Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa
File: 326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier: sBSsr9mU1ggjM8pZTIOo5/VguGZb5j/iCm8sWIY0vYI=
Subject key identifier: AD:78:0E:AF:FA:8D:72:7D:B2:8F:EE:21:B6:78:26:05:5A:9D:72:C5
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 562608168D4DF285963306DB58CC1AF9C6073530
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:20 +0000
ROA not before: Fri 07 Feb 2025 19:08:20 +0000
ROA not after: Fri 06 Feb 2026 19:13:20 +0000
asID: 47272
IP address blocks: 2a0a:6044:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:26:08:16:8d:4d:f2:85:96:33:06:db:58:cc:1a:f9:c6:07:35:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:20 2025 GMT
Not After : Feb 6 19:13:20 2026 GMT
Subject: CN=AD780EAFFA8D727DB28FEE21B67826055A9D72C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:a3:ac:e5:df:4f:8d:76:48:3f:ec:23:ab:
6f:d0:26:9d:a0:b5:40:14:dd:cf:ef:fa:b9:0d:1a:
58:a9:d9:cc:d1:91:a2:fd:a3:74:3a:9b:c5:13:a6:
b5:61:b8:73:0e:42:c5:35:c2:30:b2:18:25:d8:89:
c8:83:5f:03:b4:15:42:93:a1:22:4b:cc:cb:aa:0a:
63:a4:f6:69:a7:91:8a:62:39:dc:1e:61:71:9d:bb:
48:6a:70:0a:c0:eb:99:fd:c6:13:5c:8d:93:97:33:
cf:b1:24:79:bb:42:c7:c0:d8:c7:5d:89:99:88:f4:
2d:46:41:7a:7a:70:dd:b9:e8:cd:e5:b4:42:41:d5:
b9:a4:76:ba:36:cb:58:97:53:e8:c4:5b:b0:df:48:
9c:b4:7e:26:7e:5c:e1:3a:88:85:45:58:a6:14:1e:
7a:16:e1:cc:e3:23:c3:d6:59:c7:60:fc:2d:f6:be:
4f:b9:08:e4:22:5c:c6:dc:42:54:0b:0d:a7:7f:fe:
e1:be:6e:b6:23:86:52:48:75:44:5e:72:15:d9:8c:
20:f0:60:a3:c7:74:06:d3:d3:48:65:54:be:ff:b2:
87:c3:3f:ab:2c:ce:bd:90:fb:96:64:2a:bb:24:76:
05:d5:97:13:6f:7e:a6:cc:3f:d1:99:3e:c8:2f:33:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:0E:AF:FA:8D:72:7D:B2:8F:EE:21:B6:78:26:05:5A:9D:72:C5
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a623a3a2f34382d3438203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b::/48
Signature Algorithm: sha256WithRSAEncryption
84:85:ca:3e:3d:9e:f8:78:24:b8:56:b2:84:6a:f4:98:d1:48:
f2:7b:f2:58:43:f7:28:19:69:91:d4:a7:05:11:9d:9e:51:a9:
30:5a:37:36:80:97:11:ca:50:6d:24:f1:ac:a5:55:76:40:a9:
68:77:6b:49:31:a3:e4:32:d2:87:dd:a8:ca:09:44:cd:83:35:
f3:13:2a:a2:b9:b9:8f:00:42:47:1f:bf:0f:cd:70:b5:18:3a:
66:5c:ee:81:cf:2e:24:5c:9f:03:3d:bc:c7:b1:67:ed:94:5f:
79:4a:27:11:14:7f:ef:eb:f4:d6:cf:3e:eb:71:e5:a2:2e:cd:
b5:c9:db:cc:9a:37:ff:c0:b6:e5:0d:25:d5:9c:1e:d2:d5:93:
9d:46:86:4b:84:e3:de:e9:b7:c2:a3:07:60:4d:7b:e2:c6:43:
5f:fb:85:91:89:68:ce:87:af:7c:e2:eb:2f:b5:1b:5b:60:fd:
c6:98:f9:54:b8:76:b8:ac:76:16:73:79:21:c7:e8:27:5b:cb:
94:b3:1c:4b:95:2f:a4:6e:ad:a8:ed:15:c1:02:08:1e:15:bf:
58:55:30:04:c6:ea:b8:44:63:38:2f:7a:ec:0b:28:12:bb:cb:
ed:11:95:5a:b3:d1:28:c5:8d:79:c5:c7:c5:9d:6d:f8:88:51:
a1:7a:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:27 2025 by rpki-client