Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
File: 323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier: ZWuFRtGD+zXxvISsfpQpZ5DPH36K8mlved5taA1ZgyI=
Subject key identifier: B6:A9:11:9F:FD:9E:61:40:26:79:74:6B:E5:F9:8A:30:9C:5C:B0:C1
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 490FEAFCFEEC0F9578AD36680C78E951473F8F20
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:49 +0000
ROA not before: Fri 07 Feb 2025 11:36:49 +0000
ROA not after: Fri 06 Feb 2026 11:41:49 +0000
asID: 47272
IP address blocks: 2602:f96d:980::/42 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0f:ea:fc:fe:ec:0f:95:78:ad:36:68:0c:78:e9:51:47:3f:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:49 2025 GMT
Not After : Feb 6 11:41:49 2026 GMT
Subject: CN=B6A9119FFD9E61402679746BE5F98A309C5CB0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:5e:00:b9:0c:81:a9:77:cd:b4:a4:52:06:
08:2e:45:c4:c3:e1:78:0b:8e:53:e8:ca:d0:60:f8:
9a:d5:db:b5:29:28:5f:f2:6d:d1:7e:89:e8:f8:7f:
cf:88:5c:35:79:ba:38:60:62:3f:b1:33:d9:68:3b:
5f:d4:07:ca:1f:02:dc:c5:a6:5f:40:8a:a9:cf:3e:
7f:61:90:bd:dd:90:a9:d5:ad:97:4f:74:91:e9:44:
9f:db:3d:5b:2e:a9:15:ef:4d:3d:b6:f8:31:65:b8:
34:06:21:30:2f:02:9d:e4:54:ad:c3:9d:67:fb:fd:
02:33:c0:d9:22:2b:9f:b7:e6:47:ee:1a:93:38:f6:
94:5b:f5:9c:6f:d0:ae:95:66:52:3d:a3:d3:39:76:
34:1c:e2:de:08:07:c5:b3:e1:15:17:68:67:de:13:
83:48:4a:f0:18:a3:bd:45:f0:cc:ca:73:7f:9a:e8:
e7:66:e8:72:02:3f:b4:34:0d:57:92:9a:6c:c8:04:
fd:77:25:a0:16:b3:38:ac:e0:49:8d:82:e9:05:66:
a6:28:2b:6e:06:b5:e1:3e:29:b1:2a:f4:c6:e6:6a:
9f:2c:29:40:dc:12:85:e3:de:29:d1:31:b9:8b:38:
ba:e4:9d:a7:78:60:45:d1:ee:e3:69:a9:44:4b:f2:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:11:9F:FD:9E:61:40:26:79:74:6B:E5:F9:8A:30:9C:5C:B0:C1
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:980::/42
Signature Algorithm: sha256WithRSAEncryption
89:f5:6d:78:2f:95:d2:a7:ed:a9:05:d6:a7:3c:d9:9f:0b:77:
59:af:24:a9:69:ca:ca:a2:de:30:74:16:c9:cf:3c:70:24:fe:
46:21:73:f3:02:11:32:7b:15:6f:a8:cc:db:f6:c4:7d:ab:b5:
33:3f:17:20:b4:34:ba:7f:27:b1:a1:fd:f9:f4:45:db:fc:fb:
d5:ee:c6:c4:d6:6d:56:8c:e8:ac:b6:c1:2e:1d:ee:33:fb:e5:
62:94:17:c2:e6:81:0a:78:18:88:74:29:5d:84:63:69:d2:86:
74:39:1b:9d:5d:cc:0e:01:cc:a1:22:a8:56:66:9b:59:13:e8:
fe:ea:f3:09:51:82:90:31:0b:13:36:80:36:cb:e8:77:34:3c:
67:16:02:d5:84:6a:17:42:09:b8:d8:fe:7d:c5:04:f3:15:a2:
31:77:b1:6d:41:d1:d3:c9:f6:99:14:f8:f1:6a:ff:53:57:99:
b4:97:5f:2a:11:ae:9b:e2:79:35:3f:0a:08:7e:91:d8:e7:d9:
83:66:57:f9:7c:02:10:55:b5:82:7d:3e:24:69:04:a1:d3:54:
96:3b:6b:69:fb:e0:fb:69:bd:99:34:c8:e1:e4:fa:15:b2:17:
70:34:da:99:75:e6:3c:f5:63:bf:40:ae:ba:20:49:a5:61:29:
c1:36:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:05 2025 by rpki-client