Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa
File: 323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: KAN80sbwQ+zymxwiXxfy/i1T6WF0TEMtiVqdT5TpTTw=
Subject key identifier: 9B:25:39:81:75:57:6E:9B:B6:55:1C:13:C0:D3:5E:83:F6:DA:91:2C
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 542F8AC06F1B03D3BC2277EF27233142E01E98FB
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:42:10 +0000
ROA not before: Fri 07 Feb 2025 11:37:10 +0000
ROA not after: Fri 06 Feb 2026 11:42:10 +0000
asID: 47272
IP address blocks: 2602:f96d:ffb::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2f:8a:c0:6f:1b:03:d3:bc:22:77:ef:27:23:31:42:e0:1e:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:37:10 2025 GMT
Not After : Feb 6 11:42:10 2026 GMT
Subject: CN=9B25398175576E9BB6551C13C0D35E83F6DA912C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:9f:77:e3:da:c4:24:87:14:3e:b4:8d:f7:
d8:0e:cf:1c:fb:12:08:25:3a:a9:76:e3:0f:11:bb:
d7:0b:78:86:96:11:5e:d6:68:cb:d4:00:c8:ad:8d:
cb:fd:44:55:63:91:70:9c:12:0c:95:9f:8a:1d:04:
32:c5:68:7e:41:56:a8:bc:63:49:51:6f:42:b5:54:
96:00:a2:28:c3:d4:41:01:aa:13:98:ca:91:f6:24:
41:9e:b7:01:cc:7a:9c:7b:81:4a:2b:b4:3e:47:8d:
15:6c:34:a0:3b:16:98:ff:08:aa:32:b4:ba:6e:8d:
9e:44:4d:c9:cd:98:1a:84:b5:a7:0f:18:26:40:f8:
b2:74:ae:2d:22:46:cc:ad:9c:fa:54:56:e0:cc:59:
f7:f2:13:9c:0a:02:38:fc:c1:1e:14:44:83:f8:cd:
49:c8:d8:7d:8a:d2:53:1d:de:51:27:3c:5d:40:e6:
dc:ba:ed:3e:e1:b6:30:ac:30:69:56:7c:7b:cf:b8:
73:f5:1f:ba:ac:d2:8f:26:b3:d7:5b:38:7d:d9:14:
bb:9b:99:82:e0:07:6a:e8:16:c9:f0:5f:86:70:3d:
60:32:de:0b:b4:fc:6c:e3:1b:3a:e4:1c:ad:e0:ac:
eb:4e:f6:11:42:20:3d:f3:7c:1e:8c:03:2f:01:22:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:39:81:75:57:6E:9B:B6:55:1C:13:C0:D3:5E:83:F6:DA:91:2C
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:ffb::/48
Signature Algorithm: sha256WithRSAEncryption
90:4f:dc:b7:86:53:ff:29:a5:db:63:70:e6:ef:09:68:61:5e:
99:62:be:88:d1:f2:16:0e:b0:ec:0c:a4:b5:94:71:c3:22:fe:
86:ed:9e:c4:81:8b:6d:09:df:77:30:03:b8:cc:fa:8a:f4:dd:
2a:be:93:8d:cb:73:77:93:53:ba:3a:60:d7:71:30:01:f8:2b:
84:62:a0:20:32:2e:84:95:92:68:68:91:ca:f8:61:06:0c:25:
33:ee:ad:d3:ad:9b:0f:6c:1f:cf:70:30:64:99:10:44:ef:c4:
7c:92:b0:7c:c8:50:89:fb:53:4c:f9:31:93:71:4a:c1:14:1b:
09:94:1f:ee:99:15:f5:13:67:e7:06:1e:11:d2:19:42:98:1c:
7c:da:10:92:66:9e:8d:1f:d4:4f:a2:a2:80:92:fa:d9:95:da:
61:47:83:a3:5d:e5:b7:b8:9e:5a:e5:1a:4c:cd:4e:34:43:93:
b1:4f:02:54:44:b4:a6:f6:59:86:1a:55:b6:0d:f4:13:9c:a6:
95:0e:77:77:a7:52:ef:0e:b6:f7:95:72:c9:e2:99:21:58:83:
f9:48:a3:eb:56:4b:9f:e2:be:37:1a:b7:d1:10:d2:fa:7f:f0:
ba:35:ca:f9:df:a1:e0:36:c0:e4:d2:2d:ca:72:d6:b3:02:0b:
0f:dd:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:04 2025 by rpki-client