Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
File: 326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa (raw, json)
Hash identifier: STLbIU2E6K8aEVmq3Eaz/iAzj34KUWEVdVMpoMtv1ac=
Subject key identifier: B8:94:E1:1F:16:7D:DB:80:4E:BB:A3:A9:6A:97:42:A2:FA:64:BA:FE
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4AA301F85EB878954745216CEFB0E52782E30D76
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
Signing time: Fri 14 Feb 2025 18:04:34 +0000
ROA not before: Fri 14 Feb 2025 17:59:34 +0000
ROA not after: Fri 13 Feb 2026 18:04:34 +0000
asID: 215605
IP address blocks: 2a0a:6044:7c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a3:01:f8:5e:b8:78:95:47:45:21:6c:ef:b0:e5:27:82:e3:0d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 14 17:59:34 2025 GMT
Not After : Feb 13 18:04:34 2026 GMT
Subject: CN=B894E11F167DDB804EBBA3A96A9742A2FA64BAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:81:0d:37:e3:9c:36:ea:d8:9a:69:1e:08:
40:45:11:e6:c0:60:e3:10:79:c2:21:8b:1b:2d:2e:
8e:51:6f:8b:4e:f8:a1:b8:3c:27:8b:6d:6e:c1:0f:
19:fe:69:89:35:1c:1d:c2:4c:0e:f5:e8:bd:b4:1a:
15:d8:c7:5f:91:a9:49:a9:e5:3e:f7:9e:14:5d:79:
56:8f:1e:5c:fb:ca:3f:63:3a:bf:1a:b7:66:1a:fe:
66:78:07:8a:2e:e7:74:21:75:35:cf:6d:c5:b7:92:
aa:ac:3e:c7:b0:1b:26:b2:30:2c:03:5c:d7:08:11:
e1:b8:60:ec:6e:5e:50:89:09:32:e5:42:fd:51:15:
68:10:ba:c5:f6:7c:fa:3b:81:94:7f:c4:0f:e4:5d:
bb:bc:02:69:f8:5b:d5:f7:71:3a:90:40:cd:8a:e9:
86:3d:7e:8f:3e:ce:96:de:6e:3a:19:c4:44:65:1e:
6e:78:0c:46:4f:6f:d6:e4:2d:ae:97:a8:2b:55:cd:
19:44:85:40:32:2a:c9:8b:96:1b:0d:4a:7c:68:b1:
ac:bd:d3:31:c5:15:b3:02:a2:01:90:aa:f8:ad:5d:
55:d8:cf:8d:0b:df:6e:f5:51:95:59:32:d8:47:f3:
07:54:f1:75:2d:a1:b3:30:5c:4e:66:87:99:0a:81:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:E1:1F:16:7D:DB:80:4E:BB:A3:A9:6A:97:42:A2:FA:64:BA:FE
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a376330303a3a2f34302d3438203d3e20323135363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
Signature Algorithm: sha256WithRSAEncryption
2c:05:07:2b:49:0b:3f:9c:53:ea:fc:46:a5:0c:43:06:87:59:
a3:74:33:0e:6c:d3:a7:35:1b:dd:5a:c4:da:bd:2a:68:02:27:
03:be:2d:4c:af:f0:68:fb:ec:2e:e0:36:76:e9:10:78:ba:47:
51:b0:62:ae:23:f5:de:6b:5f:e7:1e:d6:e3:61:c7:49:30:65:
38:7a:54:c5:54:16:b1:86:62:37:f0:81:b6:28:b0:d4:9d:d9:
e6:a9:43:a1:02:00:c3:ed:95:12:64:5a:c4:8f:06:56:d6:12:
7d:26:65:af:96:f4:69:50:7e:eb:32:1c:c9:ad:f2:4b:c0:00:
da:db:dc:6f:71:f9:0a:12:f3:ca:b1:de:ec:b4:49:a2:72:91:
42:b8:b3:1f:28:e6:87:e0:63:c8:00:ce:4e:e6:7e:2e:d9:81:
48:7d:93:1f:73:7d:d0:02:f2:69:dd:4a:3a:1e:96:5b:db:ee:
5c:94:9a:75:b0:fb:18:62:20:fa:7b:d3:b0:ca:dc:ec:ef:40:
b7:d8:3b:cf:c6:1e:8d:99:4e:c5:71:d1:2f:4a:e2:a1:40:03:
01:fa:a4:ed:ec:50:8f:a8:2a:fe:0d:fe:2f:35:24:fc:50:ee:
fa:8d:21:b5:e4:16:a8:45:dc:a5:5a:cd:63:e6:b8:77:ab:a5:
7a:9c:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:41 2025 by rpki-client