Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532343a3a2f34382d3438203d3e20323135393536.roa
File: 326130613a363034343a613532343a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 5ZGlq4+X/7p02iVA8Xd2RMc2lWuLGMo/qiPNE9IDYBk=
Subject key identifier: 57:CC:33:33:01:F1:90:DA:AF:00:16:45:DB:A4:EC:F3:D6:1B:E8:36
Certificate issuer: /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial: 450DE141433B8B669E4F1A48B933CE0A5D06C79B
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532343a3a2f34382d3438203d3e20323135393536.roa
Signing time: Sat 08 Feb 2025 19:35:59 +0000
ROA not before: Sat 08 Feb 2025 19:30:59 +0000
ROA not after: Sat 07 Feb 2026 19:35:59 +0000
asID: 215956
IP address blocks: 2a0a:6044:a524::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0d:e1:41:43:3b:8b:66:9e:4f:1a:48:b9:33:ce:0a:5d:06:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Validity
Not Before: Feb 8 19:30:59 2025 GMT
Not After : Feb 7 19:35:59 2026 GMT
Subject: CN=57CC333301F190DAAF001645DBA4ECF3D61BE836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:58:87:e7:94:b2:f9:e7:b6:c7:0f:1b:a5:
88:99:c5:45:0b:61:9f:71:88:4f:7c:54:dd:dc:d2:
38:ed:68:00:5d:11:44:e4:ea:a6:aa:22:39:6d:22:
18:00:23:34:a2:62:ef:cb:0f:a0:86:00:d2:75:3d:
17:f7:35:e0:73:06:60:e1:69:74:ce:c1:cd:fe:c8:
7c:78:90:27:4c:ac:e3:05:c8:23:79:ba:8d:ee:b9:
b5:b6:61:48:34:07:87:61:8c:f0:97:7f:92:f9:78:
3f:23:94:7b:34:e5:3b:5c:1b:8e:91:aa:2d:35:3a:
f0:1c:66:41:d4:01:a3:59:bd:6f:fe:0d:7c:e1:8f:
ab:da:6f:04:fc:00:64:a1:bb:b5:47:14:37:c3:2b:
90:fe:40:85:69:92:db:e7:be:ad:17:5b:94:3b:65:
37:b9:24:7a:85:34:90:95:05:06:05:8b:80:5e:46:
ff:76:64:20:bf:86:db:92:ab:e4:24:c5:e5:61:98:
d8:3b:7f:a7:82:1e:17:90:77:02:f0:0e:f4:e3:dd:
32:63:b8:06:4e:dc:58:7e:1b:ad:a8:dc:69:86:30:
62:8c:b3:65:fa:8f:af:86:43:30:f5:be:57:a7:5c:
80:bd:da:e0:90:1b:99:02:5f:f4:c5:97:be:97:31:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CC:33:33:01:F1:90:DA:AF:00:16:45:DB:A4:EC:F3:D6:1B:E8:36
X509v3 Authority Key Identifier:
keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/326130613a363034343a613532343a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a524::/48
Signature Algorithm: sha256WithRSAEncryption
18:60:a8:03:99:76:02:a0:27:9a:ae:3e:c9:4f:20:7d:95:10:
3e:20:92:57:f5:93:b0:27:93:fc:9d:50:7a:e6:40:07:2a:99:
07:b7:07:e9:03:e4:cb:13:16:fb:a0:bc:97:d0:8a:a7:42:35:
85:cc:ff:ac:11:df:01:05:11:9b:96:45:0e:18:61:2b:d0:5b:
ad:3f:6c:46:b0:9b:a0:0e:60:e7:4e:4e:49:8d:1a:7e:56:4c:
c6:7a:aa:6a:96:3a:d0:4d:d9:17:74:1b:42:59:3c:4c:2a:6e:
78:c6:8e:c2:dc:e0:eb:53:b8:7a:68:e6:27:9e:c9:65:b1:96:
03:a5:b5:49:22:94:89:15:36:bb:02:f1:33:77:8f:b5:9f:d5:
9e:e5:5d:b0:fd:2d:ba:9c:87:ea:a7:b0:31:a4:03:52:ec:ee:
b2:db:12:eb:f9:e0:69:ac:bc:8b:4f:04:4c:8a:d1:bb:51:f5:
e1:e2:29:1a:7b:61:be:73:37:e5:8f:a1:5c:c3:93:f7:bb:c3:
96:25:6a:56:e4:f3:b3:17:ba:c1:39:32:35:1b:0f:5f:2c:59:
35:69:c5:f6:fa:55:e3:e9:76:fe:9e:bc:c4:27:e1:c1:e9:e9:
e1:62:f1:87:31:8f:1c:37:8d:94:58:85:8e:26:e1:d2:a3:a9:
ad:6c:b4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:56 2025 by rpki-client