Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa
File: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (raw, json)
Hash identifier: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=
Subject key identifier: D6:A4:6C:B9:8C:3D:0F:EA:C6:21:FC:A0:24:1D:80:3C:F8:73:65:62
Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial: 0C80F1493E0324E85B43963497BFA3E1EEE3551E
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa
Signing time: Mon 10 Feb 2025 17:35:30 +0000
ROA not before: Mon 10 Feb 2025 17:30:30 +0000
ROA not after: Mon 09 Feb 2026 17:35:30 +0000
asID: 215296
IP address blocks: 2001:67c:e3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:80:f1:49:3e:03:24:e8:5b:43:96:34:97:bf:a3:e1:ee:e3:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Validity
Not Before: Feb 10 17:30:30 2025 GMT
Not After : Feb 9 17:35:30 2026 GMT
Subject: CN=D6A46CB98C3D0FEAC621FCA0241D803CF8736562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:4d:93:e6:30:ff:51:58:2a:d8:bc:9c:4d:
b8:f5:22:8b:52:af:6b:96:12:fd:09:23:24:4e:c0:
d4:9f:3c:74:af:83:6e:b2:33:fb:e3:81:19:af:ff:
7b:8a:f4:bc:d7:30:04:50:2c:af:ed:e8:6e:1d:0a:
9e:4b:d6:c8:2f:1e:e4:94:3d:6a:5a:84:02:6d:c5:
9d:1a:8e:73:f7:41:ba:56:67:9f:92:b2:c0:05:3d:
0b:9c:af:3a:82:a4:d4:29:17:19:9e:df:70:89:9f:
1e:a9:a5:92:8d:af:e1:36:f0:0d:f4:dd:40:02:ef:
81:ff:c0:96:80:43:fd:cb:a9:1b:d6:8b:bf:ec:17:
1c:7a:30:5f:e9:95:e4:de:1d:ec:f8:6b:0b:bb:5f:
b5:fe:b7:27:2b:5e:d3:fe:76:4b:48:6a:a8:20:ff:
1c:d7:c2:ad:e8:1a:b1:07:93:ee:f6:7d:85:2f:a5:
82:ce:d6:2b:c8:5e:5a:91:62:23:4e:43:a2:11:ff:
8e:33:9f:36:5e:40:6a:59:5e:4b:3f:50:0b:46:da:
79:88:b0:f9:f4:64:88:d4:49:17:66:19:a4:f0:3f:
39:d0:96:62:c5:d6:c9:e7:aa:14:57:00:63:6a:bb:
62:a1:06:bd:fe:71:40:f6:85:59:0d:7c:25:d6:f9:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:6C:B9:8C:3D:0F:EA:C6:21:FC:A0:24:1D:80:3C:F8:73:65:62
X509v3 Authority Key Identifier:
keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e3c::/48
Signature Algorithm: sha256WithRSAEncryption
d0:18:36:17:f4:f0:85:09:fd:47:70:ee:ec:4e:30:ee:12:8a:
aa:65:07:2d:3d:b1:ea:3d:52:34:4d:a7:90:af:74:30:eb:de:
60:23:53:ec:8a:7a:5e:fd:54:ca:62:28:61:d7:d6:d4:7a:91:
b7:8d:55:8c:ca:2c:99:2a:0f:58:a3:34:37:b9:4b:38:3d:2b:
f2:c1:ab:87:4c:c9:12:10:68:ec:96:e4:ea:fe:fb:f6:1b:76:
52:06:a5:5c:71:21:92:ab:4d:cb:de:19:51:8d:f6:a8:38:8d:
a5:50:9d:70:f1:49:a0:00:9a:db:3d:d5:71:49:a7:c7:0a:b9:
7e:6d:49:3f:8c:02:f4:b5:23:ae:d1:83:d0:b8:a6:7e:56:46:
6c:72:2b:34:91:45:fb:2b:c9:aa:66:23:c2:9f:b7:a3:92:14:
8d:22:6f:89:49:6f:64:12:7e:68:56:bb:32:9a:d2:16:94:b9:
05:b2:0a:6e:67:25:b1:c3:af:40:8c:ad:86:37:7f:6f:5f:97:
4f:73:c2:3b:06:be:e2:cf:d9:22:bc:10:b9:12:1a:9e:df:95:
e2:45:37:26:8c:5e:34:dd:7c:0b:8c:55:90:01:48:59:41:8d:
d1:cd:6b:b5:bc:5c:3b:12:f5:fe:c0:05:ea:0c:13:44:85:be:
85:f7:42:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUDIDxST4DJOhbQ5Y0l7+j4e7jVR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1
ODM3MDhiMzAeFw0yNTAyMTAxNzMwMzBaFw0yNjAyMDkxNzM1MzBaMDMxMTAvBgNV
BAMTKEQ2QTQ2Q0I5OEMzRDBGRUFDNjIxRkNBMDI0MUQ4MDNDRjg3MzY1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3k2T5jD/UVgq2LycTbj1IotS
r2uWEv0JIyROwNSfPHSvg26yM/vjgRmv/3uK9LzXMARQLK/t6G4dCp5L1sgvHuSU
PWpahAJtxZ0ajnP3QbpWZ5+SssAFPQucrzqCpNQpFxme33CJnx6ppZKNr+E28A30
3UAC74H/wJaAQ/3LqRvWi7/sFxx6MF/pleTeHez4awu7X7X+tycrXtP+dktIaqgg
/xzXwq3oGrEHk+72fYUvpYLO1ivIXlqRYiNOQ6IR/44znzZeQGpZXks/UAtG2nmI
sPn0ZIjUSRdmGaTwPznQlmLF1snnqhRXAGNqu2KhBr3+cUD2hVkNfCXW+Z8FAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU1qRsuYw9D+rGIfygJB2APPhzZWIwHwYDVR0j
BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1
YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn
M0NMTS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAt
OWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1YWUyLzAvMzIzMDMwMzEzYTM2Mzc2MzNh
NjUzMzYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzIzOTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGfA48MA0GCSqGSIb3DQEBCwUAA4IBAQDQGDYX9PCFCf1HcO7sTjDu
EoqqZQctPbHqPVI0TaeQr3Qw695gI1Psinpe/VTKYihh19bUepG3jVWMyiyZKg9Y
ozQ3uUs4PSvywauHTMkSEGjsluTq/vv2G3ZSBqVccSGSq03L3hlRjfaoOI2lUJ1w
8UmgAJrbPdVxSafHCrl+bUk/jAL0tSOu0YPQuKZ+VkZscis0kUX7K8mqZiPCn7ej
khSNIm+JSW9kEn5oVrsymtIWlLkFsgpuZyWxw69AjK2GN39vX5dPc8I7Br7iz9ki
vBC5Ehqe35XiRTcmjF403XwLjFWQAUhZQY3RzWu1vFw7EvX+wAXqDBNEhb6F90LX
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:20 2025 by rpki-client