Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa
File: 326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa (raw, json)
Hash identifier: IG8IDESdm8KDeOlwg5Lyc9rcsYaNShmJKl6WLbt+v/Q=
Subject key identifier: 3C:AC:49:5C:45:D7:CD:B8:CD:3F:68:DC:44:A4:F8:C3:FF:F7:B5:69
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 774DA6EF0499A69E226A82A2E0089F22CAB87F7A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa
Signing time: Tue 18 Feb 2025 07:11:58 +0000
ROA not before: Tue 18 Feb 2025 07:06:58 +0000
ROA not after: Tue 17 Feb 2026 07:11:58 +0000
asID: 214911
IP address blocks: 2a09:54c6:c000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4d:a6:ef:04:99:a6:9e:22:6a:82:a2:e0:08:9f:22:ca:b8:7f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 18 07:06:58 2025 GMT
Not After : Feb 17 07:11:58 2026 GMT
Subject: CN=3CAC495C45D7CDB8CD3F68DC44A4F8C3FFF7B569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:5d:0a:3d:ca:93:b6:37:72:6e:42:7d:25:
af:9b:d7:9f:d9:2d:53:5d:85:c3:44:54:ac:78:94:
c0:60:ef:c1:6d:c5:30:cb:32:34:cb:1a:46:50:be:
b0:b1:69:57:eb:a2:0d:23:aa:d1:cf:c9:82:22:3e:
7b:1a:1e:92:08:8a:0c:48:cf:43:02:28:bb:d5:cb:
39:70:97:2d:2f:52:58:08:11:8b:9d:6b:a3:8d:99:
18:43:f3:4a:3f:4b:cc:79:e1:c5:9d:f4:2e:e0:f8:
77:d6:0b:30:d9:46:04:33:b3:b5:86:c0:15:54:b6:
42:da:a8:7a:c8:9c:a7:ad:d3:fb:23:41:68:ed:35:
a8:03:92:6c:70:5f:2e:4a:af:5b:87:29:7c:05:4a:
59:fb:1b:60:3d:db:6c:7e:ac:64:32:39:dc:2b:d7:
69:e4:43:31:87:d6:ab:72:9a:e5:22:ec:75:1a:36:
ff:37:80:16:52:c3:a5:d0:80:e9:1a:b7:0a:3f:87:
d8:f5:c0:15:49:a8:2e:1f:67:a8:6d:b3:ee:ae:80:
7c:97:8c:46:44:e2:4d:c8:7b:89:d7:36:8e:44:95:
9f:34:a3:12:b1:a3:99:37:6e:75:9d:a0:7d:fa:be:
19:6c:39:d6:fe:30:0a:6e:e7:14:52:d3:8b:f9:6b:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:49:5C:45:D7:CD:B8:CD:3F:68:DC:44:A4:F8:C3:FF:F7:B5:69
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a633030303a3a2f33362d3438203d3e20323134393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:c000::/36
Signature Algorithm: sha256WithRSAEncryption
96:4f:bc:47:1f:9b:1d:a2:22:0d:61:a0:0d:4f:a0:68:82:f8:
73:76:e0:62:63:f6:72:be:99:87:d8:c7:64:c2:9e:8b:6b:c8:
07:12:2c:38:95:a8:4f:f1:a3:78:57:7d:fc:21:d7:63:6f:18:
e9:c7:1f:c2:1c:b0:f1:89:df:e2:42:99:79:1e:e3:43:62:2b:
75:2c:c7:80:24:62:59:92:a0:45:7e:82:36:37:2c:73:bb:3f:
2b:39:dc:cf:86:9d:f8:f8:e9:c0:8b:0d:b1:61:68:af:c2:37:
a7:9a:78:1f:1a:04:e5:d7:2a:96:85:33:7d:e0:1f:64:54:67:
3b:7e:00:3b:e6:7a:26:a8:d4:75:60:20:ae:f0:71:e9:34:f6:
3f:e3:8e:05:86:fe:8a:aa:c9:cd:de:bf:29:6b:0c:65:a8:c7:
b5:90:b4:3d:ac:54:9f:13:ac:e9:40:10:92:ce:5a:25:db:a9:
48:84:3e:23:ab:71:c7:37:6b:4d:50:df:be:08:b7:81:a1:bc:
c7:09:9a:f1:ef:55:76:67:30:f1:d3:24:e4:65:ef:13:dd:4c:
95:1f:d1:7e:66:cf:62:76:9a:1f:39:08:6d:e5:7d:cc:8d:47:
ff:14:26:ac:8f:2c:61:dc:97:c7:5b:85:f7:ab:63:ea:cf:cf:
d7:39:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:51:33 2025 by rpki-client