Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa
File: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (raw, json)
Hash identifier: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=
Subject key identifier: E7:C6:4A:20:D0:BD:62:B1:4A:99:7A:76:05:62:D5:66:ED:C9:84:5C
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 7768D5FF2BE9750149557882F781BCAE861D718E
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa
Signing time: Thu 13 Feb 2025 19:18:07 +0000
ROA not before: Thu 13 Feb 2025 19:13:07 +0000
ROA not after: Thu 12 Feb 2026 19:18:07 +0000
asID: 212539
IP address blocks: 2a0d:b287:da01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:68:d5:ff:2b:e9:75:01:49:55:78:82:f7:81:bc:ae:86:1d:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Feb 13 19:13:07 2025 GMT
Not After : Feb 12 19:18:07 2026 GMT
Subject: CN=E7C64A20D0BD62B14A997A760562D566EDC9845C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:5e:b7:6a:5f:dd:eb:3b:5a:7e:8b:de:62:
8a:eb:de:8c:97:52:9c:da:c4:ea:6e:78:aa:64:63:
6d:f1:2f:52:26:81:a2:ac:43:f5:b4:3a:2a:85:11:
9a:ca:09:a3:af:3c:4b:79:74:ed:e7:96:a6:19:ac:
bb:24:a7:a7:7a:b4:20:63:cf:49:d7:72:33:81:5b:
68:ec:10:0d:87:b4:e9:e9:60:ca:45:38:4b:db:d3:
4b:85:c7:4e:a8:e3:1c:86:c3:5f:f1:d4:9b:1e:40:
b9:ab:8f:5d:45:9f:f0:02:9e:21:09:85:58:b3:3a:
32:ee:5e:af:72:98:24:52:93:a6:e9:c5:43:91:5c:
b4:43:14:37:cc:64:bc:31:f6:4b:f6:52:93:7d:1c:
d3:45:d6:de:78:d3:7d:12:10:c7:8f:eb:e3:d9:41:
ae:7d:a6:cb:69:08:79:f2:2f:a0:a1:02:fd:0c:22:
a7:21:3b:81:1a:9e:07:81:b1:cd:4d:75:1e:1d:8a:
80:37:63:22:76:13:2b:26:8f:4d:eb:85:03:e1:7e:
23:98:e8:2d:48:d5:a9:d3:7d:4e:4e:9d:87:56:6a:
53:c6:92:53:49:02:fa:36:79:57:5a:62:d4:5a:30:
c0:3e:75:49:f9:a5:5f:57:74:8d:09:28:82:05:92:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C6:4A:20:D0:BD:62:B1:4A:99:7A:76:05:62:D5:66:ED:C9:84:5C
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:da01::/48
Signature Algorithm: sha256WithRSAEncryption
3e:c6:ca:82:4d:d7:b0:0d:d6:84:96:cd:b0:dd:8a:88:42:ac:
ca:34:65:57:c4:dd:8e:fc:d0:5c:b6:48:ee:8b:76:4f:3b:a9:
8d:dd:cf:01:c5:e9:8e:e2:5d:a2:6e:7b:47:6e:a1:08:72:21:
e2:87:01:2c:ab:19:8a:d6:b0:8d:d5:f5:b2:f9:72:8c:bc:c1:
09:9f:70:fb:87:7a:99:82:48:0b:92:96:b2:0a:45:84:4d:91:
83:aa:f3:63:7f:ba:ab:ed:31:59:c4:4f:2f:43:76:0f:9c:2c:
5e:79:2f:e6:13:98:cd:21:a1:83:39:b1:61:3d:60:3b:51:3e:
2f:3d:d7:ac:66:44:f4:9c:aa:80:f9:39:96:d2:a7:51:43:3f:
83:02:e0:ff:6a:d4:45:3d:46:c1:7d:53:45:36:0b:5f:a5:b4:
08:cd:b2:63:91:17:65:6a:00:43:59:c7:fc:78:5e:a4:bd:b3:
4d:ec:7d:2a:84:16:d2:a3:da:13:29:bd:4b:fe:c7:bc:85:01:
32:02:7c:68:63:40:4b:6d:9d:7f:de:dc:95:f7:3e:cb:26:0f:
98:d5:59:fb:9b:76:1f:e1:38:04:15:62:c8:81:86:36:4e:d7:
09:c8:7b:bb:80:1a:00:43:1a:c2:2c:73:7f:99:fc:17:0c:1c:
a2:54:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:54 2025 by rpki-client