Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: sdo0MMMxJWxEOw/JdbIULoBdehLWhfkuFC2JsUNGplo=
Subject key identifier: 15:FC:80:E5:34:95:DA:BD:24:88:1E:64:E7:39:5C:6D:26:4D:CA:54
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5FBBA039B758DC24F2B0021CFCBB6489034B53D3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:22 +0000
ROA not before: Fri 07 Feb 2025 19:08:22 +0000
ROA not after: Fri 06 Feb 2026 19:13:22 +0000
asID: 47272
IP address blocks: 2a0a:6044:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bb:a0:39:b7:58:dc:24:f2:b0:02:1c:fc:bb:64:89:03:4b:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:22 2025 GMT
Not After : Feb 6 19:13:22 2026 GMT
Subject: CN=15FC80E53495DABD24881E64E7395C6D264DCA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:03:72:6f:b8:14:15:98:ec:c9:02:d0:a2:
43:50:40:6a:94:12:d9:ea:e9:d5:31:f9:b2:f0:d6:
c9:10:34:b0:ee:1f:86:f9:9a:b3:a4:ab:41:bd:24:
b5:86:8a:24:a6:ce:aa:72:a6:5d:be:92:1e:18:9c:
91:e0:8a:10:92:ef:e7:6b:71:f4:95:31:18:37:98:
b8:5c:d1:55:b9:7a:c7:15:8b:ef:7c:a1:34:3e:19:
b0:16:cf:ad:49:0d:73:af:10:10:90:a0:41:6c:06:
d7:b8:39:4e:ea:a5:96:33:de:09:65:77:7f:e9:a2:
96:87:51:24:29:d5:f1:8f:93:65:9b:22:5d:d5:47:
6d:67:ac:3c:35:99:09:a4:38:e4:6d:fa:35:04:70:
66:f2:69:9b:8b:89:a5:68:05:d2:93:33:fa:9a:17:
cb:6f:c2:7f:72:e2:df:92:74:1e:a2:27:c6:ae:6f:
d1:ba:39:34:73:5c:d9:14:07:8f:3b:93:c7:3f:e3:
fa:5c:4a:5f:8e:3f:43:b7:0b:fe:40:ca:fc:2e:f9:
86:56:a5:13:81:13:dd:75:67:e5:45:70:fa:4f:ff:
7f:2e:d1:1c:79:a3:74:8c:70:f1:e6:76:cd:53:03:
68:bc:db:4e:f3:d5:f3:cc:31:7a:e9:2e:e4:18:03:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:80:E5:34:95:DA:BD:24:88:1E:64:E7:39:5C:6D:26:4D:CA:54
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a613a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a::/48
Signature Algorithm: sha256WithRSAEncryption
36:fa:f4:54:3b:cd:3c:cb:7e:f3:d6:95:32:7e:22:e5:43:3b:
d8:c3:e5:25:2e:3f:c5:4f:f9:a8:ae:9b:dd:4c:01:9e:eb:53:
1e:4a:ca:99:d1:21:bf:1c:6d:16:37:28:11:ca:c4:8e:d2:cf:
62:0e:7e:dd:fe:3f:d4:67:33:3c:af:70:b2:b5:7f:9f:cf:2b:
a1:24:9d:96:eb:ee:31:db:7b:25:20:7e:a7:1c:60:c8:87:8d:
18:8f:98:29:9b:c0:4d:df:0c:88:06:4b:79:6e:bf:67:6a:6c:
95:db:06:19:33:55:67:c5:c3:42:47:4c:20:17:7b:eb:92:e0:
51:e4:49:d3:56:e0:f5:ba:e5:27:b5:8d:7a:82:60:19:45:74:
6b:55:13:50:0a:03:96:9a:c0:6d:5c:dc:40:96:66:36:26:ae:
24:e6:25:92:db:a2:e5:36:54:d9:f2:29:7a:8c:ea:43:e9:d4:
74:54:f0:d9:a1:f1:61:2e:67:90:6b:d7:6f:a2:6d:73:76:60:
9d:f2:95:90:38:d1:39:52:05:62:62:eb:c8:fb:97:3e:96:55:
ec:35:94:b8:9d:60:98:87:90:3a:f2:92:1e:e3:08:2e:94:92:
b0:fa:d3:ed:b5:6b:c8:f1:7d:70:67:2a:98:40:c1:3c:5f:b7:
0e:f0:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:26 2025 by rpki-client