Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa
File: 326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (raw, json)
Hash identifier: yOc4UkMlLLfE6KrccWuQDd1bkT21VbFcM9Cwi4iFxow=
Subject key identifier: 55:69:47:D4:F1:B3:F6:EA:02:CB:4B:8A:F0:FF:B2:3D:19:EF:B3:96
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5F5340045F3EF55B7888CD7A5754F905B20386B3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa
Signing time: Sat 15 Mar 2025 18:22:28 +0000
ROA not before: Sat 15 Mar 2025 18:17:28 +0000
ROA not after: Sat 14 Mar 2026 18:22:28 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:53:40:04:5f:3e:f5:5b:78:88:cd:7a:57:54:f9:05:b2:03:86:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 15 18:17:28 2025 GMT
Not After : Mar 14 18:22:28 2026 GMT
Subject: CN=556947D4F1B3F6EA02CB4B8AF0FFB23D19EFB396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:dc:67:8b:6e:d4:48:7f:61:41:8e:52:39:
97:c9:94:36:22:dc:60:1a:c1:ec:8a:f2:c3:3f:a2:
24:4f:e5:d1:99:d7:96:48:02:af:54:ea:76:aa:3a:
e1:ba:c9:eb:d9:98:a4:f5:8b:a9:2f:e5:db:fd:98:
55:94:9a:c9:da:c1:a6:bd:82:26:95:f0:bf:af:c7:
3b:1c:92:bc:de:1c:25:ca:0b:99:0a:6f:a3:09:3b:
3a:31:97:1d:4a:7e:6d:81:e9:b1:b6:c5:4b:d2:29:
60:cc:28:d7:4f:aa:13:f2:48:85:be:12:d6:ea:43:
97:0b:03:5d:6c:cd:a9:a5:2d:ec:29:aa:7a:70:b8:
32:db:ac:89:42:10:92:80:c8:3b:55:8a:57:e8:2d:
a7:56:5f:72:dc:b7:0d:50:d6:53:36:23:e2:4e:f0:
7f:83:53:c5:d8:e8:56:57:eb:6e:8b:d6:bc:e9:ee:
8a:ed:2e:69:2c:12:16:47:cd:d4:04:50:14:8c:b3:
ff:bc:78:e5:49:bb:f5:0f:05:c4:2c:11:93:8f:69:
40:b4:da:95:6a:12:ab:17:b2:9b:c4:01:ce:a1:a1:
82:87:1d:e3:3a:5e:b9:a4:59:bc:6e:ae:f1:03:b2:
d2:16:fb:fb:14:6e:d2:19:44:b0:cc:46:b8:8a:d1:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:47:D4:F1:B3:F6:EA:02:CB:4B:8A:F0:FF:B2:3D:19:EF:B3:96
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
8a:49:1a:f2:c6:f4:f6:56:7d:11:a3:33:4a:fa:13:7e:74:2d:
54:5d:f6:aa:c2:24:84:7d:02:32:c2:d4:4e:fe:a4:38:61:24:
04:dd:83:9d:85:bf:02:3a:eb:e9:40:cb:00:96:79:ad:02:06:
e5:e3:f7:17:b2:8e:0b:60:1f:24:be:bb:38:a3:64:96:f4:46:
4c:53:46:f7:dc:d3:f8:90:d7:9c:2c:cc:bd:10:65:ba:98:c4:
a9:11:d8:5f:b4:1d:f8:c8:a7:f2:30:d4:c2:20:50:3c:ba:5a:
cd:bc:f0:99:2e:dc:b1:7b:84:aa:d0:52:5f:b6:42:6d:07:c5:
5a:4a:cc:fc:5a:3d:68:25:48:94:bd:0a:11:8d:d6:f7:e2:3c:
2e:81:a8:da:6c:72:a6:03:d1:e3:fc:b3:05:8c:07:90:d7:78:
4b:e5:53:43:ac:f7:41:2a:21:ff:cc:46:65:82:de:eb:09:dd:
09:40:88:fa:a2:0d:01:8a:19:4e:b2:cb:d1:cc:76:db:64:79:
88:e1:20:91:f1:1e:0e:85:79:c3:d3:2d:5c:a2:82:3f:12:29:
d9:8d:d8:4e:69:b3:87:c3:6b:02:47:0b:b0:3c:2c:2b:d1:eb:
ac:1f:e0:50:d4:bb:fb:ae:6f:0a:6e:3c:aa:0e:68:a9:d5:8e:
99:ba:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:45:01 2025 by rpki-client