Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
File: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (raw, json)
Hash identifier: M5zf5A1HIe6ZgSuYZAMLImNCHk3DEHNtm/NaUyWQCLI=
Subject key identifier: E8:EB:F0:CA:00:B9:F5:8A:EF:28:DD:17:55:0A:3A:28:E5:CD:FE:B8
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E
Certificate serial: 3706F441C670F10F0B8C22284054D33DEA148B82
Authority key identifier: 9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npfU4BjtNOHv_rZcPkdLKz4cuT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
Signing time: Thu 03 Jul 2025 03:52:03 +0000
ROA not before: Thu 03 Jul 2025 03:47:03 +0000
ROA not after: Thu 02 Jul 2026 03:52:03 +0000
asID: 151642
IP address blocks: 2001:df2:c1c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:06:f4:41:c6:70:f1:0f:0b:8c:22:28:40:54:d3:3d:ea:14:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000, serialNumber=9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E
Validity
Not Before: Jul 3 03:47:03 2025 GMT
Not After : Jul 2 03:52:03 2026 GMT
Subject: CN=E8EBF0CA00B9F58AEF28DD17550A3A28E5CDFEB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:fb:7e:24:d7:04:c0:46:9a:b2:41:05:1e:
9a:dd:cb:b1:1d:8a:91:45:bb:9e:f1:40:a1:97:dd:
86:9c:21:46:cc:61:e0:83:93:82:61:3c:89:2e:be:
9d:cc:8b:10:60:9d:a8:5e:6d:41:54:14:52:d9:a4:
92:bd:ac:49:79:9f:a3:8d:68:0a:ff:84:e0:a7:3f:
62:a3:db:74:2d:08:64:eb:ec:ee:9f:78:5e:bf:82:
64:27:88:6d:27:6d:ff:dc:b5:b8:c0:86:7f:43:c8:
ff:a9:52:4e:29:81:ca:32:6a:8a:f3:d9:08:ae:67:
88:15:09:a1:66:50:b0:37:25:27:06:67:a3:18:b6:
b3:82:82:fa:76:2d:f4:b0:72:d5:74:e8:fc:9f:ad:
11:f5:88:e5:f9:c2:e0:7f:6a:30:5d:09:fd:88:81:
52:41:39:78:a7:67:a7:22:08:26:1a:c1:80:a8:6b:
bc:e2:40:97:a2:6f:20:07:96:33:7b:b5:a1:a9:d5:
46:28:a0:91:10:3d:a2:e2:f9:b3:6d:1e:8a:9e:a2:
c0:17:7c:c3:11:6d:c2:d5:40:40:99:ed:0b:c0:59:
a7:e7:87:8f:3e:65:73:14:f8:df:02:6c:95:62:2a:
9c:aa:35:14:20:eb:51:e3:34:b7:28:ad:91:f0:b1:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:F0:CA:00:B9:F5:8A:EF:28:DD:17:55:0A:3A:28:E5:CD:FE:B8
X509v3 Authority Key Identifier:
keyid:9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npfU4BjtNOHv_rZcPkdLKz4cuT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:c1c0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ff:3e:a3:bd:66:98:22:b3:f6:df:f3:40:75:86:ff:bc:fe:
86:78:6e:cf:cb:60:aa:c2:f1:46:c5:7a:82:33:7a:04:61:55:
37:03:da:8e:b9:18:a6:cd:ce:cc:c7:88:e2:ef:a7:7c:52:0a:
3e:6e:b0:74:18:ef:81:f5:48:07:48:bc:58:8b:64:69:3d:0f:
3a:b8:35:a4:cb:4a:9c:23:ea:28:aa:51:e2:68:b0:8b:29:3c:
a8:95:2a:7c:0a:92:7a:38:db:3d:bf:00:82:4a:2e:57:3b:bf:
2f:82:d1:99:65:9d:87:74:01:82:18:13:7f:eb:38:a1:4a:e7:
79:00:d6:c0:60:9f:f2:b0:5d:72:36:22:d4:05:8e:b4:c1:6a:
c7:0e:60:ee:43:13:e5:b5:e1:ef:03:a6:77:9f:47:d3:a0:7c:
78:c4:b8:2d:c6:d6:41:65:6f:13:84:c5:62:5c:d5:82:25:25:
e2:01:3d:b7:73:68:a0:4a:ae:26:06:ec:e6:a1:fe:c2:82:a9:
06:14:30:f4:63:6d:c3:df:ba:34:8a:a9:c7:cd:7b:24:2d:5e:
2b:5f:5a:b1:ba:66:0f:2a:81:42:0f:aa:6a:cb:0b:a7:d3:b8:
5d:89:da:bb:20:4f:b6:d4:a0:62:cc:85:7a:b9:1a:7b:bf:2e:
82:1b:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:36:09 2025 by rpki-client