Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa
File: 323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier: 44dqkNaL0DrBBfrXHrYWoxtP8Gegcg+44Y3OMH+WKvI=
Subject key identifier: 0F:4A:DF:BF:0A:67:90:68:99:58:36:9F:48:91:D5:8D:C0:75:BF:38
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 440C86041C305638277AB5C5CAAC349FBDA507C4
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:29 +0000
ROA not before: Fri 07 Feb 2025 11:36:29 +0000
ROA not after: Fri 06 Feb 2026 11:41:29 +0000
asID: 47272
IP address blocks: 2602:f96d:200::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0c:86:04:1c:30:56:38:27:7a:b5:c5:ca:ac:34:9f:bd:a5:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:29 2025 GMT
Not After : Feb 6 11:41:29 2026 GMT
Subject: CN=0F4ADFBF0A6790689958369F4891D58DC075BF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:09:a8:97:de:bf:eb:80:52:70:fd:72:1f:
76:4d:18:68:24:29:4d:f3:dd:f3:1c:9a:d2:6c:0e:
48:f3:01:46:b9:b7:61:74:3f:d1:46:b9:be:08:ae:
d4:ab:0b:2a:a4:31:c2:3b:52:e2:83:e0:80:eb:f2:
4e:01:15:4c:60:c5:96:98:1e:f5:ec:ff:ab:3a:06:
fe:1b:15:09:57:43:56:eb:e7:fc:69:fb:2f:19:61:
f1:27:bf:ea:9b:bc:78:0e:7e:52:56:6f:64:3e:23:
8a:96:68:aa:3a:42:bc:45:78:fa:5d:f0:95:fa:da:
8c:6a:9b:0e:23:7d:bf:95:a3:b7:37:e0:e4:54:d3:
fe:8a:00:87:a7:9c:da:7a:f4:d0:22:fd:87:56:0e:
4e:45:b5:5b:3e:41:2f:8c:5f:ff:47:dd:6a:1f:f2:
25:b9:ee:40:63:06:d7:49:b0:80:68:1e:b7:a8:52:
e8:0d:7e:de:c3:71:a8:2c:d2:8e:5c:13:c1:54:d5:
fd:98:7e:9e:4f:fe:08:75:71:a4:c5:21:c5:ae:32:
f2:0d:f7:6b:d5:69:ee:c5:4f:67:8c:73:f5:6d:6e:
3e:b3:bd:16:fb:75:b3:40:6e:6c:9b:e0:0d:56:92:
d9:e4:7d:7a:cc:19:9d:21:81:2f:85:25:41:71:dd:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:DF:BF:0A:67:90:68:99:58:36:9F:48:91:D5:8D:C0:75:BF:38
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:200::/40
Signature Algorithm: sha256WithRSAEncryption
77:44:75:3b:e6:a8:32:35:35:d9:de:3c:7b:82:cc:46:dd:41:
73:d3:8f:9a:20:3d:2f:2c:35:54:09:8e:d0:f3:90:99:ef:3d:
40:94:43:72:ef:c7:74:5f:ee:a1:9e:74:2d:1e:42:2d:f0:62:
85:00:c9:c3:eb:02:4b:d8:a0:05:70:cf:f0:39:8e:03:bb:1d:
67:4a:c7:b2:c0:3f:ac:d3:78:7c:04:3b:d0:c5:96:f6:50:74:
c1:77:03:6e:03:d1:5a:f8:a3:ca:d8:b6:cb:a9:ff:1c:52:f1:
56:0c:a3:4c:6f:85:da:84:39:3e:e9:f6:a1:95:e5:6c:ea:c2:
f7:12:54:50:56:a4:6d:05:6d:37:7d:5f:71:b2:94:91:4f:45:
16:a4:ca:74:26:d5:d0:4f:90:be:03:cb:67:f7:ab:9e:dd:b9:
d3:f6:4e:cb:e7:53:7a:5b:7b:41:04:69:45:4b:d7:8a:20:03:
a1:d3:5c:63:4f:e3:b9:bf:15:5d:07:e0:8f:22:e7:82:e1:d3:
d3:f2:69:7c:6c:2a:08:6d:f4:08:0f:84:46:95:06:5d:2d:b7:
60:86:04:0b:66:94:46:87:07:60:62:00:fa:40:54:f5:8f:8f:
83:aa:78:9d:f4:f7:7c:e3:9f:b1:05:bb:ff:03:08:eb:6a:ad:
aa:1a:28:14
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIURAyGBBwwVjgnerXFyqw0n72lB8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1
NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTEzNjI5WhcNMjYwMjA2MTE0MTI5
WjAzMTEwLwYDVQQDEygwRjRBREZCRjBBNjc5MDY4OTk1ODM2OUY0ODkxRDU4REMw
NzVCRjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tMJqJfev+uA
UnD9ch92TRhoJClN893zHJrSbA5I8wFGubdhdD/RRrm+CK7UqwsqpDHCO1Lig+CA
6/JOARVMYMWWmB717P+rOgb+GxUJV0NW6+f8afsvGWHxJ7/qm7x4Dn5SVm9kPiOK
lmiqOkK8RXj6XfCV+tqMapsOI32/laO3N+DkVNP+igCHp5zaevTQIv2HVg5ORbVb
PkEvjF//R91qH/Ilue5AYwbXSbCAaB63qFLoDX7ew3GoLNKOXBPBVNX9mH6eT/4I
dXGkxSHFrjLyDfdr1WnuxU9njHP1bW4+s70W+3WzQG5sm+ANVpLZ5H16zBmdIYEv
hSVBcd0umwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFA9K378KZ5BomVg2n0iR1Y3A
db84MB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj
LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3
NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl
NjEyNTY2MWI5MmJkYTcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy
M2E2NjM5MzY2NDNhMzIzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAzNDM3
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYAJgL5bQIwDQYJKoZIhvcNAQELBQADggEBAHdEdTvm
qDI1NdnePHuCzEbdQXPTj5ogPS8sNVQJjtDzkJnvPUCUQ3Lvx3Rf7qGedC0eQi3w
YoUAycPrAkvYoAVwz/A5jgO7HWdKx7LAP6zTeHwEO9DFlvZQdMF3A24D0Vr4o8rY
tsup/xxS8VYMo0xvhdqEOT7p9qGV5WzqwvcSVFBWpG0FbTd9X3GylJFPRRakynQm
1dBPkL4Dy2f3q57dudP2TsvnU3pbe0EEaUVL14ogA6HTXGNP47m/FV0H4I8i54Lh
09PyaXxsKght9AgPhEaVBl0tt2CGBAtmlEaHB2BiAPpAVPWPj4OqeJ3093zjn7EF
u/8DCOtqraoaKBQ=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:06 2025 by rpki-client