Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
File: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier: lBguX5qL60lkOYLO/woLFx0TG9m537DV71JeLaqgZm8=
Subject key identifier: B5:F6:CE:DB:63:85:E3:FF:8C:15:3B:60:19:92:7B:71:93:84:82:DF
Certificate issuer: /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Certificate serial: 56D82252FFED171C24C11EB6F09D0367D7A231A3
Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
Signing time: Tue 25 Feb 2025 03:57:01 +0000
ROA not before: Tue 25 Feb 2025 03:52:01 +0000
ROA not after: Tue 24 Feb 2026 03:57:01 +0000
asID: 50104
IP address blocks: 2a06:a005:d2d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d8:22:52:ff:ed:17:1c:24:c1:1e:b6:f0:9d:03:67:d7:a2:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF
Validity
Not Before: Feb 25 03:52:01 2025 GMT
Not After : Feb 24 03:57:01 2026 GMT
Subject: CN=B5F6CEDB6385E3FF8C153B6019927B71938482DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:6f:11:d0:a5:0c:67:63:9c:e6:1d:7a:93:
d5:c4:aa:90:dd:b8:d5:13:72:e7:29:8f:19:61:e3:
b3:40:fd:37:28:42:88:f7:7e:f8:4a:16:f1:c1:35:
13:bb:a9:43:eb:df:38:db:45:e0:75:ab:49:17:eb:
ef:ca:fa:40:40:1a:74:8e:a5:27:e3:3e:9f:f3:a3:
86:86:cd:a3:4a:2a:2b:51:90:d9:38:88:ae:93:72:
80:4b:75:db:bd:57:dc:29:4c:08:eb:b6:e3:54:f2:
5a:fd:78:7a:bf:61:26:54:28:9f:16:79:91:c6:6f:
2e:4a:74:84:49:24:be:cb:70:6c:ec:95:bf:e1:2c:
d2:0c:d8:d9:9a:20:36:fc:82:20:94:27:b0:64:12:
4f:ca:f4:e6:74:a6:aa:7c:a9:0a:0e:82:09:0e:c0:
e6:0b:06:84:9c:c4:b8:95:0a:e8:b7:ae:04:c3:07:
6c:6f:f6:48:2c:a8:d1:62:7f:ff:ec:b8:34:0a:23:
c3:b8:d1:36:8a:37:d0:3e:c9:52:82:65:42:5e:1a:
bb:ac:ad:c1:f7:10:d1:3d:5b:b7:91:b6:7e:a3:2a:
06:53:37:8f:27:89:18:a2:7a:07:ee:fd:be:c8:3e:
e1:a5:d6:c9:f9:48:75:30:c0:45:4c:70:5c:f6:8a:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:CE:DB:63:85:E3:FF:8C:15:3B:60:19:92:7B:71:93:84:82:DF
X509v3 Authority Key Identifier:
keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2d::/48
Signature Algorithm: sha256WithRSAEncryption
5e:4e:d1:0e:b7:18:ed:32:79:ea:1e:4e:26:08:e3:f6:ca:ac:
4a:f5:20:65:03:8d:19:0f:dc:16:f2:0c:f8:ae:62:e7:9f:41:
07:cb:8b:c5:eb:b2:ee:a6:9f:60:d8:06:10:65:cc:d2:29:f0:
c1:bc:a1:f0:15:b5:2c:68:6a:a0:ac:3a:29:a6:05:1e:26:4d:
42:ec:82:98:c2:2c:ed:5b:0b:e8:77:3e:9d:ee:ae:34:51:31:
c6:dc:ae:f9:3b:91:39:24:4b:80:27:ad:15:1e:44:06:bb:cd:
c9:10:d6:2e:aa:e8:5c:ae:3e:47:2e:65:d2:2a:5e:27:c1:92:
86:c9:53:e9:51:9d:e3:16:ba:07:e9:5c:f5:78:84:7c:8e:42:
df:3a:a8:c3:b7:eb:35:4c:c9:f5:ef:6a:20:05:b6:32:db:f0:
9d:e6:db:f5:b0:35:2d:61:19:7b:3b:0c:42:f0:e8:36:31:4b:
74:54:bd:4b:53:8b:5f:ba:09:77:19:80:92:c4:94:f8:a1:d0:
da:15:aa:6a:bf:e1:53:2d:af:ea:d3:b9:60:d4:4f:a0:27:92:
cc:27:b9:cc:eb:5a:30:a2:d6:e9:67:ed:54:28:a2:db:f6:01:
f4:8f:75:fb:db:e6:7a:53:fe:43:66:b2:7c:37:7d:fc:43:b9:
d3:de:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:35 2025 by rpki-client