:4f:2e:
50:b6:a6:66:8d:87:11:b0:22:9f:69:bd:4b:30:22:
5d:4f:49:c5:f4:2d:46:21:78:b0:50:4e:80:e8:bc:
95:1a:b6:cf:0b:90:d3:30:b7:c9:1e:7b:c5:34:cb:
63:76:62:8e:c3:09:b4:8b:07:4b:f6:92:58:64:ff:
7c:bc:bd:21:1b:0c:42:14:1b:9c:75:1a:89:a0:d5:
0a:ed:8b:94:90:a8:73:06:fd:07:62:e8:bc:55:51:
33:32:d2:1a:4f:63:d6:a8:45:3f:d7:eb:a3:8b:e6:
4b:fb:c3:77:66:c2:f7:24:fd:0a:39:d6:e7:17:6f:
21:82:4d:cc:14:27:87:58:df:9e:8d:08:66:0b:2b:
db:a9:05:60:35:8b:d7:29:0f:4f:c5:00:f2:10:47:
0f:ac:05:15:10:e7:b2:61:9d:8f:6f:ae:7e:13:9a:
73:d5:52:3c:6e:a8:95:68:cb:63:cb:59:7e:f2:20:
51:de:8e:38:46:2f:5b:33:a4:a1:fb:c2:68:7d:80:
91:65:58:d1:72:42:4b:0f:29:ba:0c:19:69:75:0e:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:A9:49:CF:C5:B6:8C:C1:8C:DB:99:EA:B4:9E:9D:52:47:DC:58
X509v3 Authority Key Identifier:
keyid:63:5F:B9:C3:9A:2F:B0:FB:01:F8:F4:13:0C:8A:3F:FF:B7:E6:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/635FB9C39A2FB0FB01F8F4130C8A3FFFB7E6F546.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64c757d-3c63-4a0a-b0d9-41e0dec3e929/0/326130613a363034343a623030623a3a2f34382d3438203d3e20323037343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fd:a4:68:fb:ff:e3:eb:24:95:27:35:f5:35:9a:2e:3e:ce:
72:d0:eb:b2:b7:69:4e:f9:8d:17:d6:8a:9e:2e:61:36:26:88:
0c:a9:9d:5f:53:15:5c:f1:d5:58:61:cc:92:6f:81:2e:0f:db:
91:52:6b:97:75:c2:a5:db:9c:d8:5b:73:21:02:9f:61:32:d1:
bf:11:d6:f2:a2:b3:fd:9f:fb:8a:da:be:43:5e:ef:de:38:a9:
75:59:a9:1c:a2:81:e4:fb:ca:5a:ae:c0:4b:0b:a0:a9:96:49:
98:22:fd:03:e3:65:0d:88:29:7d:e6:81:19:16:0f:4b:f6:6e:
f4:7b:a2:8a:df:8c:81:5f:3d:bd:6c:1e:9e:72:4c:44:c9:7d:
44:d8:dd:01:c4:d3:c3:6b:45:35:92:a8:83:d8:a0:b5:81:6c:
00:48:1f:44:e4:92:68:47:e0:50:20:07:ff:be:6d:c3:21:17:
f2:12:d9:2b:9f:5e:8d:28:28:6f:82:99:64:7f:bc:c6:d6:9c:
93:af:bc:25:de:7f:51:dc:c3:60:c3:c3:e6:95:62:ea:c3:25:
f5:04:a1:00:bd:65:94:35:48:69:9d:78:8a:1c:e9:09:b2:db:
d1:87:73:71:e9:e8:82:5c:ad:71:37:f6:28:ee:82:25:28:c9:
35:11:2e:6f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUeZF7V9+qxHcsRY0mfNBWJM8ZGzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZC
N0U2RjU0NjAeFw0yMzExMjUwNzI1NTZaFw0yNDExMjMwNzMwNTZaMDMxMTAvBgNV
BAMTKDk4MzZBOTQ5Q0ZDNUI2OENDMThDREI5OUVBQjQ5RTlENTI0N0RDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA4iviZ9uAicNIBlOtSz43Fc3
WP6fusBXxtADEhJ9wbkokLBBLXQWsQtPLlC2pmaNhxGwIp9pvUswIl1PScX0LUYh
eLBQToDovJUats8LkNMwt8kee8U0y2N2Yo7DCbSLB0v2klhk/3y8vSEbDEIUG5x1
Gomg1Qrti5SQqHMG/Qdi6LxVUTMy0hpPY9aoRT/X66OL5kv7w3dmwvck/Qo51ucX
byGCTcwUJ4dY356NCGYLK9upBWA1i9cpD0/FAPIQRw+sBRUQ57JhnY9vrn4TmnPV
UjxuqJVoy2PLWX7yIFHejjhGL1szpKH7wmh9gJFlWNFyQksPKboMGWl1DkF/AgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUmDapSc/FtozBjNuZ6rSenVJH3FgwHwYDVR0j
BBgwFoAUY1+5w5ovsPsB+PQTDIo//7fm9UYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0Yzc1N2QtM2M2My00YTBhLWIwZDktNDFlMGRlYzNl
OTI5LzAvNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZCN0U2RjU0Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNjM1RkI5QzM5QTJGQjBGQjAxRjhGNDEzMEM4QTNGRkZCN0U2
RjU0Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDY0Yzc1N2Qt
M2M2My00YTBhLWIwZDktNDFlMGRlYzNlOTI5LzAvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM0MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoKYESwCzANBgkqhkiG9w0BAQsFAAOCAQEAqP2kaPv/4+sklSc1
9TWaLj7OctDrsrdpTvmNF9aKni5hNiaIDKmdX1MVXPHVWGHMkm+BLg/bkVJrl3XC
pduc2FtzIQKfYTLRvxHW8qKz/Z/7itq+Q17v3jipdVmpHKKB5PvKWq7ASwugqZZJ
mCL9A+NlDYgpfeaBGRYPS/Zu9Huiit+MgV89vWwennJMRMl9RNjdAcTTw2tFNZKo
g9igtYFsAEgfROSSaEfgUCAH/75twyEX8hLZK59ejSgob4KZZH+8xtack6+8Jd5/
UdzDYMPD5pVi6sMl9QShAL1llDVIaZ14ihzpCbLb0YdzcenoglytcTf2KO6CJSjJ
NREubw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:49 2025 by rpki-client