Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323132313238.roa
File: 326130393a353463363a613030303a3a2f33362d3438203d3e20323132313238.roa (raw, json)
Hash identifier: fC2E4FTPX1XSF83aMxf2g1Mtr+yL8pTpxYfheGiWTps=
Subject key identifier: 00:5F:9A:B2:BB:6A:A9:53:A9:36:A1:E2:7C:68:1A:2F:BA:23:1E:DC
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6A17B6D7C47D2456964A43C4EAFD66A3FCECBD4D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323132313238.roa
Signing time: Fri 21 Feb 2025 12:41:40 +0000
ROA not before: Fri 21 Feb 2025 12:36:40 +0000
ROA not after: Fri 20 Feb 2026 12:41:40 +0000
asID: 212128
IP address blocks: 2a09:54c6:a000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:17:b6:d7:c4:7d:24:56:96:4a:43:c4:ea:fd:66:a3:fc:ec:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 21 12:36:40 2025 GMT
Not After : Feb 20 12:41:40 2026 GMT
Subject: CN=005F9AB2BB6AA953A936A1E27C681A2FBA231EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8c:be:64:a5:f6:5c:bc:4d:da:6c:56:8d:83:
53:8c:33:28:f7:13:ae:7c:3a:85:ea:fe:3a:0d:fc:
52:bd:e9:04:e2:4f:21:1a:31:25:4b:93:f6:91:e7:
61:e3:3a:a4:ba:87:9b:bc:d6:5d:68:f4:f9:7d:0a:
4e:0b:2b:bf:0d:ad:ea:f8:2e:c7:d2:72:cd:66:ac:
59:fe:24:33:b8:da:c8:b7:83:29:e3:cd:8b:2c:a3:
e9:09:56:ad:86:a0:a9:d3:eb:31:c3:eb:62:31:b1:
ce:3b:43:df:95:35:b8:f5:a2:ea:3d:09:26:72:3e:
57:2a:2d:ac:93:92:95:bf:b3:17:c9:6a:1f:c4:3a:
d0:5a:d7:21:47:2a:42:4e:51:2d:17:c7:cc:26:07:
84:18:06:7b:b2:5e:81:a8:be:44:2e:f4:5e:fc:07:
f2:f6:f2:fa:ce:90:4e:54:48:74:56:0b:fa:0e:8d:
2a:68:98:4f:fc:37:f5:66:c0:b2:28:44:e3:14:da:
63:4f:16:a3:75:a5:6c:f7:97:e2:80:b5:c6:d7:58:
17:40:c0:57:e0:10:8a:b8:d9:ae:b1:2e:ab:59:99:
0e:73:6c:f9:28:b0:e7:6f:bc:c9:5c:c4:f0:19:84:
52:c7:c4:b0:15:4f:dd:e9:54:46:0b:a5:78:89:a2:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:9A:B2:BB:6A:A9:53:A9:36:A1:E2:7C:68:1A:2F:BA:23:1E:DC
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a613030303a3a2f33362d3438203d3e20323132313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:84:04:57:53:56:f5:cc:bc:e3:43:69:a4:f2:23:82:57:08:
02:be:40:bf:4d:1a:4a:c2:d2:8e:ec:47:3d:cb:49:3f:50:be:
94:44:a6:12:e7:44:19:d0:a6:ea:6f:28:d2:55:1e:4c:e3:7f:
d3:92:a1:29:16:2d:d1:c1:04:c3:4f:cc:3c:3d:73:58:f7:53:
e1:c5:97:08:eb:d7:9e:9e:13:fa:9d:18:62:58:63:9a:5e:09:
82:65:e7:ea:23:63:46:c9:3e:6f:7b:99:6e:49:ab:6f:d6:63:
59:99:a8:d8:4a:98:66:5c:70:d9:25:24:a1:a7:2e:58:57:93:
44:7d:16:a1:04:8f:2d:a9:39:4d:de:01:69:30:a8:5b:4b:6a:
d6:b3:8d:eb:f5:23:70:cf:a0:9c:c9:b0:ba:66:0d:65:da:0d:
88:e7:fe:22:01:63:2a:aa:6a:64:14:ab:08:d5:3d:f9:2f:50:
12:33:61:72:e6:fd:a8:b7:d6:63:2e:cb:59:25:c5:aa:97:f2:
41:03:06:a2:c4:5a:b6:5d:9b:56:a8:2e:05:fa:55:8b:ce:26:
6c:dd:12:9e:5c:30:1a:3c:4d:cf:ec:3c:fb:34:38:28:e8:82:
23:98:de:d5:81:94:af:3a:03:4d:17:1c:34:09:14:f4:a8:31:
50:52:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:49 2025 by rpki-client