Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa
File: 323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: EHXH5+qBCyNIbppIr7Q2DSQiSROUG8MKqQ9XvdjXReg=
Subject key identifier: 7B:B6:AD:AF:A2:62:F6:FF:02:13:6D:9F:0C:50:22:C5:73:CA:E8:BD
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 0300FB5F81AFB7D12217ED14E07629A7A80BDEF9
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:42:14 +0000
ROA not before: Fri 07 Feb 2025 11:37:14 +0000
ROA not after: Fri 06 Feb 2026 11:42:14 +0000
asID: 47272
IP address blocks: 2602:f96d:ffd::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:00:fb:5f:81:af:b7:d1:22:17:ed:14:e0:76:29:a7:a8:0b:de:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:37:14 2025 GMT
Not After : Feb 6 11:42:14 2026 GMT
Subject: CN=7BB6ADAFA262F6FF02136D9F0C5022C573CAE8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:74:41:27:ec:04:23:b5:a7:d7:c2:3b:a3:
f4:dc:11:fc:93:9e:aa:24:67:b7:cf:90:5a:57:e9:
62:c9:83:a4:b2:88:83:04:b8:4f:d4:9d:c3:2a:4a:
15:28:6f:74:d0:cd:b1:fa:fc:ad:91:77:9f:9f:50:
24:af:36:eb:1d:40:42:6a:04:b6:56:a4:e9:68:0f:
34:03:b4:1d:f4:63:49:5c:a5:e9:5a:16:2e:53:60:
b5:eb:5e:27:49:24:88:51:ea:97:48:7e:5a:fc:69:
55:17:17:a0:51:bd:b5:15:b5:ed:19:ce:2b:fc:23:
b0:a7:53:6b:05:62:a9:90:29:b8:51:f1:75:8f:be:
d0:f9:98:ec:b1:24:84:70:f9:a6:7f:19:d7:57:2e:
84:fd:18:52:4b:cf:8e:67:a7:1e:78:ab:e0:ae:20:
e5:0d:8c:bc:6b:f3:6d:61:08:0d:cc:e5:b2:f8:ee:
63:c7:60:53:04:5d:93:c1:03:b7:1a:fa:68:2a:87:
de:f3:4b:a8:53:2a:d2:8f:1c:53:9a:33:5c:ac:e4:
77:5c:a4:d3:61:c9:b6:17:13:57:8c:b2:eb:37:bb:
ea:a5:b9:ad:14:ed:b0:06:59:f3:e0:d2:ae:4e:07:
6d:74:0c:9a:3b:58:f7:4b:f4:30:85:94:55:32:6f:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:AD:AF:A2:62:F6:FF:02:13:6D:9F:0C:50:22:C5:73:CA:E8:BD
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:ffd::/48
Signature Algorithm: sha256WithRSAEncryption
37:a1:3d:f0:2d:87:e1:5f:e2:e6:8a:52:01:dd:34:45:f2:eb:
2e:f9:6d:30:98:55:11:17:33:e0:ad:ac:2a:d1:94:ab:ab:9b:
54:28:31:b0:dc:f6:23:77:40:3f:35:3a:34:c4:e2:f8:8a:d7:
9b:34:64:24:52:4c:fa:85:07:92:b0:a9:c1:e7:17:d9:aa:f1:
c6:6e:6d:b9:75:97:f3:f5:b4:bf:2b:91:8d:0d:f5:b0:8d:46:
f5:5b:37:c5:55:d4:08:f2:c0:aa:fa:18:7f:f0:d3:40:e5:42:
e0:1f:36:27:80:8c:2d:5c:02:55:7b:ef:2e:64:76:86:53:51:
bc:71:51:53:63:04:dc:fc:54:c3:79:36:e9:a7:83:76:e9:35:
29:71:5a:a7:9d:25:57:ac:d0:51:c2:a6:6e:2b:1a:29:8d:02:
12:e8:9f:fa:7a:b3:65:40:11:49:09:5a:8a:1d:4a:d6:58:94:
24:02:e9:18:c5:27:ea:82:34:c6:d2:ab:68:74:f9:43:a5:d6:
e9:5e:98:ad:f9:1e:5e:ac:fb:6e:e4:8d:28:45:de:a5:63:fb:
01:8b:2a:a6:7f:7d:c8:69:a4:b4:c6:bf:57:30:64:e1:7b:3a:
db:89:db:79:1f:a8:b4:94:66:26:a2:ff:f7:1f:11:ee:7b:05:
14:5f:83:04
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUAwD7X4Gvt9EiF+0U4HYpp6gL3vkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1
NGJlNjEyNTY2MWI5MmJkYTcwHhcNMjUwMjA3MTEzNzE0WhcNMjYwMjA2MTE0MjE0
WjAzMTEwLwYDVQQDEyg3QkI2QURBRkEyNjJGNkZGMDIxMzZEOUYwQzUwMjJDNTcz
Q0FFOEJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcB0QSfsBCO1
p9fCO6P03BH8k56qJGe3z5BaV+liyYOksoiDBLhP1J3DKkoVKG900M2x+vytkXef
n1AkrzbrHUBCagS2VqTpaA80A7Qd9GNJXKXpWhYuU2C1614nSSSIUeqXSH5a/GlV
FxegUb21FbXtGc4r/COwp1NrBWKpkCm4UfF1j77Q+ZjssSSEcPmmfxnXVy6E/RhS
S8+OZ6ceeKvgriDlDYy8a/NtYQgNzOWy+O5jx2BTBF2TwQO3GvpoKofe80uoUyrS
jxxTmjNcrOR3XKTTYcm2FxNXjLLrN7vqpbmtFO2wBlnz4NKuTgdtdAyaO1j3S/Qw
hZRVMm9FsQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFHu2ra+iYvb/AhNtnwxQIsVz
yui9MB8GA1UdIwQYMBaAFCT12kjDr7yg/9khVH7wn3dq+KLqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZj
LTljOWYzODk4OTk1ZC8xLzI0RjVEQTQ4QzNBRkJDQTBGRkQ5MjE1NDdFRjA5Rjc3
NkFGOEEyRUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJl
NjEyNTY2MWI5MmJkYTcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4OTk1ZC8xLzMyMzYzMDMy
M2E2NjM5MzY2NDNhNjY2NjY0M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzNDM3
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAJgL5bQ/9MA0GCSqGSIb3DQEBCwUAA4IBAQA3oT3w
LYfhX+LmilIB3TRF8usu+W0wmFURFzPgrawq0ZSrq5tUKDGw3PYjd0A/NTo0xOL4
itebNGQkUkz6hQeSsKnB5xfZqvHGbm25dZfz9bS/K5GNDfWwjUb1WzfFVdQI8sCq
+hh/8NNA5ULgHzYngIwtXAJVe+8uZHaGU1G8cVFTYwTc/FTDeTbpp4N26TUpcVqn
nSVXrNBRwqZuKxopjQIS6J/6erNlQBFJCVqKHUrWWJQkAukYxSfqgjTG0qtodPlD
pdbpXpit+R5erPtu5I0oRd6lY/sBiyqmf33IaaS0xr9XMGThezrbidt5H6i0lGYm
ov/3HxHuewUUX4ME
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:25 2025 by rpki-client