Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
File: 323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa (raw, json)
Hash identifier: +AJQANn8zhF+ZSh6IH18SF8cEWRM7vqStSNTtpgs9IE=
Subject key identifier: 6E:33:A7:1E:8A:B2:08:59:FD:88:E8:5F:F0:03:E4:7F:95:A7:70:C3
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 543ABA5C682A076AC24BC257D067C44E7B1990D8
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
Signing time: Fri 07 Feb 2025 18:36:23 +0000
ROA not before: Fri 07 Feb 2025 18:31:23 +0000
ROA not after: Fri 06 Feb 2026 18:36:23 +0000
asID: 51939
IP address blocks: 2602:f96d:f20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3a:ba:5c:68:2a:07:6a:c2:4b:c2:57:d0:67:c4:4e:7b:19:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 18:31:23 2025 GMT
Not After : Feb 6 18:36:23 2026 GMT
Subject: CN=6E33A71E8AB20859FD88E85FF003E47F95A770C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:3c:68:74:a1:e1:83:9b:b0:c2:c1:be:a5:
ea:81:f2:dc:de:76:9d:b7:cb:38:2c:f3:d6:6e:71:
e7:f8:d6:0e:d0:3a:fc:e7:77:16:7d:18:45:64:79:
2e:13:2e:fa:b1:61:12:fb:9c:42:d0:f7:3f:fa:f7:
03:bb:ae:b5:3a:64:6d:d1:a4:5b:ce:94:72:ee:45:
43:23:3a:e3:d6:1a:4b:e7:15:00:3e:b2:a9:f1:fa:
c1:53:a9:0a:bc:74:b5:51:9d:01:90:87:77:0a:73:
4c:a6:f1:fb:55:66:4b:e8:d2:83:d9:e5:1e:03:fb:
33:9d:74:60:61:ee:fc:24:ef:9a:bc:7b:af:21:e8:
9a:41:f2:3d:ad:43:8f:59:c4:1f:7f:d8:96:31:47:
5c:c8:00:06:bc:d6:ba:36:32:2d:6e:1d:63:46:f4:
15:83:a3:40:37:88:47:70:18:f0:ed:bd:97:a1:be:
27:d0:9e:3c:7c:55:c6:a5:48:66:47:1b:41:cb:7c:
43:4d:a1:4d:45:28:63:38:40:8a:91:cf:56:2a:1b:
bf:c4:14:97:30:ed:24:62:42:14:bd:ce:26:bf:3a:
c8:a5:31:df:48:8d:85:47:66:c1:98:a7:fe:28:88:
2e:25:b6:bc:c0:ba:74:b7:9c:68:37:84:e8:1a:52:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:A7:1E:8A:B2:08:59:FD:88:E8:5F:F0:03:E4:7F:95:A7:70:C3
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:f20::/44
Signature Algorithm: sha256WithRSAEncryption
7e:82:48:51:a6:e9:d2:01:15:ff:6d:56:2a:ff:ad:bb:14:4a:
85:2b:31:72:2b:f3:90:e6:58:8d:78:9f:b2:cf:65:da:27:07:
2c:ed:f3:f5:68:d0:67:db:f4:a4:9c:2f:59:d0:e2:d6:02:ce:
d8:0e:24:10:f1:64:68:83:ac:13:08:a1:75:b3:da:b5:eb:b8:
b5:e1:69:26:d9:ba:c7:7b:3a:a5:f6:a9:ef:14:23:df:bd:32:
e9:11:e1:76:dd:ba:bf:a4:c4:82:d2:e8:41:79:a9:0a:b9:38:
89:c4:6e:6b:ee:ae:fa:fe:12:58:75:4e:97:c9:43:92:46:00:
1a:5e:34:a1:01:b6:04:b8:ba:8c:ca:47:7c:80:6a:d1:ed:59:
79:5f:f5:75:cf:35:6b:ca:0f:1b:0e:f9:01:f1:c1:c3:3c:83:
45:df:13:65:42:f6:fa:9a:9e:92:bc:a7:18:2d:1d:77:43:c3:
73:68:f0:e4:17:63:b9:8a:05:bd:8a:d8:d7:9d:99:43:ea:a4:
bd:a6:4b:c8:c1:17:75:54:2b:22:d1:a1:69:40:ce:1f:88:a6:
6b:36:7e:ae:71:b9:e1:d0:e3:bf:de:01:16:10:23:f5:ea:77:
1a:3a:51:48:1b:16:10:0a:53:7a:16:b6:fc:f2:33:3d:0a:cd:
18:3e:19:26
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUVDq6XGgqB2rCS8JX0GfETnsZkNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1
NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTgzMTIzWhcNMjYwMjA2MTgzNjIz
WjAzMTEwLwYDVQQDEyg2RTMzQTcxRThBQjIwODU5RkQ4OEU4NUZGMDAzRTQ3Rjk1
QTc3MEMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP08aHSh4YOb
sMLBvqXqgfLc3nadt8s4LPPWbnHn+NYO0Dr853cWfRhFZHkuEy76sWES+5xC0Pc/
+vcDu661OmRt0aRbzpRy7kVDIzrj1hpL5xUAPrKp8frBU6kKvHS1UZ0BkId3CnNM
pvH7VWZL6NKD2eUeA/sznXRgYe78JO+avHuvIeiaQfI9rUOPWcQff9iWMUdcyAAG
vNa6NjItbh1jRvQVg6NAN4hHcBjw7b2Xob4n0J48fFXGpUhmRxtBy3xDTaFNRShj
OECKkc9WKhu/xBSXMO0kYkIUvc4mvzrIpTHfSI2FR2bBmKf+KIguJba8wLp0t5xo
N4ToGlJCDwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFG4zpx6KsghZ/YjoX/AD5H+V
p3DDMB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj
LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3
NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl
NjEyNTY2MWI5MmJkYTcuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy
M2E2NjM5MzY2NDNhNjYzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzUzMTM5
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHBCYC+W0PIDANBgkqhkiG9w0BAQsFAAOCAQEAfoJIUabp
0gEV/21WKv+tuxRKhSsxcivzkOZYjXifss9l2icHLO3z9WjQZ9v0pJwvWdDi1gLO
2A4kEPFkaIOsEwihdbPateu4teFpJtm6x3s6pfap7xQj370y6RHhdt26v6TEgtLo
QXmpCrk4icRua+6u+v4SWHVOl8lDkkYAGl40oQG2BLi6jMpHfIBq0e1ZeV/1dc81
a8oPGw75AfHBwzyDRd8TZUL2+pqekrynGC0dd0PDc2jw5BdjuYoFvYrY152ZQ+qk
vaZLyMEXdVQrItGhaUDOH4imazZ+rnG54dDjv94BFhAj9ep3GjpRSBsWEApTeha2
/PIzPQrNGD4ZJg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:21 2025 by rpki-client