Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666330303a3a2f34302d3438203d3e203439353831.roa
File: 326130353a646663333a666330303a3a2f34302d3438203d3e203439353831.roa (raw, json)
Hash identifier: Ili0GGLqdZO/t6gUO/TiQ9Vwm+FnM48ay4dB3+eDW3s=
Subject key identifier: D0:BF:2B:A8:C2:F8:7C:DB:9A:CA:91:DC:72:C6:97:43:D0:99:A2:15
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 05C459E5A0C23507D2C6393E203479F224303D9B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666330303a3a2f34302d3438203d3e203439353831.roa
Signing time: Tue 11 Feb 2025 17:21:38 +0000
ROA not before: Tue 11 Feb 2025 17:16:38 +0000
ROA not after: Tue 10 Feb 2026 17:21:38 +0000
asID: 49581
IP address blocks: 2a05:dfc3:fc00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c4:59:e5:a0:c2:35:07:d2:c6:39:3e:20:34:79:f2:24:30:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 11 17:16:38 2025 GMT
Not After : Feb 10 17:21:38 2026 GMT
Subject: CN=D0BF2BA8C2F87CDB9ACA91DC72C69743D099A215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:1f:f8:b1:7e:cb:74:3a:46:11:37:5e:cb:
dd:6d:14:df:f1:d9:22:df:7e:ca:f6:b8:d9:77:e4:
85:55:62:5d:05:24:be:ad:57:5c:00:4a:f1:e5:fd:
38:5d:80:02:8d:b1:a9:2e:1a:26:a9:55:21:c3:7b:
00:35:ad:a4:32:b5:20:40:a2:84:43:e0:5a:13:ff:
24:3e:0d:de:0d:db:1c:fd:57:9b:c4:d0:1b:c7:32:
69:98:7c:f0:0c:87:28:8e:bf:2a:0e:e5:ed:1e:65:
23:e1:61:dd:71:26:1d:13:61:2d:fa:7a:89:d9:43:
8f:b9:bf:3c:aa:f7:49:2f:ff:7e:db:82:7c:6d:a4:
fe:29:75:68:e0:f8:ad:98:cb:b5:50:de:f5:8a:2f:
a1:17:63:15:76:1d:16:f0:54:af:2a:00:8b:fa:c5:
46:8b:c7:b6:ba:0a:ec:e1:b7:8d:74:c2:07:08:0b:
d7:3d:ef:64:4b:a2:91:7b:fb:fd:4a:4f:06:c5:82:
c3:e2:1d:56:07:65:4a:1e:56:e4:b6:9f:8a:e6:98:
c4:1d:e8:bc:19:1a:86:34:02:eb:25:0b:c3:70:15:
37:e0:34:4f:ed:57:43:72:37:6b:49:69:52:36:04:
06:49:42:3a:a6:a5:7a:5b:df:8d:67:e7:a9:00:a9:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:2B:A8:C2:F8:7C:DB:9A:CA:91:DC:72:C6:97:43:D0:99:A2:15
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666330303a3a2f34302d3438203d3e203439353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
81:ff:1b:57:d5:08:ee:aa:30:a5:dd:3a:83:f5:be:7a:00:1e:
83:d8:c9:c2:9b:9b:16:ce:35:59:30:87:0f:64:1c:b5:dd:68:
29:d2:94:a4:ba:60:22:8b:98:8f:9f:84:cd:9b:e3:f9:6e:a5:
ac:d6:39:08:71:45:56:f5:06:43:b8:1d:c2:22:cf:b1:44:b1:
b2:8b:98:52:e3:83:ef:e2:39:1d:ad:12:d6:63:c6:cc:24:c5:
4a:89:20:ea:ae:57:b8:bc:af:98:37:97:5e:17:ba:5b:e0:f7:
8d:09:85:1c:5b:91:15:9f:d4:22:15:f5:74:69:a6:89:e9:09:
3a:a4:6f:13:87:e8:40:fa:8a:e5:3c:99:f6:da:9d:26:e1:12:
3a:c2:35:46:af:38:ab:89:66:cb:8d:5d:fa:2e:26:f2:18:23:
08:bf:fa:62:5f:8e:98:a1:82:2e:c0:27:09:53:a4:6d:f9:ec:
fd:f2:1b:90:2c:d1:04:c6:f2:51:95:b4:db:4a:1e:ec:38:67:
a4:ad:f6:64:da:42:a9:fa:d1:c9:e8:2d:e3:1f:25:11:13:3c:
56:2a:28:83:d9:7e:7a:01:b0:0c:a2:0d:59:46:74:db:4e:81:
5d:8a:55:62:69:a7:a7:29:a4:d1:f2:8a:2d:e6:c5:9b:24:9a:
d1:00:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:24 2025 by rpki-client