Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa
File: 326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa (raw, json)
Hash identifier: t1151Ti5zLayM1mIVsiAH+WQWsPVO7AsfDojFm5pJj4=
Subject key identifier: B4:B3:46:87:FE:4A:FD:38:2B:C2:9D:FD:75:DA:73:08:26:2E:67:84
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 614A3487C74F921509A555766A8471D2FEB4299D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa
Signing time: Fri 07 Feb 2025 18:35:18 +0000
ROA not before: Fri 07 Feb 2025 18:30:18 +0000
ROA not after: Fri 06 Feb 2026 18:35:18 +0000
asID: 205398
IP address blocks: 2a0a:6044:ae00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4a:34:87:c7:4f:92:15:09:a5:55:76:6a:84:71:d2:fe:b4:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 18:30:18 2025 GMT
Not After : Feb 6 18:35:18 2026 GMT
Subject: CN=B4B34687FE4AFD382BC29DFD75DA7308262E6784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:ff:84:f3:0b:12:c0:a4:a0:f6:d4:3b:f9:
fc:94:b2:d5:bb:ce:0c:b5:6f:72:cf:7d:73:ad:7e:
ec:b1:d9:ee:56:a4:57:05:70:f5:4e:15:98:7c:25:
f9:23:36:f8:eb:6f:da:ba:40:ae:46:f5:49:4d:e4:
70:4e:a9:8f:5c:12:6c:3d:c2:70:be:ad:6d:d6:24:
e1:d1:cc:39:0a:69:6b:0f:e7:e9:4d:64:3f:ce:d5:
9c:f5:9f:59:67:27:d8:48:6a:cd:b6:41:f3:06:53:
2b:75:6f:10:fa:2c:28:4f:d9:f9:f9:8e:8a:a4:17:
83:35:62:71:30:89:b8:f4:72:42:c0:5c:c7:7e:3b:
b7:64:a6:6a:b3:96:d6:35:b9:cd:e6:46:2c:21:96:
18:17:9b:05:cd:23:76:83:44:2c:5a:86:60:e4:0f:
53:87:d5:04:8a:ad:53:cf:81:fc:db:86:01:6a:c4:
21:c8:dd:be:47:e3:67:59:9a:42:31:83:33:ea:7e:
6c:43:55:13:35:90:08:9b:42:e6:65:57:f1:ed:31:
d9:ec:a2:6b:f6:9e:5e:13:f6:a4:8b:6a:ea:41:ac:
6e:3b:f6:e2:80:80:20:fd:36:39:77:2d:3d:85:59:
2d:ab:72:51:2f:a2:d8:16:a4:77:37:c8:8f:9f:ce:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:46:87:FE:4A:FD:38:2B:C2:9D:FD:75:DA:73:08:26:2E:67:84
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
3b:2e:1c:70:6a:a3:8f:c7:02:eb:96:72:97:0b:90:67:21:c4:
eb:75:19:82:13:72:56:43:d9:2a:1e:1d:7e:f5:65:d6:ee:8c:
07:f5:d8:2d:31:f3:e3:23:39:39:07:dd:51:eb:87:e4:5b:98:
ba:0b:c3:ad:ad:ad:e9:8e:77:8a:ce:12:d1:57:9e:03:6e:3f:
4c:9d:bb:81:d8:12:51:a8:1d:64:11:1f:40:2d:4d:6b:21:d6:
60:5e:4b:d9:a9:97:29:03:ea:70:ed:34:3f:6c:1f:99:f2:c8:
03:20:df:94:4f:68:b6:1a:0a:0c:2b:5d:f3:a9:be:6b:38:b4:
cd:95:0e:5a:18:83:8d:11:08:95:9a:d6:78:74:fc:cb:98:e0:
e6:8f:5f:d4:8b:39:a8:0b:2a:84:25:e8:e9:aa:5b:50:6c:65:
3f:41:a8:7e:8a:ed:83:64:a2:b9:c2:f8:69:0d:d2:bd:47:58:
cb:a1:e2:f1:81:e9:da:3e:e4:82:98:91:33:c2:ed:8a:8b:a3:
bc:14:db:e8:58:37:20:95:53:7a:98:4a:7c:0a:63:52:75:e9:
38:77:ea:cc:d6:51:a6:c0:df:d8:52:b5:50:98:39:23:5d:66:
4d:65:12:aa:12:73:7f:ee:b6:19:a6:fc:dc:5c:dc:dc:f7:ab:
42:92:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:12 2025 by rpki-client