Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa
File: 326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa (raw, json)
Hash identifier: i6WuTCXAcSBhiqCMi+eX5AJvSkUem/fVRtMDEj/HiHE=
Subject key identifier: 9A:A8:2B:55:95:AE:86:09:9D:CD:AF:54:A7:8F:AD:FF:97:F2:E1:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DA965FEE111010A98F21C0C6ED87C3230ED358C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa
Signing time: Thu 20 Feb 2025 09:19:04 +0000
ROA not before: Thu 20 Feb 2025 09:14:04 +0000
ROA not after: Thu 19 Feb 2026 09:19:04 +0000
asID: 42366
IP address blocks: 2a01:6f0:2ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:65:fe:e1:11:01:0a:98:f2:1c:0c:6e:d8:7c:32:30:ed:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 20 09:14:04 2025 GMT
Not After : Feb 19 09:19:04 2026 GMT
Subject: CN=9AA82B5595AE86099DCDAF54A78FADFF97F2E1A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:d9:80:5d:8e:b9:68:06:4e:b5:76:e8:0c:
6a:84:06:93:6c:19:22:47:97:27:80:b8:11:f1:2f:
af:64:c3:02:0f:92:99:41:ec:01:d2:c3:db:3c:16:
88:9d:69:9b:7f:27:a9:92:02:e4:78:44:4d:fb:18:
7e:88:a2:68:23:d9:e7:2a:02:0d:fd:4e:bb:1b:4f:
2e:93:9c:38:90:20:a4:7e:77:85:78:ce:f7:31:d8:
85:a3:0a:8d:4b:58:a4:ff:7f:de:41:07:1a:a8:0d:
af:ef:9f:a3:37:8f:72:c0:16:34:d0:bd:f6:f3:02:
7b:c0:07:c3:9e:84:80:ba:50:e9:31:8a:6e:be:b6:
ac:e4:cb:52:d9:f9:61:ee:ff:79:0c:d5:4f:25:fe:
23:c5:89:be:5d:bf:3b:01:63:92:b2:5e:7c:7f:d7:
76:4c:50:0a:24:ca:e3:e5:44:38:09:fb:0b:21:9b:
f7:5a:7a:85:36:42:d2:83:ec:c9:d3:6a:39:81:5d:
b2:8b:06:87:63:c9:48:f0:9f:87:99:cc:ad:e4:53:
8a:1c:f1:e6:32:9d:64:60:c8:78:b4:1e:34:12:bf:
9f:f2:f3:c5:2b:1d:75:e0:05:5a:97:da:e9:63:68:
41:24:6a:63:48:ba:e3:a9:a3:14:85:86:65:bc:8f:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:2B:55:95:AE:86:09:9D:CD:AF:54:A7:8F:AD:FF:97:F2:E1:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f0:2ff::/48
Signature Algorithm: sha256WithRSAEncryption
84:d2:0e:4f:f0:0a:57:2c:e8:99:88:af:ca:2f:1e:48:bc:5c:
39:d8:6a:b4:08:c3:7f:de:ef:8a:2c:58:11:6c:bc:8d:6c:0f:
f0:43:93:aa:da:bf:35:bc:14:83:87:7d:86:1b:05:9c:66:18:
e6:47:19:c1:62:da:e7:74:99:f1:cb:1d:9d:33:09:0c:bb:fc:
49:e6:3f:91:02:74:65:76:a2:cb:99:16:25:0d:8c:e1:5e:02:
d6:98:aa:13:8f:3c:28:1c:74:1f:e7:d0:80:3d:16:1d:56:25:
eb:3f:be:0c:be:ab:3d:f2:7e:f9:bc:c0:a4:b7:eb:59:36:16:
58:8f:3f:d3:b7:13:1a:77:99:a4:80:87:39:ad:af:0b:ea:ce:
08:38:69:76:7e:bb:20:e8:7e:58:95:2f:a8:50:17:76:a0:13:
79:e1:2a:da:0d:24:35:92:98:d9:1f:19:69:68:bf:ea:44:ef:
0c:f0:a7:f8:a4:02:b0:18:11:da:3a:03:c5:57:5a:24:1e:b1:
25:37:0e:39:e4:85:80:1e:aa:82:6f:09:a4:1d:3a:a7:a8:3b:
86:6e:7c:24:9c:7e:14:f5:40:41:94:3c:79:6f:68:24:18:b7:
d6:98:9d:72:61:70:9b:52:ef:bd:a8:4d:6e:8a:5e:38:30:91:
8b:52:04:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:21:46 2025 by rpki-client