Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323132303237.roa
File: 326130613a363034343a323030303a3a2f33362d3336203d3e20323132303237.roa (raw, json)
Hash identifier: UI70KRMgL+aZw0x4ImWeWr+kwlD5u6GahyshO7jHDlw=
Subject key identifier: 4F:32:19:95:93:63:32:1D:8B:7F:7A:68:FC:31:8F:E2:E6:AE:43:38
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 485516FB9FA8A62752C715051E171F80D4F7083D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323132303237.roa
Signing time: Wed 05 Mar 2025 14:45:33 +0000
ROA not before: Wed 05 Mar 2025 14:40:33 +0000
ROA not after: Wed 04 Mar 2026 14:45:33 +0000
asID: 212027
IP address blocks: 2a0a:6044:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:16:fb:9f:a8:a6:27:52:c7:15:05:1e:17:1f:80:d4:f7:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 5 14:40:33 2025 GMT
Not After : Mar 4 14:45:33 2026 GMT
Subject: CN=4F3219959363321D8B7F7A68FC318FE2E6AE4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:92:89:49:05:ae:c7:e0:c9:57:50:df:e9:
eb:5a:dc:61:bc:2d:18:2e:1b:a3:3d:57:23:68:ed:
51:5a:24:68:48:91:02:6e:a9:09:9f:86:d5:05:8a:
94:c4:62:8e:2f:82:2a:f5:12:ee:a9:0f:3e:e9:81:
98:bc:72:66:1d:22:fe:f4:d1:68:da:61:ec:ea:1e:
88:da:47:e1:b1:b7:7e:34:c9:c7:a4:8c:85:19:a8:
f5:9e:fa:f3:12:96:ab:9d:3c:e8:43:91:34:4e:a6:
28:3c:67:bc:ff:76:f7:21:b9:8c:c7:3a:a3:e3:6b:
cb:80:21:f4:13:e6:a4:25:04:c9:76:05:1c:29:4b:
6c:ca:b5:fe:bc:dd:f3:17:0f:6e:c6:f4:42:fe:f1:
7d:c6:09:61:f3:67:1a:0f:1a:03:94:b1:23:b9:12:
ce:07:d1:86:6a:58:ba:b5:39:a1:87:12:39:a8:48:
ad:82:44:2d:6d:b1:4d:45:7f:a9:8c:d3:af:e7:e3:
b3:eb:e2:d8:78:0d:cc:4c:9f:c9:15:b4:41:6f:0d:
20:0a:e8:3a:49:9a:00:cb:e8:53:f6:0d:2c:46:82:
b0:42:11:8e:ea:38:ef:46:58:a7:93:4a:1d:2c:98:
2f:41:b4:8a:2f:e1:37:0a:88:36:0a:75:c1:87:d4:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:19:95:93:63:32:1D:8B:7F:7A:68:FC:31:8F:E2:E6:AE:43:38
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323030303a3a2f33362d3336203d3e20323132303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:2000::/36
Signature Algorithm: sha256WithRSAEncryption
05:69:18:96:5a:9a:2e:20:35:ec:79:57:d2:3e:7b:01:57:90:
f6:0c:80:37:c5:a0:4c:ae:a8:04:8c:94:e4:fc:11:b1:c1:b5:
29:90:4b:2e:47:2e:08:04:4c:39:cc:75:62:82:22:91:37:2e:
5a:a6:2a:9a:4e:d4:66:8b:2a:a4:8a:10:99:fd:60:79:1c:32:
dd:be:bf:88:f5:a3:a9:df:c1:d3:0d:76:58:a8:ce:64:7b:1b:
4a:97:64:b3:17:5d:92:63:8b:b5:e0:d1:ac:15:df:07:83:da:
4f:ed:a8:b0:bc:5d:1b:b0:dc:61:de:fd:4e:8d:b4:d5:79:b6:
4a:6f:36:89:40:4b:64:64:21:02:21:d6:f4:4e:ac:c2:e3:f3:
6e:77:c6:71:da:03:84:f3:9a:df:45:82:e5:27:2b:07:5a:32:
e9:57:96:0b:78:7a:c2:20:84:39:18:7e:17:02:da:0a:4d:9f:
20:a2:82:2b:ad:9a:f2:de:a3:9a:77:3b:1c:ba:00:e4:fe:51:
70:12:19:98:5f:88:63:38:4f:6a:3f:79:fd:b2:49:8d:25:0e:
80:64:47:a5:51:be:43:1c:a0:d2:ac:84:a4:67:88:68:3b:b8:
12:95:61:62:3b:e8:ae:3e:de:2d:31:20:00:49:2b:4c:42:b0:
6c:0a:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:03 2025 by rpki-client