Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa
File: 326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa (raw, json)
Hash identifier: CWRFk1dX28lIMn2/MWyyJ/tySsp6V6wJ+A0/5zRex+Q=
Subject key identifier: 4D:98:DE:9F:A5:DE:3C:42:1F:3B:22:CC:69:36:67:8E:F1:4B:E0:4C
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 10BB3AF7C95A38F32D8FF36AC903354F88E5454A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa
Signing time: Tue 11 Mar 2025 16:34:18 +0000
ROA not before: Tue 11 Mar 2025 16:29:18 +0000
ROA not after: Tue 10 Mar 2026 16:34:18 +0000
asID: 211780
IP address blocks: 2a05:dfc3:fd20::/44 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bb:3a:f7:c9:5a:38:f3:2d:8f:f3:6a:c9:03:35:4f:88:e5:45:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 11 16:29:18 2025 GMT
Not After : Mar 10 16:34:18 2026 GMT
Subject: CN=4D98DE9FA5DE3C421F3B22CC6936678EF14BE04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:f7:13:89:b2:30:7c:83:cd:d0:41:ea:b8:
83:17:b1:dd:53:1d:28:fb:e1:2b:79:c0:b8:7b:1d:
8e:63:4d:69:01:23:8b:68:19:fb:3a:e7:08:53:58:
ab:24:49:fb:83:e0:6f:94:21:25:7d:d9:02:a1:13:
e4:01:12:0f:ad:78:52:e3:6f:4d:34:c2:ab:ca:29:
49:53:97:cf:38:dd:61:92:19:43:69:6b:1f:27:85:
43:a9:68:42:18:6d:c5:ef:39:e0:89:8a:1f:60:49:
c1:ba:62:cf:e9:0e:27:9c:9a:a9:c3:e9:90:3f:3b:
67:b2:58:76:50:95:d0:f1:bf:48:4b:5c:f5:1e:bc:
f3:47:d4:36:67:80:37:04:cf:66:4b:a9:ce:f7:71:
0a:dd:74:dc:68:c3:e9:63:70:9b:69:04:38:7a:ee:
d4:d4:c8:0a:9b:28:e5:f9:87:52:e8:ea:4e:e3:aa:
ba:29:03:7d:c6:bc:cf:c7:31:46:24:fd:4d:ad:22:
8e:ee:9b:2e:06:0b:8e:11:4c:9b:f0:96:1a:ed:f4:
8e:b9:02:24:aa:f9:45:69:12:10:67:85:79:61:27:
51:ce:65:17:e8:61:bf:03:b8:fc:e9:21:75:fd:99:
ea:2c:6e:09:3d:7a:ae:84:b8:ff:07:bb:19:1d:6b:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:DE:9F:A5:DE:3C:42:1F:3B:22:CC:69:36:67:8E:F1:4B:E0:4C
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666432303a3a2f34342d3532203d3e20323131373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd20::/44
Signature Algorithm: sha256WithRSAEncryption
2b:82:8f:12:cc:5e:dd:19:7c:78:50:ab:d1:69:8b:e4:8b:17:
d3:a7:09:93:1d:77:db:bf:2c:e2:fe:5e:b8:18:1b:71:92:46:
16:64:de:c9:e1:77:6b:77:74:5f:f8:dc:43:88:28:69:db:ea:
f6:f5:26:d1:d5:0a:85:20:b8:e9:b0:6f:e0:a9:89:23:04:97:
da:75:db:75:e5:31:3a:0a:73:bb:ac:08:3e:db:50:a9:6f:77:
9c:f7:65:03:6d:50:80:23:41:3b:65:8b:9d:2c:9d:14:b6:3f:
b3:6d:09:a2:9b:c3:44:a6:e5:17:00:6a:24:f8:1c:60:19:ef:
a4:d3:a0:4d:af:af:5e:cf:cd:77:95:27:ec:c3:14:53:e2:d8:
4a:68:0a:34:59:c6:8a:b3:29:4c:c3:97:6a:e1:cf:3f:65:a7:
76:07:3c:5e:17:27:71:93:9a:26:30:6e:ed:39:c7:a8:43:cb:
00:eb:1b:05:03:47:d2:21:8e:9a:c6:3f:ce:bb:4b:11:2c:6a:
61:82:1a:a8:b6:47:60:8a:b9:4a:82:59:cc:af:87:62:9a:8f:
b1:58:a0:59:57:e4:07:57:d1:28:b9:ba:08:11:02:f3:09:49:
83:a7:35:b5:ca:eb:b9:7e:a3:fe:56:96:63:5c:35:5d:22:70:
ac:6d:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:25 2025 by rpki-client