Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa
File: 326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa (raw, json)
Hash identifier: YpJRZSl9hXYawuYeAciv3gBEu4PSgJGIAQ8r3HP9Xg4=
Subject key identifier: F4:86:01:6A:42:E8:1F:C8:55:99:C7:64:A9:6E:2D:13:37:1E:E7:99
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6F82D1D0F4DDC9BB49A77CEA37F955F923989018
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa
Signing time: Fri 07 Feb 2025 20:19:42 +0000
ROA not before: Fri 07 Feb 2025 20:14:42 +0000
ROA not after: Fri 06 Feb 2026 20:19:42 +0000
asID: 213576
IP address blocks: 2a05:dfc3:fe00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:82:d1:d0:f4:dd:c9:bb:49:a7:7c:ea:37:f9:55:f9:23:98:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 20:14:42 2025 GMT
Not After : Feb 6 20:19:42 2026 GMT
Subject: CN=F486016A42E81FC85599C764A96E2D13371EE799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:98:9b:29:d4:f8:1c:db:f7:9e:66:e0:db:
84:f6:53:62:87:5d:2c:1f:89:ef:5e:d7:19:3b:da:
3c:2e:eb:2c:c1:e8:c1:98:af:35:2d:06:b4:2d:29:
11:7b:a1:4a:90:89:4f:bc:43:66:04:00:6a:fd:bd:
b6:c2:e4:59:0c:00:1f:31:67:ad:73:8b:3e:3a:df:
16:5d:ee:c8:54:7d:80:e1:46:bc:5c:3d:a6:25:ae:
15:62:9a:66:a5:ce:06:50:91:ee:78:50:c3:13:87:
c3:e3:bb:51:61:cc:d4:f7:c3:fc:7d:f8:4e:25:ca:
74:b2:d2:a5:6b:2e:e8:69:99:a1:1a:37:0b:25:33:
f8:54:cd:94:0d:53:9e:87:17:9b:f5:fc:f8:0c:f1:
f4:d3:53:78:29:74:7e:5c:ac:81:06:ad:42:49:4b:
73:a7:d2:b3:88:c4:a2:9b:d7:a5:97:3a:5c:9b:0e:
ed:fe:d4:62:af:7e:6f:ae:e3:b3:58:63:b7:3e:a5:
29:07:29:62:18:77:f3:2c:a7:00:8a:27:57:79:2a:
b9:70:f4:6a:90:d1:be:c3:e2:d3:53:94:e1:ae:c3:
95:67:4d:96:01:f3:47:45:0d:b6:27:75:f8:c6:a2:
8e:de:c1:a0:a0:8e:07:a4:28:a1:bb:4b:cf:0d:6f:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:01:6A:42:E8:1F:C8:55:99:C7:64:A9:6E:2D:13:37:1E:E7:99
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666530303a3a2f34302d3438203d3e20323133353736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
54:30:bb:a4:eb:99:c9:4b:e9:cf:8d:8d:11:6d:8e:fc:ea:a1:
07:26:3a:46:a0:a7:7f:0d:84:6e:e5:f0:85:13:41:12:2c:6c:
aa:c7:4e:22:17:d9:f4:0b:63:3f:6c:f6:03:2a:0a:ad:77:49:
34:4c:73:35:9f:54:b6:37:3e:be:18:e9:29:43:94:1c:52:5e:
62:6e:6a:a4:b9:9c:68:93:a6:ec:88:c2:4b:06:2d:2a:38:0d:
4c:b7:40:87:60:c3:c0:5b:b2:6d:59:5d:98:76:e4:62:56:5d:
83:ab:a1:b2:26:e6:e5:20:c2:1d:55:08:0a:31:01:85:c3:dd:
2c:c8:ca:e5:5c:e7:13:4b:56:87:f6:36:14:17:41:34:88:a7:
b0:1e:31:03:f9:32:5d:4e:28:41:1b:60:0c:59:cb:52:b5:20:
01:53:e7:b7:bf:61:fd:d9:7d:86:72:86:ff:b2:4e:06:46:33:
11:47:72:1a:8c:3d:33:72:3a:1b:95:45:b2:cc:2d:b1:43:ae:
56:54:f9:43:fb:1f:07:39:6d:74:fb:92:e4:ac:6f:f4:88:b3:
fc:1c:7c:ff:a7:4f:15:68:09:e8:61:a3:1a:4e:a7:0c:be:87:
db:a4:00:f1:96:7d:29:97:73:6a:23:16:95:b7:71:f1:0d:fe:
2c:ef:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:46 2025 by rpki-client