Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e203437323732.roa
File: 326130363a313238343a3a2f33322d3332203d3e203437323732.roa (raw, json)
Hash identifier: qv+D7Xn94AqIAz9v04cCzrDiNRjRVJI7hI3hwc68ge8=
Subject key identifier: 01:82:9B:0E:E4:FB:F3:9C:A3:20:F8:0B:1B:24:20:07:75:A0:39:99
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 43F796E1E62301F86169F764C8A49771DF4949C1
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:23 +0000
ROA not before: Fri 07 Feb 2025 19:08:23 +0000
ROA not after: Fri 06 Feb 2026 19:13:23 +0000
asID: 47272
IP address blocks: 2a06:1284::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f7:96:e1:e6:23:01:f8:61:69:f7:64:c8:a4:97:71:df:49:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:23 2025 GMT
Not After : Feb 6 19:13:23 2026 GMT
Subject: CN=01829B0EE4FBF39CA320F80B1B24200775A03999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:03:ba:32:07:4a:27:4e:1a:49:1f:4c:e6:
49:1f:fb:86:c2:26:ff:5a:7d:a9:d4:19:ec:6d:11:
75:77:33:68:5c:fb:24:1d:d5:3e:c2:77:2a:e7:c5:
58:df:bf:e6:c7:5f:81:0c:56:56:15:8c:93:94:76:
ac:57:2a:a1:a2:6d:ef:8e:c6:56:ad:0c:a5:a9:08:
07:ed:07:f2:16:63:7e:2e:57:9d:0e:3f:25:63:d0:
7c:03:60:a2:6e:63:aa:3c:11:6a:e7:75:f8:f8:ea:
01:34:34:85:a5:67:3d:27:64:ca:d8:4d:0b:d1:68:
89:ea:65:b9:2b:e9:52:19:ac:4c:cc:43:b3:ce:a0:
d3:15:17:e3:6a:70:38:71:8d:38:98:1f:5a:9e:5e:
ac:f6:52:f3:22:a4:3f:9d:81:ab:d5:40:a9:6e:f1:
02:c6:4b:57:cf:e4:82:e5:1b:15:37:e3:ff:d1:41:
1b:9a:38:44:ea:b2:f9:dc:90:6d:7e:f8:e7:02:2f:
75:c8:bf:14:cf:92:f5:00:21:70:08:c3:89:0d:d4:
fa:c8:de:49:86:2d:a3:38:77:84:fe:ee:ef:e6:ff:
2f:6b:24:d0:c9:6d:7d:07:84:08:cb:0b:04:5f:3a:
8d:3a:8e:15:5d:7b:cb:e7:97:16:14:e1:92:d3:c3:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:9B:0E:E4:FB:F3:9C:A3:20:F8:0B:1B:24:20:07:75:A0:39:99
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130363a313238343a3a2f33322d3332203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1284::/32
Signature Algorithm: sha256WithRSAEncryption
93:0d:6b:68:a4:d5:b6:27:ea:c2:1a:d3:78:91:cf:86:54:ab:
1d:31:cb:db:2b:d5:67:6f:5e:41:0f:09:50:4d:d4:f4:6d:fe:
9e:cd:26:ef:5e:70:99:67:e8:69:5e:a6:1f:46:d7:b6:32:be:
1c:15:1e:bc:6a:ff:0f:b0:03:81:83:b7:9b:dc:d2:ce:9e:7e:
65:ad:c1:80:5a:8f:b4:a0:3f:35:ca:4a:b5:b2:77:2d:7c:a6:
73:af:2c:c1:3e:7c:1c:38:18:33:c3:bc:90:3b:82:55:32:8c:
7a:f1:aa:31:1f:4c:5d:ec:e4:ae:cd:22:b5:f6:0e:d7:a6:16:
d8:91:c3:8f:84:dd:b4:b0:c3:b5:6a:6d:1c:ba:b6:fc:a1:94:
c3:39:c4:b2:78:c5:e1:29:22:86:87:ee:96:d4:e2:bc:ab:86:
a6:1d:82:b7:87:fa:c1:a6:8f:99:5a:6b:3b:f6:56:11:97:5f:
56:16:4e:a0:ae:c1:92:69:58:d4:a4:24:89:48:4c:e9:aa:e8:
02:0b:0d:bc:0d:61:85:c5:e5:0d:59:3b:4b:40:58:7e:db:60:
03:ae:b3:65:61:f7:8e:e5:4a:c3:fb:fd:16:e9:46:07:3b:a6:
ed:4d:8a:f7:2f:07:a4:7b:25:13:4b:0c:25:9c:77:d5:23:26:
ee:8c:1f:34
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUQ/eW4eYjAfhhafdkyKSXcd9JScEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjNaFw0yNjAyMDYxOTEzMjNaMDMxMTAvBgNV
BAMTKDAxODI5QjBFRTRGQkYzOUNBMzIwRjgwQjFCMjQyMDA3NzVBMDM5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4gO6MgdKJ04aSR9M5kkf+4bC
Jv9afanUGextEXV3M2hc+yQd1T7CdyrnxVjfv+bHX4EMVlYVjJOUdqxXKqGibe+O
xlatDKWpCAftB/IWY34uV50OPyVj0HwDYKJuY6o8EWrndfj46gE0NIWlZz0nZMrY
TQvRaInqZbkr6VIZrEzMQ7POoNMVF+NqcDhxjTiYH1qeXqz2UvMipD+dgavVQKlu
8QLGS1fP5ILlGxU34//RQRuaOETqsvnckG1++OcCL3XIvxTPkvUAIXAIw4kN1PrI
3kmGLaM4d4T+7u/m/y9rJNDJbX0HhAjLCwRfOo06jhVde8vnlxYU4ZLTw2szAgMB
AAGjggJsMIICaDAdBgNVHQ4EFgQUAYKbDuT785yjIPgLGyQgB3WgOZkwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzYzYTMxMzIzODM0
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzNzMyMzczMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoG
EoQwDQYJKoZIhvcNAQELBQADggEBAJMNa2ik1bYn6sIa03iRz4ZUqx0xy9sr1Wdv
XkEPCVBN1PRt/p7NJu9ecJln6Gleph9G17YyvhwVHrxq/w+wA4GDt5vc0s6efmWt
wYBaj7SgPzXKSrWydy18pnOvLME+fBw4GDPDvJA7glUyjHrxqjEfTF3s5K7NIrX2
DtemFtiRw4+E3bSww7VqbRy6tvyhlMM5xLJ4xeEpIoaH7pbU4ryrhqYdgreH+sGm
j5laazv2VhGXX1YWTqCuwZJpWNSkJIlITOmq6AILDbwNYYXF5Q1ZO0tAWH7bYAOu
s2Vh947lSsP7/RbpRgc7pu1NivcvB6R7JRNLDCWcd9UjJu6MHzQ=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:13:25 2025 by rpki-client