Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: GFZ2LSJ6o9vRy1oggRHpCKY7nB6hZuL4IsphMjzC5Sw=
Subject key identifier: 1C:CF:87:BB:12:60:36:28:74:9C:D2:1B:10:53:EF:2C:BB:F4:EA:53
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2A15F58091AAD4F16030CDBD98745B67BF85B1AE
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:21 +0000
ROA not before: Fri 07 Feb 2025 19:08:21 +0000
ROA not after: Fri 06 Feb 2026 19:13:21 +0000
asID: 47272
IP address blocks: 2a0a:6044:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:15:f5:80:91:aa:d4:f1:60:30:cd:bd:98:74:5b:67:bf:85:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:21 2025 GMT
Not After : Feb 6 19:13:21 2026 GMT
Subject: CN=1CCF87BB12603628749CD21B1053EF2CBBF4EA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:69:a9:a6:a8:de:1d:c7:32:77:c3:86:88:
15:da:5b:14:23:2e:7b:df:0d:a9:06:7a:34:a2:a5:
90:c4:ac:7c:01:c4:99:25:85:8b:db:37:81:98:0d:
7e:e7:2d:6c:08:65:cb:88:c3:d7:5c:0a:6f:73:f0:
20:56:59:a4:63:9a:a7:81:68:d1:f6:5d:65:e3:17:
7c:2d:c7:cd:6e:b1:47:8c:d4:f3:08:47:26:95:5a:
07:39:76:58:50:fa:f5:20:58:e4:ab:15:ba:07:1e:
45:92:2b:2e:67:a9:01:b5:24:6f:42:2a:05:d8:df:
7f:48:ff:d0:6f:a1:1f:76:24:9e:58:ae:b4:10:be:
32:5d:2f:47:70:c2:b2:d9:1a:44:e2:72:66:73:aa:
9f:35:c0:2f:7e:74:ab:51:86:bd:e2:a3:c2:52:59:
cb:43:b2:0a:e1:0b:b2:68:d0:9c:64:50:fe:fb:0f:
ba:6f:6b:4f:d5:1d:06:17:37:62:73:cb:23:2b:b9:
7e:b1:15:70:d2:a6:79:98:34:d9:d5:81:72:fa:a6:
15:d7:70:3f:3b:9d:dc:b7:6c:9a:f7:a7:cb:59:f5:
af:f9:04:c6:03:06:ac:d2:81:20:3a:d8:97:51:e5:
97:6e:d6:c5:c6:2c:f4:41:30:85:2d:ea:a2:4a:a0:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:87:BB:12:60:36:28:74:9C:D2:1B:10:53:EF:2C:BB:F4:EA:53
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a313a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:1::/48
Signature Algorithm: sha256WithRSAEncryption
af:9c:3b:8e:1f:22:21:af:64:8a:88:7a:ae:f1:5c:7e:1d:63:
11:f0:c1:4f:e3:74:66:e6:4a:c1:ae:0c:83:bd:96:af:e1:d0:
f6:59:96:56:d6:c2:f5:53:a9:86:b3:0a:85:61:a0:ee:97:4b:
07:c4:98:4d:91:d8:55:bf:c0:e2:3e:3f:74:49:72:01:c6:7d:
67:d8:dc:2a:0e:5c:8b:c8:f8:d6:95:b8:2c:c5:95:f3:c1:d5:
4e:6b:06:a3:f2:df:ff:3b:0f:68:64:38:1f:09:78:11:7e:12:
f9:71:12:b2:07:10:de:4b:76:de:af:ef:83:38:bd:85:a8:c5:
7e:5e:a4:5f:26:8f:a1:63:ea:58:55:ff:eb:f5:4f:c6:e2:24:
ce:bd:a9:27:5b:15:7a:cf:88:2e:fe:d8:c7:09:01:e5:23:6c:
8e:be:62:59:34:f0:78:84:75:38:f3:cf:5b:5b:28:66:ea:76:
b7:e1:eb:a7:6e:d3:3d:eb:da:fd:0c:87:0d:d2:be:54:b6:ef:
62:4f:b7:4b:2f:57:ae:e3:32:51:3f:7a:6b:df:31:6a:15:91:
9c:d8:61:7a:60:21:7a:6d:ac:ce:4a:4b:7d:10:3c:9c:61:ec:
f7:73:fe:6d:13:7f:2a:ad:8f:f2:19:73:1e:69:79:8e:81:01:
df:6d:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:28 2025 by rpki-client