Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: NatYDdljtJbRP9HbjTkCpQXauavCFGlQ13P41Cohs7Y=
Subject key identifier: EC:FA:59:AC:C7:8A:AC:B6:7D:8A:F5:13:83:B9:28:C7:89:09:E0:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 1FDB517B3CE8121F78B70CA8F1DA47F40D1F7444
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:20 +0000
ROA not before: Fri 07 Feb 2025 19:08:20 +0000
ROA not after: Fri 06 Feb 2026 19:13:20 +0000
asID: 47272
IP address blocks: 2a0a:6044:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:db:51:7b:3c:e8:12:1f:78:b7:0c:a8:f1:da:47:f4:0d:1f:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:20 2025 GMT
Not After : Feb 6 19:13:20 2026 GMT
Subject: CN=ECFA59ACC78AACB67D8AF51383B928C78909E036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ee:b4:5a:04:14:f2:b7:19:88:e7:4c:c4:
c1:c6:e8:ab:65:71:c2:fa:59:8e:9d:20:25:85:5a:
2f:03:4f:50:73:01:fb:9b:19:74:14:8b:c0:e9:49:
04:38:59:c5:b8:b0:cb:c0:fc:ae:9a:8b:c8:0d:03:
cf:b4:73:00:ed:e1:26:1b:a9:de:22:7b:89:67:50:
d0:b7:33:6f:1a:57:70:fb:99:5d:a6:e4:91:4f:55:
20:c3:3c:df:f5:5e:34:3d:7f:46:5c:81:2b:70:2e:
50:46:f7:64:c2:59:0e:5c:2e:a4:e2:4e:ac:d3:b9:
94:75:2b:66:98:a3:95:6c:ea:33:93:d6:d4:51:3b:
c0:aa:2e:b6:42:ff:8a:53:2e:b8:ad:34:3c:11:31:
8f:62:ac:ce:99:47:d9:25:71:18:b5:43:37:b1:e5:
29:4e:b9:98:cd:e3:68:f0:da:08:9b:4c:03:1c:e1:
60:11:1a:27:6d:0d:2a:b5:28:24:ff:ad:b7:a9:78:
23:71:94:0e:dd:af:1c:b8:f5:34:a3:f0:4e:f2:99:
da:d3:96:4a:d5:88:57:af:e7:8f:02:0d:5b:85:e2:
2e:96:1a:7f:05:9d:33:ea:a3:6a:d8:bf:b7:72:86:
55:5b:40:ec:22:11:ea:5f:3e:11:b5:8c:31:f9:88:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:59:AC:C7:8A:AC:B6:7D:8A:F5:13:83:B9:28:C7:89:09:E0:36
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a373a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7::/48
Signature Algorithm: sha256WithRSAEncryption
9a:e7:ef:c5:b4:9b:c7:24:fe:ac:37:ce:43:d8:16:e9:37:25:
03:19:66:7b:19:99:d4:e9:8b:dc:48:b9:29:97:5f:70:46:47:
bc:89:5e:8f:f8:79:74:8e:11:3f:48:27:8e:13:b3:0f:c8:8b:
b4:07:09:5d:a9:c7:94:ad:8d:34:9e:20:28:86:df:59:83:17:
ac:64:a9:42:2b:f9:47:e1:5b:3c:83:17:f1:80:86:2d:0c:51:
18:e6:3d:ff:9a:31:55:05:00:01:91:69:5c:75:5c:46:51:48:
aa:75:c6:0b:e9:d0:7e:ea:a0:b7:2f:f5:bc:00:0d:bc:94:2c:
e4:74:0b:53:d0:c7:a3:e0:37:19:97:55:fb:66:d4:81:5c:f4:
40:60:d1:3f:9a:37:62:2c:91:18:72:de:51:87:db:b0:5c:fc:
de:18:9f:15:db:ab:cb:fc:d7:da:22:31:cd:12:e1:6f:36:f5:
d8:35:86:a6:a3:c4:fa:27:98:c8:90:18:31:61:ad:db:2c:04:
51:d5:ec:6b:b5:03:84:17:9b:4d:6f:3a:38:02:6d:30:ed:91:
52:33:39:3e:9d:ec:17:54:b6:4e:c3:a7:04:33:8b:a7:f6:8e:
20:a9:1e:74:69:38:62:b0:81:c6:81:77:99:e5:af:44:d8:43:
a8:14:ce:b3
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUH9tRezzoEh94twyo8dpH9A0fdEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTAyMDcxOTA4MjBaFw0yNjAyMDYxOTEzMjBaMDMxMTAvBgNV
BAMTKEVDRkE1OUFDQzc4QUFDQjY3RDhBRjUxMzgzQjkyOEM3ODkwOUUwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFO60WgQU8rcZiOdMxMHG6Ktl
ccL6WY6dICWFWi8DT1BzAfubGXQUi8DpSQQ4WcW4sMvA/K6ai8gNA8+0cwDt4SYb
qd4ie4lnUNC3M28aV3D7mV2m5JFPVSDDPN/1XjQ9f0ZcgStwLlBG92TCWQ5cLqTi
TqzTuZR1K2aYo5Vs6jOT1tRRO8CqLrZC/4pTLritNDwRMY9irM6ZR9klcRi1Qzex
5SlOuZjN42jw2gibTAMc4WARGidtDSq1KCT/rbepeCNxlA7drxy49TSj8E7ymdrT
lkrViFev548CDVuF4i6WGn8FnTPqo2rYv7dyhlVbQOwiEepfPhG1jDH5iKgNAgMB
AAGjggJyMIICbjAdBgNVHQ4EFgQU7PpZrMeKrLZ9ivUTg7kox4kJ4DYwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczMjM3MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqCmBEAAcwDQYJKoZIhvcNAQELBQADggEBAJrn78W0m8ck/qw3zkPYFuk3JQMZ
ZnsZmdTpi9xIuSmXX3BGR7yJXo/4eXSOET9IJ44Tsw/Ii7QHCV2px5StjTSeICiG
31mDF6xkqUIr+UfhWzyDF/GAhi0MURjmPf+aMVUFAAGRaVx1XEZRSKp1xgvp0H7q
oLcv9bwADbyULOR0C1PQx6PgNxmXVftm1IFc9EBg0T+aN2IskRhy3lGH27Bc/N4Y
nxXbq8v819oiMc0S4W829dg1hqajxPonmMiQGDFhrdssBFHV7Gu1A4QXm01vOjgC
bTDtkVIzOT6d7BdUtk7DpwQzi6f2jiCpHnRpOGKwgcaBd5nlr0TYQ6gUzrM=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:25 2025 by rpki-client