Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa
File: 323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa (raw, json)
Hash identifier: dzEBWzRg4H+3rClz1xjhpKSlOpV0E2o7cAvInJTm0vI=
Subject key identifier: 5E:51:5E:A8:3B:5E:FA:0A:EC:1A:60:C9:29:28:3A:5A:10:1F:24:BD
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 143682C48B6E32981589B75170F5EE30B0BE6C6A
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa
Signing time: Fri 07 Feb 2025 15:10:45 +0000
ROA not before: Fri 07 Feb 2025 15:05:45 +0000
ROA not after: Fri 06 Feb 2026 15:10:45 +0000
asID: 51939
IP address blocks: 2602:f96d:f23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:36:82:c4:8b:6e:32:98:15:89:b7:51:70:f5:ee:30:b0:be:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 15:05:45 2025 GMT
Not After : Feb 6 15:10:45 2026 GMT
Subject: CN=5E515EA83B5EFA0AEC1A60C929283A5A101F24BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:db:a7:01:f2:2f:a6:d5:c0:b2:71:8a:d2:
c4:e7:8c:b1:2a:3f:03:b1:7b:92:24:63:70:50:72:
4e:48:d2:f0:10:b6:dc:ec:b1:20:b2:b0:14:3c:b1:
f4:bb:bf:ff:97:00:20:ee:17:7f:99:81:40:75:5c:
39:6e:3c:56:4e:b1:07:08:a1:d9:c5:21:2e:7e:ee:
47:7e:7a:35:58:70:de:25:50:f8:73:28:b6:2c:2b:
b4:69:eb:e9:8d:2d:67:1b:34:b0:4d:a9:6a:15:f5:
d2:d8:a8:12:88:25:33:bf:63:7a:da:69:e6:72:94:
6a:ec:c4:74:f5:91:d1:98:8c:1d:05:ab:11:8e:cc:
8f:72:c8:4a:d4:17:89:f7:75:ac:50:9a:9a:88:68:
4a:31:7f:4b:45:08:11:66:7d:29:72:39:5f:dc:a1:
7b:a8:8a:40:5a:0e:64:21:d3:49:a0:75:e7:dc:3e:
8c:7c:4e:4d:e7:d1:d0:7d:b2:72:eb:e7:92:6e:6c:
89:38:be:81:7d:92:95:86:d6:18:0e:86:6c:43:ef:
7c:8e:80:d0:a8:a2:a4:6b:76:a0:b3:d0:96:64:4e:
12:03:d2:1a:21:54:12:b9:80:77:16:37:80:87:1e:
72:f2:37:fe:ad:f2:fb:cb:a8:de:83:93:53:8a:41:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:5E:A8:3B:5E:FA:0A:EC:1A:60:C9:29:28:3A:5A:10:1F:24:BD
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:f23::/48
Signature Algorithm: sha256WithRSAEncryption
03:09:27:c2:cf:73:5b:69:9d:a3:49:45:fc:0f:47:ff:5c:96:
dc:6b:0c:f0:79:7f:36:c3:e6:6b:71:d9:c6:3c:4a:23:ab:ad:
6b:34:96:4e:74:e0:69:5b:c0:76:74:c9:7a:b5:80:b1:9b:fc:
2e:3d:2a:19:d4:6f:2a:03:d1:47:61:0d:49:2a:23:54:4f:30:
8e:18:c4:e6:74:b2:9f:73:67:33:d8:ad:95:1e:17:72:be:94:
2c:19:f8:f9:5e:bd:e5:fd:5c:41:24:ba:e1:75:e6:5c:1c:22:
0b:dd:50:dd:8a:7d:b5:ef:d9:75:30:91:e2:a6:ca:81:37:29:
75:29:4a:84:0d:37:ac:c5:48:93:f0:15:f0:81:86:1a:1a:4d:
cd:c9:ee:5c:18:54:47:c0:ac:ca:b9:29:9b:bf:c3:f7:18:af:
76:cf:69:33:41:73:26:4a:af:61:47:42:57:42:c9:8b:c3:a9:
d7:31:c8:5d:6b:84:6a:17:5e:74:7c:7d:8c:dd:d8:bb:c4:f8:
ad:a3:0d:71:48:e2:37:a5:48:3b:26:80:ba:21:2f:01:4e:0f:
f4:e8:5b:05:86:79:e9:44:a4:08:f4:5b:09:77:6b:30:a8:77:
4b:b8:b8:fc:05:c1:e2:73:d9:7c:56:24:e8:22:ab:70:42:f4:
ea:35:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:24 2025 by rpki-client