Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
File: 323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier: w/EI0pp4KOJfyDw476RZI72dMWuXt3ZO6Zu5QDMPurE=
Subject key identifier: 79:74:37:9A:3E:6F:C0:53:B5:CD:47:C2:FB:ED:B0:A3:99:A0:FA:CD
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 1FE2C92371822B8ECA91CFEEA9E92220311DA723
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:34 +0000
ROA not before: Fri 07 Feb 2025 11:36:34 +0000
ROA not after: Fri 06 Feb 2026 11:41:34 +0000
asID: 47272
IP address blocks: 2602:f96d:300::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e2:c9:23:71:82:2b:8e:ca:91:cf:ee:a9:e9:22:20:31:1d:a7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:34 2025 GMT
Not After : Feb 6 11:41:34 2026 GMT
Subject: CN=7974379A3E6FC053B5CD47C2FBEDB0A399A0FACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:c4:07:bb:0b:8d:81:be:00:8a:91:94:3f:
be:53:4c:de:be:f5:cd:2b:cc:b8:16:0a:c7:92:13:
22:97:e8:64:53:6a:99:50:a5:69:2e:4e:b6:1b:d4:
35:25:51:2e:28:72:bf:45:3a:15:70:72:45:30:c2:
1c:e5:5f:48:97:3d:e5:47:9e:8c:ef:60:30:e1:eb:
eb:93:9e:f0:9a:c2:45:5f:c4:24:5b:d0:6b:df:d9:
ee:1b:6b:8a:a2:0e:b9:64:d6:b2:5a:86:77:ef:3a:
d6:64:91:36:c1:5d:43:2b:03:b3:2d:3a:ce:71:ba:
87:98:a2:a8:c0:03:cf:fe:cc:b7:f7:18:29:4c:2e:
32:24:dd:8e:7a:ec:e2:54:94:24:6a:1b:35:77:06:
92:18:3b:80:7d:5b:0a:76:cf:48:53:11:e0:29:4f:
13:0c:de:b2:e6:9a:7e:cf:f0:d7:36:6e:bc:b6:89:
c9:7f:4c:c4:23:cd:5a:d0:45:03:e2:22:02:1b:94:
d2:e0:ed:30:88:db:50:ba:d2:59:50:27:53:d5:25:
4d:66:1b:6d:e6:3d:d0:e3:cf:37:8a:a3:13:03:85:
0a:3b:e6:ac:f9:a1:8c:15:d7:80:f1:7e:a7:12:e8:
49:a8:ec:b2:e0:dc:af:dd:59:02:1c:ee:f8:61:14:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:37:9A:3E:6F:C0:53:B5:CD:47:C2:FB:ED:B0:A3:99:A0:FA:CD
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:300::/40
Signature Algorithm: sha256WithRSAEncryption
8d:a3:5f:3d:bf:7e:55:ab:1c:24:10:da:76:ab:c3:ca:82:74:
6b:53:28:7e:77:de:c2:ea:de:8c:5f:55:b8:e5:7a:a6:a0:46:
55:fd:51:9b:93:ca:5a:18:c7:ec:31:a8:4c:8b:c1:72:65:c6:
c2:7f:eb:7c:be:a0:d6:67:55:d7:d9:7a:a3:e0:fa:1d:56:f9:
74:c4:18:1f:73:31:2f:21:a1:86:a5:c1:7a:8a:3c:2f:e8:b9:
3f:a3:ba:80:98:fc:c6:c3:d0:d2:4f:a4:2f:83:57:00:c5:02:
bf:b0:44:70:7e:fd:b9:99:bd:87:c1:65:e8:e0:43:ab:50:6e:
61:02:a9:37:12:85:a6:5d:e0:8a:c6:ab:90:61:29:e9:8b:b4:
b9:ed:eb:26:c9:b8:db:e9:e6:f7:62:79:51:51:2a:2a:16:fd:
13:c5:f1:4c:77:8f:44:06:2e:8e:21:97:c4:0f:d6:41:64:56:
f6:e7:47:60:25:b0:0c:d8:c5:41:04:00:5b:ff:48:dd:9f:eb:
2c:b7:41:1c:24:be:92:48:c6:84:6f:81:c4:79:08:d2:c4:59:
f6:25:e4:65:48:25:f1:58:da:e3:d0:4a:50:70:93:70:71:90:
0f:d4:30:45:c7:06:21:64:ec:a7:c2:e9:81:e9:11:2c:be:75:
46:53:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:08:37 2025 by rpki-client