Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa
File: 326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa (raw, json)
Hash identifier: H1uYygw1N6SEcrNj383Tk1UQde9lzkUYcmdsqwLJGA4=
Subject key identifier: C9:1E:17:5B:87:A2:37:8A:42:96:CF:A1:8E:02:AC:3E:9E:11:D6:32
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 454D41FABA17186ED3E16357268440ED9FEA0734
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa
Signing time: Mon 17 Mar 2025 14:48:30 +0000
ROA not before: Mon 17 Mar 2025 14:43:30 +0000
ROA not after: Mon 16 Mar 2026 14:48:30 +0000
asID: 215108
IP address blocks: 2a09:54c6:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4d:41:fa:ba:17:18:6e:d3:e1:63:57:26:84:40:ed:9f:ea:07:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 17 14:43:30 2025 GMT
Not After : Mar 16 14:48:30 2026 GMT
Subject: CN=C91E175B87A2378A4296CFA18E02AC3E9E11D632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:0a:1e:56:10:69:f7:9f:09:ca:de:90:a4:
74:91:fe:4e:9e:ef:ef:19:4e:f4:39:1e:56:f2:fb:
cb:46:ec:33:6f:0a:7d:5c:3e:da:ec:70:76:6b:31:
6d:48:36:19:fd:3a:97:bb:c0:74:28:fb:69:e6:02:
c2:7c:a8:22:cb:db:fe:c6:bc:5a:2b:91:f8:47:08:
cf:a9:4f:59:75:d6:ab:b2:a6:31:06:21:2f:98:39:
e8:d6:89:52:ec:86:d1:91:75:af:f0:7c:07:99:2f:
be:1b:b4:60:c3:4e:56:a3:5b:97:bd:9f:47:d2:82:
31:98:ef:db:eb:6c:f9:03:32:10:f3:ff:30:4c:bb:
bc:14:7d:0b:d5:54:b5:4f:0d:4f:b0:c9:32:f3:0c:
1f:8c:8c:c8:c7:b1:fb:a1:9d:ba:53:5f:7b:9c:ab:
92:0a:46:de:4d:2f:54:67:87:88:4e:09:09:2b:b4:
c4:7c:bf:61:20:0d:e6:76:54:59:4a:dc:22:6f:62:
c8:0a:0b:a4:2d:48:3b:3f:36:3a:02:38:63:10:9b:
1d:b1:d1:3f:88:a5:07:05:df:08:bf:1d:35:d3:d0:
7e:e0:ab:74:2c:b3:c7:bf:f0:cd:af:94:b6:d7:c8:
9d:42:2a:0c:c2:6d:b8:3c:b6:f8:81:5d:ed:af:ab:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:17:5B:87:A2:37:8A:42:96:CF:A1:8E:02:AC:3E:9E:11:D6:32
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a323030303a3a2f33362d3336203d3e20323135313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:2000::/36
Signature Algorithm: sha256WithRSAEncryption
28:95:5a:12:c9:4b:64:29:8d:b4:f3:24:fe:f9:7e:35:e6:88:
a5:38:8a:c0:de:78:88:37:f8:9f:62:30:47:81:c5:6c:2d:d0:
f1:4f:49:3a:88:6d:0c:a4:06:9b:9a:36:60:fa:2b:48:76:e0:
6f:81:d1:43:01:33:fe:63:e6:02:44:47:01:1a:57:c9:f2:b8:
54:85:d6:1e:b8:f3:3f:e7:c1:90:71:20:0e:24:6d:94:79:6b:
1d:5a:3e:e3:83:1f:1a:bb:2d:48:87:71:00:08:c4:15:96:42:
cb:70:bd:ba:5d:1f:77:02:fb:4f:48:9a:a3:f9:ce:1c:7e:e3:
af:5e:fd:f8:b6:f7:c5:8d:1d:d0:ef:5e:e3:fc:14:d9:3c:63:
85:b3:2d:4b:c5:96:57:e3:af:00:2b:5c:cd:53:07:d3:07:77:
e7:d9:09:b2:10:53:12:ce:6a:37:e5:dd:df:a8:a2:76:c7:b1:
e6:7b:86:97:6f:7d:ea:b1:f0:36:b3:62:89:02:4d:bd:1d:58:
9e:1a:6d:30:6c:3c:f4:e4:05:92:03:2e:4f:fe:3a:f4:86:04:
7c:f4:57:83:42:f2:32:7f:39:e3:ef:18:10:9a:af:82:be:55:
f5:18:41:29:89:be:cc:73:97:22:d0:38:bd:23:56:28:3a:ef:
98:ab:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:58:42 2025 by rpki-client