Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa
File: 323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier: tZujUFEpCpfa158Jvf2PUh1FE/EOI984LjuM171xOOM=
Subject key identifier: 53:8F:7B:85:C3:38:EA:4A:E3:C3:74:A8:5C:9D:95:A3:E1:FB:69:34
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 3E88F4DE9CA850ACD1CA1697922794A5F4BE2142
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:39 +0000
ROA not before: Fri 07 Feb 2025 11:36:39 +0000
ROA not after: Fri 06 Feb 2026 11:41:39 +0000
asID: 47272
IP address blocks: 2602:f96d:900::/42 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:88:f4:de:9c:a8:50:ac:d1:ca:16:97:92:27:94:a5:f4:be:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:39 2025 GMT
Not After : Feb 6 11:41:39 2026 GMT
Subject: CN=538F7B85C338EA4AE3C374A85C9D95A3E1FB6934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:42:f5:7a:f4:30:5e:16:c1:53:66:c8:fc:
63:7c:ef:53:e1:74:64:2e:55:35:1f:b3:4e:7d:e7:
16:31:ac:2e:44:fa:b9:cd:1e:c9:02:2a:79:98:a4:
ef:60:a2:26:34:8b:95:55:ed:02:60:b7:c3:d7:eb:
98:14:c5:2c:7f:01:15:eb:b0:51:60:47:9e:f9:1e:
a2:17:f9:28:81:89:c2:b5:2e:a4:a9:16:4d:01:29:
10:eb:fa:d3:d0:c5:a3:c2:06:17:03:8f:59:ec:72:
ca:18:bc:30:2c:56:c8:86:7c:58:cc:0b:bd:68:73:
cc:74:86:a0:63:e3:ea:f5:c3:5d:da:80:7e:60:d2:
88:11:c7:a3:ac:19:7c:91:93:cb:22:ea:37:2f:e5:
18:58:38:d4:63:fc:b9:60:a0:d1:04:6c:73:5a:9b:
cf:85:21:1b:43:3c:11:f4:ab:c4:83:0b:0c:78:e3:
5e:ea:67:91:a2:0e:4b:fb:74:9e:ac:ea:a4:ea:28:
33:bb:83:42:bb:38:30:cb:3f:99:a9:5c:db:e8:e7:
98:de:db:76:52:99:d1:83:62:ec:5b:b4:6a:54:70:
86:59:7d:ac:de:13:91:a9:98:bd:0f:a6:1a:53:63:
c9:b9:3a:41:e2:12:c7:d9:e4:e5:90:b1:d7:ca:b3:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:7B:85:C3:38:EA:4A:E3:C3:74:A8:5C:9D:95:A3:E1:FB:69:34
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:900::/42
Signature Algorithm: sha256WithRSAEncryption
8f:e2:76:ec:7d:83:cc:7b:40:87:c6:5d:a5:0b:f9:32:dc:7b:
41:38:be:1b:7d:b0:7f:19:6d:8d:9e:4d:52:a9:50:6e:8d:6a:
ed:b9:df:14:26:12:7b:59:b0:56:50:44:75:e1:f6:6d:6b:2d:
67:5d:e8:49:eb:a8:d6:88:e8:ae:5b:c8:72:a6:05:f5:31:db:
3c:39:57:14:0e:90:3c:82:16:8f:2e:7d:7a:10:9d:de:ab:61:
de:33:f4:f2:3d:01:9d:1e:5e:41:0f:8c:70:e8:8e:5a:a2:eb:
7d:2f:c4:fe:04:73:f8:09:7a:c0:95:a3:66:aa:b1:bd:f7:ff:
ab:36:9c:6b:b4:5f:41:72:94:c8:9e:bf:65:71:ea:2c:6e:67:
c3:1c:02:e3:d3:9c:0b:10:7f:e0:c9:f5:47:90:d4:5d:7c:e5:
ca:db:97:7f:78:78:21:83:c0:db:4c:24:a5:1d:8f:2c:95:7e:
b1:72:8e:b4:66:d3:00:62:6b:46:c4:6b:3e:19:59:71:08:d1:
f1:22:81:bc:69:dd:92:eb:f7:97:c5:ed:be:0f:c1:fc:8d:c0:
15:64:ae:7b:8c:7c:9c:b1:22:73:26:85:fc:f5:a6:22:71:2f:
f5:98:a0:20:9e:36:61:16:0e:f0:11:9a:27:4b:19:62:3d:d5:
3f:37:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:07 2025 by rpki-client