Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa
File: 326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa (raw, json)
Hash identifier: d/1dHO9HJN6B62/Pdawn9VHom5gUv/aBjvgYI7hvnVs=
Subject key identifier: 4E:61:C8:B8:BB:B3:32:7A:CC:84:17:52:9C:DC:05:F0:8C:FF:E2:C2
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0CCD9F0B61584B84080798EF9AC7429FC3254AF2
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa
Signing time: Sat 15 Feb 2025 13:25:37 +0000
ROA not before: Sat 15 Feb 2025 13:20:37 +0000
ROA not after: Sat 14 Feb 2026 13:25:37 +0000
asID: 215150
IP address blocks: 2a0a:6044:acc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cd:9f:0b:61:58:4b:84:08:07:98:ef:9a:c7:42:9f:c3:25:4a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 15 13:20:37 2025 GMT
Not After : Feb 14 13:25:37 2026 GMT
Subject: CN=4E61C8B8BBB3327ACC8417529CDC05F08CFFE2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:e8:9e:96:63:f7:d3:80:e5:4a:84:01:2f:
91:b7:19:99:f4:1d:a5:03:1b:17:a0:da:b8:49:e5:
a0:6e:c9:2b:b3:12:45:42:8b:82:18:a9:43:f7:10:
d5:a2:81:2d:4d:c8:04:eb:ac:48:48:84:9a:16:a7:
91:c2:f4:58:89:b7:cb:a2:ff:ed:0c:5d:c4:ca:4f:
81:f9:93:72:c2:44:ba:71:a2:97:00:3f:43:f8:d0:
0b:d1:f7:65:cf:44:83:b8:a4:36:61:5c:61:ba:4d:
19:89:44:40:27:fe:53:a4:68:fe:6f:0d:cb:c2:e4:
7c:30:95:68:26:78:19:04:21:d3:ab:d9:8e:d7:b1:
85:8b:ca:97:12:ac:f2:86:7c:58:70:11:77:09:90:
21:29:4f:63:29:ea:9d:e4:66:ca:fd:ec:4b:cf:e7:
dc:97:41:1b:fe:14:1c:3d:13:33:ad:25:1d:c1:a1:
97:bb:a4:77:29:bb:d8:18:f9:dd:c4:af:e1:bb:47:
03:d1:09:36:2b:f3:c6:df:9f:a3:f2:f0:05:03:11:
c8:b6:f5:ab:bf:c2:29:8d:a8:05:55:7e:4b:3e:60:
ca:06:78:c0:97:ac:a7:1e:0f:6e:e8:b6:40:fd:bb:
d8:d1:3b:8c:5d:30:5b:78:1f:cb:1e:51:0b:a9:ae:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:C8:B8:BB:B3:32:7A:CC:84:17:52:9C:DC:05:F0:8C:FF:E2:C2
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e20323135313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:acc0::/44
Signature Algorithm: sha256WithRSAEncryption
69:08:f7:39:86:69:77:d3:4c:5d:f1:18:7e:9d:11:08:ba:d1:
6a:1d:65:c1:c0:42:f5:0f:b9:04:97:1a:96:f1:f9:54:af:04:
90:08:e6:de:ae:b0:69:0f:37:e3:cb:b0:14:6d:29:22:86:57:
33:29:08:91:f3:07:ea:5a:e0:6f:d5:0a:67:ec:5a:b8:f9:c6:
43:5a:36:ee:23:a1:c0:0e:30:c2:a6:b4:93:dd:57:83:0e:68:
0c:df:6a:f9:fd:80:66:ca:c4:1a:ed:48:61:20:08:08:99:2c:
b8:d7:55:2e:41:64:49:b3:57:59:ee:ec:cd:c4:b7:c6:42:c5:
a7:96:21:b6:c2:e7:e8:5d:28:f5:0f:68:4d:28:33:a0:4c:a9:
7d:52:f2:c0:e2:63:da:7c:39:7b:c0:a8:de:ed:24:3e:68:1a:
a5:0a:5d:23:e1:d6:e8:f0:3a:18:9b:a1:1a:5d:5d:43:dc:b4:
38:1d:f0:4b:49:ea:39:16:a0:79:c5:14:cd:e2:35:75:f6:6c:
8d:4c:cc:e2:dd:cf:92:ca:25:85:61:d9:97:4e:98:80:59:26:
ea:85:0e:4a:90:d7:ee:8b:8d:98:85:e6:59:f4:60:14:f0:14:
0b:74:24:f8:e5:8c:8e:1d:f6:37:82:13:41:78:07:8d:51:9b:
87:7a:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:52 2025 by rpki-client