Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
File: 326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier: +IKgatT0MAF+XD26nbEZt1idCJku+a+Xz8E5Y73mOYI=
Subject key identifier: BD:43:E0:85:E3:5C:AD:A7:D5:19:9B:EF:D8:FD:ED:B5:C5:75:3F:2E
Certificate issuer: /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Certificate serial: 0B5C58E35F2311032A09FC9BD1678BE48EB105E8
Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
Signing time: Thu 08 May 2025 00:21:56 +0000
ROA not before: Thu 08 May 2025 00:16:56 +0000
ROA not after: Thu 07 May 2026 00:21:56 +0000
asID: 199763
IP address blocks: 2a0a:6044:bc68::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5c:58:e3:5f:23:11:03:2a:09:fc:9b:d1:67:8b:e4:8e:b1:05:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Validity
Not Before: May 8 00:16:56 2025 GMT
Not After : May 7 00:21:56 2026 GMT
Subject: CN=BD43E085E35CADA7D5199BEFD8FDEDB5C5753F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:e7:13:67:a7:00:11:6e:41:c9:10:10:e2:
0e:66:94:c4:07:3c:d8:a5:13:f2:21:9e:22:4b:1a:
54:0a:3e:c7:20:be:09:72:77:3b:8c:75:3e:f2:cf:
49:25:0b:04:77:91:c4:a5:28:17:a7:8e:e9:dd:41:
d9:a6:61:12:52:c1:e1:8a:c8:d0:ba:7e:e4:ee:f7:
6f:10:12:df:69:ee:36:9a:1a:f7:da:fa:aa:fd:3a:
ee:2a:ce:4d:09:63:35:04:2a:f7:ee:d4:8a:b9:0a:
65:0f:84:30:a2:23:d9:ac:f9:50:1a:a1:cf:58:e4:
ac:27:ec:6c:4d:5c:31:c5:36:b7:92:23:d2:47:35:
04:61:c1:de:e9:7b:d7:e7:92:85:29:ec:65:6f:f7:
5c:df:8b:d9:70:9a:09:0f:81:de:a3:b3:ee:67:3b:
b9:d8:0d:7c:4a:88:77:f4:74:df:e7:ab:26:d3:0d:
41:54:39:8d:9c:be:09:07:b2:2f:4d:09:44:97:c2:
a6:c7:ea:95:87:e6:53:72:57:e7:ff:b2:25:06:39:
d8:9d:07:89:0e:f9:9f:8c:a9:3b:36:f8:81:e5:88:
ab:9e:5b:c2:9d:0a:6a:15:bf:0b:f1:bc:ea:cc:6c:
f5:c4:c9:06:bc:ce:7f:e7:07:fc:ef:61:6f:71:cb:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:E0:85:E3:5C:AD:A7:D5:19:9B:EF:D8:FD:ED:B5:C5:75:3F:2E
X509v3 Authority Key Identifier:
keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc68::/48
Signature Algorithm: sha256WithRSAEncryption
5e:3b:dc:05:f6:e0:7e:9c:1e:b8:6d:7a:de:4d:1a:95:81:48:
47:73:01:58:20:e4:0c:d1:8f:5b:3a:50:f9:fe:ca:eb:1e:f4:
2a:d1:2d:85:cd:81:2a:36:f6:39:9b:ed:ba:89:85:00:ae:2e:
67:01:9b:95:39:92:43:0c:87:28:1c:e0:5e:02:bd:99:e7:56:
5a:f2:2e:74:99:6a:08:26:18:a9:56:a9:c4:a2:7b:a8:28:e9:
4e:e8:ba:24:72:ae:16:ae:0c:b6:13:33:f3:43:fb:02:c2:b7:
9c:be:34:13:a4:de:86:93:78:6e:02:f3:ac:35:ca:b0:ad:a8:
ff:97:4f:51:0d:63:0d:d9:5f:62:6c:ca:3f:d5:49:39:97:58:
99:a3:17:f9:21:f0:24:e4:d1:53:d0:0e:98:4a:d0:e1:2c:ee:
b4:53:12:37:81:c3:f7:54:e2:14:a2:54:9a:db:70:e7:96:d2:
a0:ae:6e:84:21:e6:6d:90:21:c6:ac:0c:38:a4:e0:bd:06:0f:
0c:e1:73:ff:83:88:8e:3c:22:42:05:93:9b:83:19:39:08:13:
2b:ea:98:84:ec:dd:d3:25:b5:73:01:ab:71:95:39:cc:15:24:
46:50:36:81:20:0d:6f:d8:f0:df:40:a7:d7:b5:92:5f:d0:66:
1e:f9:74:95
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUC1xY418jEQMqCfyb0WeL5I6xBegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3
OTNFQzUwRTAeFw0yNTA1MDgwMDE2NTZaFw0yNjA1MDcwMDIxNTZaMDMxMTAvBgNV
BAMTKEJENDNFMDg1RTM1Q0FEQTdENTE5OUJFRkQ4RkRFREI1QzU3NTNGMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOOcTZ6cAEW5ByRAQ4g5mlMQH
PNilE/IhniJLGlQKPscgvglydzuMdT7yz0klCwR3kcSlKBenjundQdmmYRJSweGK
yNC6fuTu928QEt9p7jaaGvfa+qr9Ou4qzk0JYzUEKvfu1Iq5CmUPhDCiI9ms+VAa
oc9Y5Kwn7GxNXDHFNreSI9JHNQRhwd7pe9fnkoUp7GVv91zfi9lwmgkPgd6js+5n
O7nYDXxKiHf0dN/nqybTDUFUOY2cvgkHsi9NCUSXwqbH6pWH5lNyV+f/siUGOdid
B4kO+Z+MqTs2+IHliKueW8KdCmoVvwvxvOrMbPXEyQa8zn/nB/zvYW9xy/yJAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUvUPgheNcrafVGZvv2P3ttcV1Py4wHwYDVR0j
BBgwFoAU2oyzWBLKH6OhvW04aThQcnk+xQ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2
NDQyLzEvREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3OTNFQzUwRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2
OTM4NTA3Mjc5M0VDNTBFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzhkMTlkMC1kMjIxLTQ0NDgtODExYS0wZTE2MTFhNDY0NDIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjMzNjM4M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz
OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLxoMA0GCSqGSIb3DQEBCwUAA4IBAQBe
O9wF9uB+nB64bXreTRqVgUhHcwFYIOQM0Y9bOlD5/srrHvQq0S2FzYEqNvY5m+26
iYUAri5nAZuVOZJDDIcoHOBeAr2Z51Za8i50mWoIJhipVqnEonuoKOlO6Lokcq4W
rgy2EzPzQ/sCwrecvjQTpN6Gk3huAvOsNcqwraj/l09RDWMN2V9ibMo/1Uk5l1iZ
oxf5IfAk5NFT0A6YStDhLO60UxI3gcP3VOIUolSa23DnltKgrm6EIeZtkCHGrAw4
pOC9Bg8M4XP/g4iOPCJCBZObgxk5CBMr6piE7N3TJbVzAatxlTnMFSRGUDaBIA1v
2PDfQKfXtZJf0GYe+XSV
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:00:41 2025 by rpki-client