Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa
File: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (raw, json)
Hash identifier: qkbQOCJ0PlesBWvopdoDJCVvu5pk0A8D98qBSxBUcYg=
Subject key identifier: 48:77:90:0F:C2:C9:56:3A:AD:D9:5B:A4:48:48:A9:70:76:E5:EA:0F
Certificate issuer: /CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
Certificate serial: 5DC341116184F9571B2347EDDBC64A7CBC28BD34
Authority key identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa
Signing time: Fri 14 Feb 2025 13:05:32 +0000
ROA not before: Fri 14 Feb 2025 13:00:32 +0000
ROA not after: Fri 13 Feb 2026 13:05:32 +0000
asID: 198016
IP address blocks: 2a06:1281:9000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c3:41:11:61:84:f9:57:1b:23:47:ed:db:c6:4a:7c:bc:28:bd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E
Validity
Not Before: Feb 14 13:00:32 2025 GMT
Not After : Feb 13 13:05:32 2026 GMT
Subject: CN=4877900FC2C9563AADD95BA44848A97076E5EA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:9b:f5:73:9b:fb:b1:17:00:0f:25:96:03:
2d:e7:da:04:bf:02:58:6d:78:99:0b:45:23:24:7b:
5b:56:da:9b:4f:cd:0c:01:5e:f7:e3:61:85:7b:f8:
7b:7e:7c:69:68:14:f1:d5:78:e9:82:32:c7:16:8f:
51:9f:31:a5:e8:49:f6:a3:36:08:2c:d0:80:18:92:
1d:23:14:4c:50:bc:2d:6a:e3:bd:4d:45:14:96:32:
83:6e:7a:7a:d5:dd:21:dc:ac:d8:e8:9a:cb:4d:79:
a5:6d:ea:25:ee:88:1f:d6:40:cf:6f:da:d8:18:95:
f4:3d:38:95:e8:d1:4b:51:67:07:da:ce:d8:0d:d9:
43:c1:34:3e:2c:3d:6a:53:28:ba:50:1a:02:ac:af:
86:b4:db:95:b5:f7:73:7f:ce:12:a2:e3:9f:61:69:
77:22:20:dd:95:7c:fe:29:d6:19:fa:ee:9b:ac:b7:
51:e0:dd:7c:ae:49:54:c3:c8:c3:bd:6f:5f:00:c3:
6d:ab:fa:0c:bc:05:fa:f8:fd:a9:f8:c0:3b:8d:a4:
4c:0e:b5:67:52:ba:4e:4c:14:b3:8f:9f:05:54:89:
4a:3b:82:7f:8c:5b:68:a4:41:62:65:df:c4:df:79:
38:4f:4b:3c:3e:ee:d9:ce:50:fa:35:04:d6:98:40:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:90:0F:C2:C9:56:3A:AD:D9:5B:A4:48:48:A9:70:76:E5:EA:0F
X509v3 Authority Key Identifier:
keyid:55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:9000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:dc:cf:18:70:19:74:3a:a8:5c:ae:07:2a:b9:8d:5f:3f:56:
6a:68:87:81:e1:0d:82:db:83:a8:0e:3f:e1:20:20:bc:b2:03:
76:09:dc:21:0a:93:b0:56:b9:e9:1c:89:ea:06:06:33:d0:34:
9f:e4:28:88:2d:9f:d8:d9:79:51:9e:55:49:63:fc:2d:76:a2:
cc:35:bb:52:4d:f9:5c:52:a7:8f:7f:9e:fc:32:6a:e2:56:01:
87:ae:ed:f9:59:54:ec:d0:8c:7f:4e:7e:c2:d5:49:46:74:77:
71:d1:6a:0a:69:0f:00:0b:48:5b:41:e4:3f:dc:c8:35:b9:c5:
f7:65:90:9b:2a:4b:05:d9:99:88:03:d8:99:d6:36:63:25:0b:
cb:06:09:2a:6c:8c:bd:bb:f3:87:85:80:ba:87:ac:bb:d7:20:
d9:12:59:d1:0a:78:29:e9:9e:1e:8d:f6:2d:10:06:8a:18:17:
73:61:42:74:45:6a:3e:10:00:c2:2f:d0:c9:7c:76:cc:c4:dd:
e2:5c:63:3a:5d:e0:19:ec:d4:9f:e0:a5:84:5a:51:fb:be:c7:
cc:9e:d1:5f:2f:04:e2:85:2f:2a:94:60:12:84:21:67:eb:7c:
2d:80:6c:7e:e2:b4:62:66:d1:e1:a8:7e:62:36:6e:28:0f:aa:
e4:24:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:15 2025 by rpki-client