Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: MGFRKN9cs5ykyaPyQQ/DYPzFJaICE3Seyck2RpLl8Xc=
Subject key identifier: 08:6B:7C:0F:82:D5:EB:86:2D:DC:B3:7D:EA:C2:AD:6B:FC:A8:B3:57
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 37173ECDFF49911C19F7F2EBB67F9BB0CF175FA7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:20 +0000
ROA not before: Fri 07 Feb 2025 19:08:20 +0000
ROA not after: Fri 06 Feb 2026 19:13:20 +0000
asID: 47272
IP address blocks: 2a0a:6044:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:17:3e:cd:ff:49:91:1c:19:f7:f2:eb:b6:7f:9b:b0:cf:17:5f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:20 2025 GMT
Not After : Feb 6 19:13:20 2026 GMT
Subject: CN=086B7C0F82D5EB862DDCB37DEAC2AD6BFCA8B357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:b6:31:22:28:04:e0:96:b7:16:97:1f:f4:
7a:78:bd:9f:d6:e5:72:1a:04:d4:7c:f5:69:4e:02:
f3:44:2e:9a:d6:00:85:1a:d8:6b:5e:57:3f:14:6f:
1a:39:b6:7c:61:50:bd:be:0d:06:60:89:c0:27:b7:
5e:b6:8d:43:6e:01:3d:fd:39:3d:e8:4e:e3:f1:d4:
e7:b8:63:bc:50:cf:a3:71:83:7f:e3:fa:60:d3:be:
04:b6:6d:31:88:19:ab:fd:4b:a9:80:ae:a5:0b:94:
87:6d:89:fa:ae:7e:40:48:ed:19:05:74:e3:f3:94:
4c:56:50:f4:40:03:38:98:95:45:50:e6:fa:fb:e6:
41:1b:ff:47:ff:20:10:ef:0c:f2:29:48:d5:bc:46:
c0:a2:ba:25:42:eb:48:c5:e3:f1:4c:1f:1f:7c:36:
07:7c:9b:9e:71:c3:b2:bd:05:41:08:b2:32:37:34:
a9:d9:39:df:31:85:10:80:ae:1d:22:ea:a5:07:0d:
2c:7d:6b:c4:c1:39:e5:47:a3:57:7a:a2:c6:aa:b8:
e3:b7:45:f4:d8:ac:44:10:c3:c4:7a:05:b2:3a:a2:
f3:c5:56:e0:0e:93:32:48:ab:a0:81:e7:8e:90:61:
97:0f:98:db:95:1c:43:5d:43:c8:d5:ac:03:9e:a8:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:7C:0F:82:D5:EB:86:2D:DC:B3:7D:EA:C2:AD:6B:FC:A8:B3:57
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a323a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:aa:89:41:95:01:55:5f:d1:e6:1f:30:4a:41:66:23:86:e8:
b0:53:84:01:04:b2:0b:28:f6:e2:a3:60:18:e7:12:d8:e2:c1:
55:1b:ee:2b:61:84:07:02:ac:39:ea:0c:d8:3d:a0:11:10:33:
1c:2d:ff:d9:d7:39:1b:cd:9d:41:a1:f9:81:d5:0d:88:e7:89:
53:65:da:00:f9:30:18:78:00:2c:a6:8d:fc:9b:e1:dd:73:ec:
68:77:f8:92:42:0a:cd:f2:b2:64:d0:7a:c3:d9:dd:3b:b0:ac:
9a:ed:69:aa:53:96:48:2c:15:a0:02:ed:2f:94:af:8f:9d:35:
d2:82:c9:20:fc:78:02:68:f3:cd:86:eb:65:37:0c:0f:30:59:
51:9f:ed:95:f5:15:fc:7f:76:54:2e:47:02:c7:ae:73:df:70:
d8:96:d2:dd:9a:8f:df:f8:23:57:a2:2f:b4:60:63:8d:20:8d:
cd:58:94:3a:8d:26:87:3d:c8:bd:13:66:27:30:f1:e2:be:d2:
dd:fe:cb:b7:72:04:39:8d:b7:6a:97:fc:c4:ad:c7:38:3e:bb:
bb:84:b9:04:a4:04:05:1f:c2:c3:9c:44:ea:0b:ad:54:38:48:
ff:a2:30:8e:e0:92:ab:89:22:ee:35:9f:31:99:98:dc:1d:3c:
65:10:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:25 2025 by rpki-client