Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa
File: 326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa (raw, json)
Hash identifier: 2yZBNe8M/30I93uvAMUCuxRv4Jt5i6hcN7f+bLOfaDE=
Subject key identifier: B0:67:A2:AD:16:4E:00:2C:55:20:DC:36:E0:7B:5C:46:C6:D0:88:13
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 1D0EB174D6074FF6DFD9EEBBE1AC64392B260C72
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa
Signing time: Fri 07 Feb 2025 18:38:07 +0000
ROA not before: Fri 07 Feb 2025 18:33:07 +0000
ROA not after: Fri 06 Feb 2026 18:38:07 +0000
asID: 202224
IP address blocks: 2a0a:6044:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0e:b1:74:d6:07:4f:f6:df:d9:ee:bb:e1:ac:64:39:2b:26:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:33:07 2025 GMT
Not After : Feb 6 18:38:07 2026 GMT
Subject: CN=B067A2AD164E002C5520DC36E07B5C46C6D08813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:cb:56:86:9b:e9:40:26:31:93:66:b2:b8:
76:af:a3:e8:00:b9:e6:cc:79:8b:50:a5:fd:6a:98:
d0:ee:71:01:ae:84:d0:39:c4:26:9b:df:8a:2f:43:
cc:8e:f7:8e:90:75:8b:92:35:c1:f8:d7:f2:64:8b:
ac:03:51:82:11:08:74:24:a5:26:31:2e:45:e6:91:
f0:6f:87:5e:75:52:d2:9f:c6:ce:28:21:43:74:6f:
04:51:73:a2:ca:eb:67:84:b1:b1:b1:cd:d6:30:b6:
ce:2a:99:bf:33:61:41:12:41:f0:64:f8:72:56:f2:
4a:50:d0:41:e9:1a:be:64:10:82:76:42:fd:e8:a5:
90:91:4b:48:83:be:40:6e:c8:5f:79:1e:17:9c:95:
51:a0:80:50:f4:48:48:30:9e:ed:3d:c4:8e:5c:1c:
66:bf:09:6a:7b:69:e7:0b:de:c9:ce:c1:47:fc:23:
7c:05:b3:55:db:e5:70:f8:74:37:d7:9f:4c:11:fe:
9f:8c:4e:b1:34:a3:3b:0d:79:3b:27:8e:1e:39:7f:
42:e9:e9:52:b1:65:31:e4:60:49:7a:12:49:fa:70:
0d:85:4e:a8:7c:d0:96:14:14:67:52:04:93:a8:e7:
19:08:b9:13:c2:34:b4:30:41:11:b4:50:b0:9a:5d:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:A2:AD:16:4E:00:2C:55:20:DC:36:E0:7B:5C:46:C6:D0:88:13
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373030303a3a2f34302d3438203d3e20323032323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:9b:5d:24:dd:cc:43:b3:d7:30:f8:14:50:f3:84:6b:52:54:
81:81:8e:18:e4:53:e5:e6:0c:a4:f0:89:cf:36:f9:a1:67:ab:
ec:43:2c:49:d5:00:b7:f9:35:e4:0f:64:3f:72:b8:c2:d5:0a:
d3:57:d6:ff:02:03:ce:6c:de:79:aa:cb:56:98:75:ee:0b:1d:
7f:0c:a6:bc:1c:e8:90:75:96:91:1b:c0:f9:ec:a5:b9:2a:a3:
0e:4d:35:68:2b:45:05:1c:ac:15:7c:24:e2:2e:71:65:bc:cb:
a2:6b:62:5e:f0:91:5f:54:06:83:38:5b:f6:ab:ee:10:71:6a:
78:42:a7:19:26:ba:c8:4d:a7:00:4d:49:71:7d:37:2b:b6:f3:
64:af:a4:2b:01:5c:f7:b3:90:85:45:0f:ab:d4:72:69:85:5c:
a0:c6:52:c6:94:e9:70:43:cc:ae:5a:84:09:c5:48:b1:8a:9a:
a8:c6:79:9d:1d:cf:05:b9:9f:60:f1:f3:58:27:ab:73:52:58:
e0:8b:f2:a2:13:9f:b0:4b:9a:7e:91:90:df:4d:5d:f6:06:71:
d8:91:cc:85:51:60:2e:17:b0:06:ff:89:34:68:b5:e0:a6:42:
8c:6d:1b:65:80:5a:30:44:50:ea:68:1b:88:97:d9:93:6a:fe:
32:36:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:08 2025 by rpki-client