Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a31303a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a31303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: MkaZ0Q/t14FteaLfobnq27ivdVifmIs8SSsUO+OoiLs=
Subject key identifier: D3:B1:96:2F:75:22:40:EA:11:B6:72:BC:8B:82:26:13:6F:27:8E:02
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 09D828E9C0E23339526C0A3E850BD9FBB85F1BAA
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a31303a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:21 +0000
ROA not before: Fri 07 Feb 2025 19:08:21 +0000
ROA not after: Fri 06 Feb 2026 19:13:21 +0000
asID: 47272
IP address blocks: 2a0a:6044:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d8:28:e9:c0:e2:33:39:52:6c:0a:3e:85:0b:d9:fb:b8:5f:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:21 2025 GMT
Not After : Feb 6 19:13:21 2026 GMT
Subject: CN=D3B1962F752240EA11B672BC8B8226136F278E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:4b:b9:3a:ca:f4:2a:3d:e5:e4:cc:ae:c7:
b4:dd:bd:54:47:13:ca:4b:13:1c:b1:e1:ee:3b:63:
9f:78:95:3c:ca:c6:67:05:ca:8f:37:3b:4d:ff:db:
08:8e:94:f1:37:46:1d:bf:cc:a3:e1:07:a6:ec:8a:
da:fb:3e:b9:e1:41:4f:35:85:43:a3:2c:1b:d2:46:
45:26:40:c6:83:31:80:cf:a5:70:4b:83:86:2f:28:
b2:b2:34:60:d1:71:6e:b8:2a:23:45:ec:4a:be:a8:
80:c8:78:ba:16:77:cf:0b:59:18:b8:d7:34:0e:f3:
15:7e:45:c6:88:76:07:00:b4:59:2f:cc:a5:2b:1c:
c6:aa:1d:a3:95:ca:5a:bb:91:11:54:83:68:c9:52:
46:e4:cf:96:44:3b:ea:ae:66:d3:3d:3a:c2:7e:e2:
d5:9c:27:e6:d5:c8:36:ff:7f:79:72:4c:a5:a8:fe:
f0:0f:d0:58:1e:97:17:a0:a1:62:49:f5:6e:27:4f:
d4:a3:f9:c4:98:42:36:82:71:98:11:c4:53:70:1e:
36:a7:c5:b8:31:ae:38:5a:83:29:eb:c7:41:02:65:
9d:55:62:28:f1:23:41:0f:a9:95:12:5c:36:24:f4:
52:7d:62:7e:ed:ea:7f:8f:f7:41:c0:b6:34:94:e7:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:96:2F:75:22:40:EA:11:B6:72:BC:8B:82:26:13:6F:27:8E:02
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a31303a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:10::/48
Signature Algorithm: sha256WithRSAEncryption
b8:86:18:93:7a:4e:6e:1b:e0:73:30:7d:9e:ff:20:34:4d:28:
93:a5:8b:d1:cd:30:2e:61:8c:f0:78:44:f5:bb:be:fd:11:07:
6b:a1:4e:ad:cd:f5:f5:56:d4:00:16:9b:7e:da:5f:8d:af:61:
f9:d1:d3:0a:12:e4:df:fb:eb:c5:6a:1c:f7:0c:e8:54:6b:7b:
62:c8:59:99:93:15:e8:ed:fc:1a:80:40:3c:1e:ef:48:91:7d:
75:95:88:d6:f3:7c:db:43:2d:f8:1a:85:25:d5:c3:68:67:37:
18:ad:35:96:a8:72:95:8f:30:94:1d:50:f8:93:e3:5b:7d:f2:
9a:10:0a:65:fe:98:71:25:7a:c5:df:f7:eb:fe:f3:6c:d9:90:
61:4c:88:fd:3c:d7:f3:92:ed:7d:58:59:7f:b7:68:30:4f:68:
96:5b:56:6b:97:63:c9:3b:3c:64:1f:98:dd:0c:25:4d:95:94:
16:78:24:de:75:4f:ef:8c:31:3f:d1:80:0f:4a:e9:3f:fe:25:
5f:65:16:4b:9d:db:f5:80:67:02:1b:90:15:47:ac:27:de:23:
a2:1d:be:9b:67:9c:ec:fc:ac:ca:4c:55:c0:3f:4d:07:c7:4e:
01:93:67:38:82:a4:41:c2:14:82:b5:63:28:98:cf:05:6f:1f:
b8:c0:b0:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:06 2025 by rpki-client