Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa
File: 326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier: Trt7zvWLHzygkO7V1exp6mHZFw4lMGhCWx8KbRzve4Y=
Subject key identifier: 13:61:4A:5F:AF:EC:51:4F:66:D8:4B:AF:B8:D1:2E:A4:65:DB:E0:39
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 15B097E77E4EA4DDF53E52D4DEA1308FA2DF6EA9
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa
Signing time: Thu 06 Mar 2025 18:13:42 +0000
ROA not before: Thu 06 Mar 2025 18:08:42 +0000
ROA not after: Thu 05 Mar 2026 18:13:42 +0000
asID: 213864
IP address blocks: 2a09:54c6:5000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b0:97:e7:7e:4e:a4:dd:f5:3e:52:d4:de:a1:30:8f:a2:df:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 6 18:08:42 2025 GMT
Not After : Mar 5 18:13:42 2026 GMT
Subject: CN=13614A5FAFEC514F66D84BAFB8D12EA465DBE039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:ce:d8:0e:2e:37:c8:12:62:f6:8e:9d:75:
a7:28:14:97:27:f8:db:ae:dd:c7:7b:28:40:f2:e1:
81:39:98:7a:1f:2d:81:16:75:13:91:1d:00:ec:cf:
f9:dc:df:76:9c:24:32:0f:1b:9e:f7:dd:6c:1f:d8:
70:22:53:a1:6e:24:a8:73:f1:b2:6b:60:42:75:8a:
5d:a5:0c:45:21:c6:d8:2f:89:77:38:4b:f4:c3:98:
14:a3:7a:b4:43:ff:18:dc:ff:0b:a9:66:c1:3c:83:
64:b8:f0:d7:73:94:5c:21:6a:2a:6d:0a:02:4f:b1:
d1:46:88:f3:17:8b:f0:fb:32:b1:ad:87:d7:f6:dc:
36:51:fe:a7:fa:7d:1a:a6:08:12:78:82:2d:9d:d3:
bc:dd:00:d0:c9:a9:48:86:77:42:13:12:ed:8a:0d:
d9:55:5c:a8:db:04:07:0e:82:7c:45:0f:4d:3a:d6:
6e:e1:9a:bc:93:14:fb:18:69:83:73:33:5a:47:a2:
73:69:b3:bc:9f:46:bd:eb:58:b2:f9:cd:44:52:09:
04:ba:5a:ce:e3:74:0f:ee:c4:a2:2b:d2:b2:be:68:
b9:00:b9:0d:6c:75:ae:09:2d:11:4b:da:5b:24:51:
75:98:f7:e1:c8:80:4b:2d:1b:90:31:c0:00:72:e4:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:4A:5F:AF:EC:51:4F:66:D8:4B:AF:B8:D1:2E:A4:65:DB:E0:39
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3434203d3e20323133383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:5000::/36
Signature Algorithm: sha256WithRSAEncryption
69:1d:ea:ee:02:d1:10:2c:93:04:58:d2:0b:90:6f:b6:a5:08:
ec:89:c2:49:36:c9:1c:30:c3:be:34:71:fc:85:36:90:d1:a8:
5c:8e:e4:ef:21:21:81:03:e4:2c:18:54:57:38:92:e1:1e:17:
a4:a9:1e:ae:0b:d3:93:a0:b5:13:0b:44:f6:a5:6d:4d:0a:da:
be:51:e3:4d:07:86:68:ce:28:3a:a7:0a:58:a4:5f:45:59:10:
9a:fd:f3:a8:d4:f6:fe:4e:91:a9:ba:3f:9e:34:84:c6:f0:1e:
eb:f8:37:4b:91:c4:04:dc:83:d2:fd:08:1d:84:0e:91:df:dd:
35:5f:30:20:b1:21:02:92:ba:df:54:83:52:8b:16:30:bb:82:
5e:24:b2:ef:bd:c2:b0:44:1c:aa:f0:8d:c1:8b:f1:5b:5e:e6:
b3:9f:26:f9:ae:a4:00:c4:3e:7e:df:74:a6:78:d1:1f:00:9d:
5a:90:5c:94:22:45:84:ee:b4:9e:bd:0d:13:43:a6:07:4b:6c:
2b:fe:cd:d5:88:3d:0a:18:01:4c:c7:3d:aa:ff:c0:e3:51:e8:
82:04:41:c6:9e:55:db:4c:95:d9:67:c7:8f:c1:1c:6c:a5:32:
27:ec:ad:d3:31:aa:10:da:0b:ca:52:fa:63:03:b9:6d:4e:4e:
2b:b2:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:42 2025 by rpki-client