Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3230313a3a2f34382d3438203d3e203432333636.roa
File: 326130313a3666303a3230313a3a2f34382d3438203d3e203432333636.roa (raw, json)
Hash identifier: +GN2Np7jsckdm3qmXTym1Y22JqG24rsNzQTDtcdrFf0=
Subject key identifier: DD:89:81:92:3F:CF:B2:EE:39:A7:A6:66:87:AC:AC:93:05:43:5C:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3809BE157AA512449A174C3B544EB3F7BD54ED43
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3230313a3a2f34382d3438203d3e203432333636.roa
Signing time: Thu 20 Feb 2025 09:18:55 +0000
ROA not before: Thu 20 Feb 2025 09:13:55 +0000
ROA not after: Thu 19 Feb 2026 09:18:55 +0000
asID: 42366
IP address blocks: 2a01:6f0:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:09:be:15:7a:a5:12:44:9a:17:4c:3b:54:4e:b3:f7:bd:54:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 20 09:13:55 2025 GMT
Not After : Feb 19 09:18:55 2026 GMT
Subject: CN=DD8981923FCFB2EE39A7A66687ACAC9305435C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:7b:60:0e:a3:07:fa:8c:fd:d1:fd:6d:a1:
97:17:8d:fe:6f:35:6b:93:9b:dc:4d:94:a4:4c:de:
08:86:11:a6:ce:37:dc:5b:4b:01:b3:e5:6b:b8:af:
d4:4a:88:4b:f6:22:da:92:79:f1:37:ea:67:0f:67:
e4:cf:d2:9a:15:c2:a3:ed:87:39:f0:b7:51:94:60:
8d:d5:fb:df:a0:59:b5:ba:b6:38:85:98:9c:d4:b7:
3b:1f:50:4b:89:7d:9a:b2:d6:b7:cb:e2:45:19:92:
45:db:0b:10:f0:95:c1:40:85:18:e9:78:e7:76:12:
3e:61:7f:fa:c5:d2:ff:e5:74:67:83:90:b1:48:07:
06:18:06:8c:a2:32:3c:bf:56:23:bf:6c:ef:99:82:
ac:9b:0d:71:23:ab:e0:48:6e:0d:cd:cb:d0:64:e5:
ee:da:94:13:c4:68:75:a0:ce:fd:af:41:c1:7c:41:
06:45:26:09:70:f5:5c:16:62:78:7f:2a:0e:c8:10:
7c:e7:43:26:1e:88:ff:13:63:8f:9d:04:59:34:8b:
a8:05:4b:9e:e2:41:fb:c4:0f:a7:83:84:ee:5b:54:
a4:21:77:05:8c:7f:6a:0b:5b:88:b3:09:5c:27:59:
e7:b4:ad:71:a2:cf:85:df:4f:ff:8e:2b:26:ec:e5:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:81:92:3F:CF:B2:EE:39:A7:A6:66:87:AC:AC:93:05:43:5C:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3230313a3a2f34382d3438203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f0:201::/48
Signature Algorithm: sha256WithRSAEncryption
34:0c:e2:04:de:21:72:88:a1:5b:0e:a2:97:92:e5:64:38:c7:
b5:83:25:ae:be:62:45:8b:26:95:3b:78:5e:b2:8e:dd:38:a5:
e0:ab:75:5e:b3:72:63:d9:11:af:3e:15:f6:8b:e8:d3:2f:b0:
84:5d:7d:15:0e:ac:3f:65:81:e7:5d:f5:6c:bf:ae:02:39:60:
8b:97:1a:18:ff:ab:80:92:fe:e7:ed:65:17:9c:aa:d7:d9:10:
51:fb:4f:00:70:44:2c:20:07:67:5c:eb:37:f1:11:51:f9:97:
01:9d:a2:b9:20:0f:61:ef:8a:29:65:cb:e0:01:de:b4:77:fe:
60:10:be:c6:86:8d:89:e2:d6:56:b0:09:29:a8:78:c4:8b:bf:
22:30:87:ea:49:7a:b1:6e:d3:d9:3c:59:fa:d5:11:4c:30:c7:
85:71:ba:f7:3e:88:5f:9b:3d:0a:87:a1:09:4d:f1:21:da:02:
38:29:96:ab:0e:da:e7:f8:b2:d6:b9:92:3b:c6:62:28:00:97:
84:36:ba:93:c3:9a:19:37:47:8f:53:0d:6b:d2:ae:c5:7f:e4:
f9:c7:e8:ba:78:dd:46:cd:65:7a:c9:b2:34:c7:3e:cf:77:97:
9f:22:63:9b:5a:66:31:31:07:60:9c:06:3b:91:42:99:3d:04:
ae:f7:32:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:50 2025 by rpki-client