Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613530303a3a2f34302d3438203d3e20323135393536.roa
File: 326130613a363034343a613530303a3a2f34302d3438203d3e20323135393536.roa (raw, json)
Hash identifier: dlOjCFA6UHjzjGWpvjAHH4BOqjOhQdDFj1yUeQjtGAs=
Subject key identifier: 79:CF:84:9F:15:E1:77:9C:F2:02:9E:6B:E1:14:26:18:54:E7:47:B4
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4FC9216E85A4E340697EAC7101D5865E6A5B2AB6
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613530303a3a2f34302d3438203d3e20323135393536.roa
Signing time: Fri 07 Feb 2025 18:34:44 +0000
ROA not before: Fri 07 Feb 2025 18:29:44 +0000
ROA not after: Fri 06 Feb 2026 18:34:44 +0000
asID: 215956
IP address blocks: 2a0a:6044:a500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c9:21:6e:85:a4:e3:40:69:7e:ac:71:01:d5:86:5e:6a:5b:2a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:29:44 2025 GMT
Not After : Feb 6 18:34:44 2026 GMT
Subject: CN=79CF849F15E1779CF2029E6BE114261854E747B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:52:19:01:11:19:e4:1c:5b:df:36:0c:4d:
4b:6f:85:2d:c1:95:2b:55:29:81:b3:70:80:78:1a:
e1:38:39:d9:c8:43:49:d3:9b:e1:89:47:c3:5c:04:
f3:0b:46:15:05:c6:bf:10:77:47:98:13:f3:78:ed:
f6:03:ba:5d:dd:24:0f:2a:9e:d3:30:11:e0:c5:b0:
15:a7:c6:9f:6b:13:45:a1:c3:c4:1d:3a:d8:09:b0:
5a:a5:b0:0b:32:c0:98:d8:96:68:81:db:8e:df:99:
4d:02:62:62:d6:8e:28:81:bb:c6:e6:e3:02:63:54:
6d:39:be:25:5d:6a:c0:b9:fa:87:54:b8:70:e9:d2:
7d:b9:c2:ec:8a:0b:c6:fb:74:b1:6c:be:a6:c1:2b:
62:83:38:6f:0d:b8:50:59:e6:d0:ec:d2:3e:8f:55:
d8:83:38:ab:40:1f:6c:c1:bc:e8:24:3d:68:80:06:
cc:ae:14:17:cf:f1:f8:17:6c:cd:ab:bb:f5:b9:1a:
7b:16:16:42:0a:ac:9a:74:7c:96:2d:f5:f6:84:93:
6c:2b:8d:39:f1:6a:6c:1f:fc:f8:81:a0:41:f1:ab:
be:05:ba:01:e2:05:2c:86:cf:ff:78:32:e1:42:12:
87:3d:8d:70:05:c7:89:d0:c3:9c:b2:80:c0:45:ea:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:84:9F:15:E1:77:9C:F2:02:9E:6B:E1:14:26:18:54:E7:47:B4
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613530303a3a2f34302d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a500::/40
Signature Algorithm: sha256WithRSAEncryption
a1:ea:77:c2:8b:9e:b4:ff:6a:6d:37:e8:d4:cc:88:1d:4b:d8:
e5:ef:30:4e:d5:7a:8e:47:ea:1d:ea:32:08:58:4b:7a:0d:75:
89:f9:55:d0:66:e9:f4:33:36:cd:36:f0:bc:41:90:f2:1b:ba:
17:16:47:d1:28:ec:99:10:ae:47:ba:09:1e:45:46:ee:ee:10:
5c:8f:59:fd:ca:cd:00:6a:ab:ed:da:81:10:aa:71:53:92:49:
9c:ad:de:6f:50:bf:fa:08:4e:71:6f:55:da:d0:09:9e:55:cc:
3f:57:8b:94:85:44:23:e9:02:fc:61:b0:0c:5c:0a:1d:3b:24:
48:b3:4b:44:42:ba:93:6a:c4:6b:cf:ae:aa:5a:fa:99:c3:df:
a4:72:30:a8:eb:2a:2b:24:56:7d:ee:8b:f9:b9:e6:7b:ca:b2:
1e:09:1d:72:9f:26:5f:8e:95:60:05:2d:4b:24:cb:2b:66:23:
fd:d3:e0:8b:00:dd:04:ad:e9:75:fc:f9:49:c2:15:3d:3b:24:
7a:e8:1c:9e:57:ba:47:e7:89:9d:f9:5e:fd:32:e4:9e:84:dd:
df:df:38:81:dc:de:25:ff:0f:c7:3e:12:fa:80:77:17:04:15:
82:4f:43:e3:3a:51:a1:f7:c0:ae:00:07:ec:56:88:75:51:11:
de:72:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:03 2025 by rpki-client