Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
File: 323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa (raw, json)
Hash identifier: qeaVhFpgbPNVS1ZkMkhjdk4NGvBiDWEKOImwTmKZnJY=
Subject key identifier: 3B:E6:69:FF:99:63:CF:F1:D8:7F:73:A6:16:C7:A1:70:87:84:95:CF
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 34DE89402DF5AA9EB637A33AE2F7C8217A5C614D
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:57 +0000
ROA not before: Fri 07 Feb 2025 11:36:57 +0000
ROA not after: Fri 06 Feb 2026 11:41:57 +0000
asID: 47272
IP address blocks: 2602:f96d:f00::/44 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:de:89:40:2d:f5:aa:9e:b6:37:a3:3a:e2:f7:c8:21:7a:5c:61:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:57 2025 GMT
Not After : Feb 6 11:41:57 2026 GMT
Subject: CN=3BE669FF9963CFF1D87F73A616C7A170878495CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:cd:1a:9a:b9:2c:21:75:97:8c:15:a2:9c:
dc:cd:96:0a:91:4b:fb:e3:a6:ee:e5:a1:96:04:4f:
3a:40:ff:ad:61:6f:a3:42:24:6b:b7:1e:fe:9a:80:
3a:df:2d:f1:26:40:59:fc:4f:a0:93:e3:5a:f6:95:
15:c6:8e:66:63:7a:33:e8:ed:95:ec:23:42:62:73:
6a:08:2f:8b:e0:4a:75:a0:6d:9c:11:fa:cc:8d:7d:
e1:c4:99:b2:c1:3b:2f:7e:54:d9:73:a2:6f:c7:cf:
d7:3e:4e:8f:29:b1:02:42:fe:04:ae:fa:cd:41:1a:
36:c0:78:f3:68:f0:c6:70:cf:31:a8:bb:7f:78:f8:
90:a1:ce:e4:0c:dc:d0:5a:8d:a8:ee:01:33:fa:d2:
51:4e:d1:cf:99:a6:86:19:0b:92:2a:ac:ff:13:6e:
06:0a:71:c6:48:61:0c:fb:f0:01:a8:9d:df:45:c7:
e4:54:fa:0e:16:46:f5:37:e3:07:dd:fb:d3:ee:17:
6c:6e:3b:ff:43:f9:78:fb:57:68:e2:b2:4a:d2:6e:
08:48:ce:42:ca:04:95:e2:61:b8:83:7c:c9:34:7e:
33:a5:4f:d9:31:71:e1:de:5b:09:e1:ac:54:dd:5e:
8b:87:4e:e5:d2:4f:a4:4d:2f:4e:83:5a:23:16:f4:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:69:FF:99:63:CF:F1:D8:7F:73:A6:16:C7:A1:70:87:84:95:CF
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:f00::/44
Signature Algorithm: sha256WithRSAEncryption
01:0e:9f:df:ab:95:f4:59:38:f8:b8:44:ee:29:d3:12:9b:38:
6e:00:ac:82:d1:5f:43:36:bf:2d:e9:a6:ae:c4:9a:5c:2e:69:
fb:bc:45:9d:b3:bf:7a:32:07:5a:eb:09:98:02:1b:3b:da:d2:
74:b5:1f:16:55:24:7f:6a:3d:77:35:84:4d:43:76:5b:6a:c4:
a2:02:13:08:9b:ba:78:4e:8d:d0:93:af:f1:c3:9a:0f:12:30:
73:50:70:eb:4d:bb:8d:95:d3:4e:78:6d:f1:eb:d5:8c:59:3b:
ee:04:88:4e:f8:c2:8b:d0:c6:cf:6f:80:0e:db:98:e2:f1:f0:
0a:ac:34:53:fd:d5:a2:16:73:43:98:85:b3:ce:07:bb:7d:1d:
73:75:77:82:04:d0:34:2d:da:0a:fc:4e:89:3a:5f:25:57:76:
4e:2b:42:b1:88:23:8c:7c:5d:37:69:23:27:da:b0:f3:b3:4b:
75:62:c0:0b:31:ce:e2:d2:c6:9a:59:d3:f2:df:08:53:09:ae:
2a:2d:64:7b:5c:a8:bb:8e:23:fc:7a:43:89:0b:91:5a:ad:d5:
b8:e1:76:88:1f:f9:9d:8a:3e:42:e0:5e:13:6d:5c:29:e5:02:
e1:3d:87:2b:2f:98:c4:84:54:a7:7f:9b:7c:d6:e3:9e:01:b1:
6d:23:2e:36
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUNN6JQC31qp62N6M64vfIIXpcYU0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1
NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTEzNjU3WhcNMjYwMjA2MTE0MTU3
WjAzMTEwLwYDVQQDEygzQkU2NjlGRjk5NjNDRkYxRDg3RjczQTYxNkM3QTE3MDg3
ODQ5NUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx83NGpq5LCF1
l4wVopzczZYKkUv746bu5aGWBE86QP+tYW+jQiRrtx7+moA63y3xJkBZ/E+gk+Na
9pUVxo5mY3oz6O2V7CNCYnNqCC+L4Ep1oG2cEfrMjX3hxJmywTsvflTZc6Jvx8/X
Pk6PKbECQv4ErvrNQRo2wHjzaPDGcM8xqLt/ePiQoc7kDNzQWo2o7gEz+tJRTtHP
maaGGQuSKqz/E24GCnHGSGEM+/ABqJ3fRcfkVPoOFkb1N+MH3fvT7hdsbjv/Q/l4
+1do4rJK0m4ISM5CygSV4mG4g3zJNH4zpU/ZMXHh3lsJ4axU3V6Lh07l0k+kTS9O
g1ojFvSMvwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFDvmaf+ZY8/x2H9zphbHoXCH
hJXPMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj
LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3
NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl
NjEyNTY2MWI5MmJkYTcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy
M2E2NjM5MzY2NDNhNjYzMDMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzNDM3
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEJgL5bQ8AMA0GCSqGSIb3DQEBCwUAA4IBAQABDp/f
q5X0WTj4uETuKdMSmzhuAKyC0V9DNr8t6aauxJpcLmn7vEWds796Mgda6wmYAhs7
2tJ0tR8WVSR/aj13NYRNQ3ZbasSiAhMIm7p4To3Qk6/xw5oPEjBzUHDrTbuNldNO
eG3x69WMWTvuBIhO+MKL0MbPb4AO25ji8fAKrDRT/dWiFnNDmIWzzge7fR1zdXeC
BNA0LdoK/E6JOl8lV3ZOK0KxiCOMfF03aSMn2rDzs0t1YsALMc7i0saaWdPy3whT
Ca4qLWR7XKi7jiP8ekOJC5FardW44XaIH/mdij5C4F4TbVwp5QLhPYcrL5jEhFSn
f5t81uOeAbFtIy42
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:29 2025 by rpki-client