Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa
File: 326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa (raw, json)
Hash identifier: NcUomJHrgaVh4EN1BeKY9x4BTioFewvtZwnCrekAwHQ=
Subject key identifier: F3:36:06:99:A3:86:41:99:9C:D3:89:FB:D2:C8:57:5B:14:07:22:81
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4B61C3DC46A240FAFA85F6DF2755F7F84E818B0F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa
Signing time: Fri 07 Feb 2025 18:37:05 +0000
ROA not before: Fri 07 Feb 2025 18:32:05 +0000
ROA not after: Fri 06 Feb 2026 18:37:05 +0000
asID: 214660
IP address blocks: 2a0a:6044:6600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:61:c3:dc:46:a2:40:fa:fa:85:f6:df:27:55:f7:f8:4e:81:8b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:32:05 2025 GMT
Not After : Feb 6 18:37:05 2026 GMT
Subject: CN=F3360699A38641999CD389FBD2C8575B14072281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:00:96:fd:c3:c9:09:9f:91:3f:c2:27:5d:
3b:d5:11:55:6f:07:4b:38:bb:a2:df:56:70:21:19:
78:a7:ea:a1:97:7e:19:5b:65:ac:b0:9a:7b:89:41:
e8:ec:32:7c:1b:b3:06:e6:f4:28:09:cc:48:37:95:
1e:7e:fb:5e:e4:03:0f:6b:8d:26:a2:63:85:b9:c5:
b6:12:13:ce:02:73:68:36:d6:df:fe:53:63:11:19:
30:49:3d:97:17:68:e5:17:d9:75:e3:02:3f:e7:ee:
0f:f7:bc:b4:66:68:b1:39:cb:0d:eb:d0:53:33:60:
ef:85:fa:61:19:8e:5e:72:26:5c:e5:d6:31:70:61:
7b:29:4f:11:13:2f:4f:d7:6b:21:50:27:29:85:33:
a7:7b:21:8c:bc:95:32:28:d1:a7:ee:43:da:ff:66:
03:73:27:59:a0:35:d6:d2:16:24:3d:36:71:49:1b:
d2:f0:69:bf:ca:44:63:a7:e0:db:75:84:e2:69:d2:
e7:2d:83:ef:b3:44:a6:15:dc:3f:5c:52:ec:91:cf:
cd:e6:2e:d8:f6:e6:10:1c:b6:19:06:8a:4c:5b:2a:
93:d8:b8:9d:71:06:49:ac:4b:c8:81:2a:29:b1:43:
7a:2a:37:4f:73:92:da:7c:c4:b3:91:b7:20:cb:15:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:06:99:A3:86:41:99:9C:D3:89:FB:D2:C8:57:5B:14:07:22:81
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363630303a3a2f34302d3438203d3e20323134363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6600::/40
Signature Algorithm: sha256WithRSAEncryption
11:5c:d9:2c:5c:7a:7e:53:36:98:35:02:43:e9:90:47:fe:24:
a5:2e:ac:e0:ad:e3:23:ae:68:26:85:ef:53:33:c2:8c:6a:78:
53:85:51:65:d7:5e:2f:74:1c:ed:9c:65:ec:08:08:33:62:b2:
d2:25:9c:8d:cf:9d:8a:08:98:a5:5e:a6:6b:b8:51:fb:9b:78:
65:81:b4:5d:a3:b3:d0:cc:6a:55:e6:2b:7e:44:5b:6e:af:2f:
15:25:ea:6a:c4:ba:c5:6b:2c:90:87:ac:cd:3d:aa:60:d6:11:
12:15:ba:cc:d2:10:07:c8:12:db:50:6f:91:e1:d1:73:51:9a:
1b:0c:f5:c3:39:b5:c0:53:1c:87:0e:08:c4:35:58:69:72:f0:
71:40:72:84:0d:53:6a:79:11:f2:b5:03:2e:2b:44:ab:72:3c:
17:e3:9a:89:1c:82:07:98:76:27:95:13:37:9a:d4:79:82:a8:
b4:81:74:f0:73:ec:8b:7c:54:3a:ff:8e:57:8e:c4:7a:90:c1:
5f:ff:cd:a2:2b:7d:f1:de:d4:95:9f:1f:53:81:f6:f2:8a:61:
a2:84:4a:bc:eb:57:d5:1c:16:49:ee:a1:f5:33:e6:82:ab:ca:
07:a7:96:74:a0:a0:44:30:3e:47:3d:6c:52:8b:85:1b:49:5f:
42:45:73:91
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUS2HD3EaiQPr6hfbfJ1X3+E6Biw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTAyMDcxODMyMDVaFw0yNjAyMDYxODM3MDVaMDMxMTAvBgNV
BAMTKEYzMzYwNjk5QTM4NjQxOTk5Q0QzODlGQkQyQzg1NzVCMTQwNzIyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk8ACW/cPJCZ+RP8InXTvVEVVv
B0s4u6LfVnAhGXin6qGXfhlbZaywmnuJQejsMnwbswbm9CgJzEg3lR5++17kAw9r
jSaiY4W5xbYSE84Cc2g21t/+U2MRGTBJPZcXaOUX2XXjAj/n7g/3vLRmaLE5yw3r
0FMzYO+F+mEZjl5yJlzl1jFwYXspTxETL0/XayFQJymFM6d7IYy8lTIo0afuQ9r/
ZgNzJ1mgNdbSFiQ9NnFJG9Lwab/KRGOn4Nt1hOJp0uctg++zRKYV3D9cUuyRz83m
Ltj25hActhkGikxbKpPYuJ1xBkmsS8iBKimxQ3oqN09zktp8xLORtyDLFcofAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQU8zYGmaOGQZmc04n70shXWxQHIoEwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM2MzYzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoKYERmMA0GCSqGSIb3DQEBCwUAA4IBAQARXNksXHp+UzaYNQJD
6ZBH/iSlLqzgreMjrmgmhe9TM8KManhThVFl114vdBztnGXsCAgzYrLSJZyNz52K
CJilXqZruFH7m3hlgbRdo7PQzGpV5it+RFtury8VJepqxLrFayyQh6zNPapg1hES
FbrM0hAHyBLbUG+R4dFzUZobDPXDObXAUxyHDgjENVhpcvBxQHKEDVNqeRHytQMu
K0SrcjwX45qJHIIHmHYnlRM3mtR5gqi0gXTwc+yLfFQ6/45XjsR6kMFf/82iK33x
3tSVnx9TgfbyimGihEq861fVHBZJ7qH1M+aCq8oHp5Z0oKBEMD5HPWxSi4UbSV9C
RXOR
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:47 2025 by rpki-client