Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616361303a3a2f34342d3438203d3e20323134363735.roa
File: 326130613a363034343a616361303a3a2f34342d3438203d3e20323134363735.roa (raw, json)
Hash identifier: JqGLI4njITjzPAgJnl2IwM/vQ9j18K53yvHgm9VmRK4=
Subject key identifier: 49:B5:AB:37:47:B9:8B:2D:F3:B7:62:FC:D7:6F:10:ED:E1:54:0D:12
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 7A6AE6396587CF7AFE52D3E4484EC635820C0423
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616361303a3a2f34342d3438203d3e20323134363735.roa
Signing time: Sat 15 Feb 2025 02:06:55 +0000
ROA not before: Sat 15 Feb 2025 02:01:55 +0000
ROA not after: Sat 14 Feb 2026 02:06:55 +0000
asID: 214675
IP address blocks: 2a0a:6044:aca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:6a:e6:39:65:87:cf:7a:fe:52:d3:e4:48:4e:c6:35:82:0c:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 15 02:01:55 2025 GMT
Not After : Feb 14 02:06:55 2026 GMT
Subject: CN=49B5AB3747B98B2DF3B762FCD76F10EDE1540D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:91:58:cc:b5:3f:c1:14:39:83:de:e8:9a:
5a:8a:3d:9b:9c:12:62:8f:44:dd:cc:9c:01:72:bd:
09:ad:0e:83:31:7c:30:da:df:b2:81:b3:ee:a5:bc:
d9:b2:e2:8b:9e:b4:c3:ea:d1:c1:ae:5d:c8:b5:aa:
dd:c2:51:f7:9a:66:0d:8e:16:02:07:03:92:fc:60:
04:ea:cd:fc:af:76:06:c9:3a:14:71:b0:87:fa:54:
a8:49:76:75:18:01:b4:31:fe:12:38:bd:3f:ab:7a:
2b:ee:aa:c1:54:51:95:ca:84:0c:2a:4e:91:73:3d:
5e:0e:21:01:c8:48:06:35:bb:b8:2b:c8:bb:be:94:
fb:ae:61:cc:e7:57:02:2a:07:39:20:dd:68:28:cc:
95:94:0b:5c:0d:c0:32:f6:5d:02:9c:18:ee:3d:43:
a3:6b:95:e5:80:50:a7:41:c4:27:2a:3d:5f:67:35:
a7:7c:9e:4f:ae:9e:df:a3:04:dd:f6:83:00:c9:5e:
98:c4:f8:99:1b:d7:92:2e:66:e6:f3:f2:88:87:86:
a2:f3:92:72:e9:b4:67:4d:53:11:30:55:bd:10:e0:
66:4d:21:9a:35:b4:68:57:44:a9:96:f3:5a:18:c9:
fc:cd:6f:bc:29:a9:b4:00:e9:dd:f5:1b:7c:d0:9e:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B5:AB:37:47:B9:8B:2D:F3:B7:62:FC:D7:6F:10:ED:E1:54:0D:12
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616361303a3a2f34342d3438203d3e20323134363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aca0::/44
Signature Algorithm: sha256WithRSAEncryption
34:a9:b2:8a:db:ee:b4:b3:e4:87:70:33:6e:63:99:eb:33:78:
9e:46:68:f1:96:19:36:78:bc:87:e7:22:a7:bf:76:54:89:89:
a0:a5:14:9c:35:08:75:8f:40:1e:59:63:b6:cd:d1:a9:da:bb:
dd:d2:90:87:14:02:ae:77:55:8b:5a:52:b5:1f:9d:07:69:c4:
13:90:7b:c5:c4:e5:67:99:61:cb:87:26:d7:b4:be:51:31:6b:
43:55:fd:d8:d4:c9:0e:95:46:e0:ca:12:c3:cd:d3:d8:94:be:
cc:c4:c9:89:f0:b6:59:ce:4e:fa:84:c1:37:48:5f:ca:15:2a:
58:e2:54:5b:87:28:44:58:c0:f2:e7:01:3d:8e:9f:74:d6:8d:
92:f8:58:fc:1d:7a:9a:37:88:b3:c4:e6:a0:50:6b:ea:73:4e:
f5:6b:f0:d9:ae:1a:82:e1:c6:d7:85:b0:1e:25:61:3e:f1:65:
35:c4:69:50:a1:30:c0:23:f9:be:03:d0:36:5d:26:0e:37:9c:
74:fb:4c:f0:06:59:59:de:34:52:2d:7d:0d:e4:23:cc:da:73:
de:63:b3:53:e9:18:49:a8:e6:7f:62:d0:5f:0e:c0:d6:8d:5e:
34:5c:bd:b9:46:dd:69:8e:3c:99:b6:ed:25:c3:71:1b:84:a0:
86:30:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:51 2025 by rpki-client