Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626330303a3a2f34302d3634203d3e20313939373633.roa
File: 326130613a363034343a626330303a3a2f34302d3634203d3e20313939373633.roa (raw, json)
Hash identifier: VJtApz2/hSg95d7QOi/Ed09GwmXQNh1OtIjyRE91vjE=
Subject key identifier: 24:A2:B6:AF:B7:38:6F:93:8D:A4:F8:7B:11:A5:23:4A:A2:E6:D0:DA
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2072A934B0BDAF04E209808C91DA4FCB3A20D66E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626330303a3a2f34302d3634203d3e20313939373633.roa
Signing time: Sun 16 Mar 2025 14:19:17 +0000
ROA not before: Sun 16 Mar 2025 14:14:17 +0000
ROA not after: Sun 15 Mar 2026 14:19:17 +0000
asID: 199763
IP address blocks: 2a0a:6044:bc00::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:72:a9:34:b0:bd:af:04:e2:09:80:8c:91:da:4f:cb:3a:20:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 16 14:14:17 2025 GMT
Not After : Mar 15 14:19:17 2026 GMT
Subject: CN=24A2B6AFB7386F938DA4F87B11A5234AA2E6D0DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:f2:60:7f:2f:b0:69:e5:0e:fb:0b:02:c7:
0e:41:eb:ea:48:00:d9:18:6e:19:ab:a9:dc:4d:93:
f8:9a:00:63:d7:97:d4:0f:20:5b:58:36:c7:e5:e6:
06:44:3f:2c:fd:a7:52:09:3c:6a:51:d7:55:70:fa:
fa:0f:01:09:31:20:fb:a5:f7:2e:c6:cb:c8:65:9f:
5e:39:8b:f6:1f:62:63:28:a2:84:51:64:ca:a9:c1:
2d:1e:b6:f9:6a:58:c6:86:21:d8:ad:32:ae:97:bf:
30:86:59:e6:cd:85:2c:8d:23:6e:90:b2:0d:9b:94:
d4:46:17:a1:3c:78:3b:66:41:b2:b2:7c:c0:24:b2:
07:83:42:0b:21:fa:df:d3:d9:dc:93:30:51:5f:18:
9f:91:b7:3e:80:c8:2d:08:58:1e:a5:6a:27:57:ac:
2f:0e:a1:65:07:e5:9b:c7:0c:a0:6a:88:0e:87:9c:
ce:c5:9d:16:6d:0f:ad:92:46:70:45:d2:ef:de:29:
0c:de:d5:ce:7f:2c:eb:07:6d:a4:09:f1:f9:98:f6:
40:ea:31:f0:1d:66:aa:a9:ed:22:89:2a:bd:91:3f:
02:40:6d:d8:6e:f2:a6:ab:5b:de:47:7f:07:48:70:
f7:d8:32:0c:73:c5:53:be:46:bf:f3:14:87:f0:ad:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:B6:AF:B7:38:6F:93:8D:A4:F8:7B:11:A5:23:4A:A2:E6:D0:DA
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a626330303a3a2f34302d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc00::/40
Signature Algorithm: sha256WithRSAEncryption
53:27:36:69:3f:4a:4f:1f:f1:7e:3c:83:98:e9:5d:a6:c3:a4:
46:c2:30:ef:88:20:56:2c:96:09:4f:ab:93:fe:ad:da:be:9e:
30:ff:ab:48:f4:46:52:10:39:5b:9b:8c:ab:13:01:01:b9:94:
1a:f2:00:9b:8c:1b:45:61:62:2e:95:05:90:4d:a6:de:26:57:
26:6d:28:e8:91:70:6f:15:de:b8:6f:fa:a7:61:3a:32:ef:98:
70:d8:08:52:47:d0:d3:b6:67:1f:57:f0:10:73:2f:2f:fc:f0:
75:05:43:c7:f7:d1:a1:ef:cb:71:3c:9e:c5:9a:79:c2:2c:45:
a0:22:2d:0e:d7:d3:24:3c:9e:32:14:eb:56:fe:ce:65:38:13:
d0:3d:9b:c4:f7:28:b9:3d:bd:9f:22:be:b2:28:a4:23:33:a2:
60:51:ac:36:a0:35:c5:09:ae:5d:f8:1e:90:e5:e3:1a:a2:37:
42:15:68:8c:d1:33:3f:c1:03:ee:46:10:a0:2b:11:cf:04:2d:
b4:bb:5f:af:11:50:f6:e1:67:11:e9:18:2d:3a:5d:60:1a:a1:
63:35:73:22:8c:71:b4:65:a4:bd:1f:2a:d8:a1:df:94:60:01:
ff:3d:44:ba:7a:d2:f8:d6:04:58:21:70:4f:42:b7:e1:47:da:
d1:76:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:00 2025 by rpki-client