Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa
File: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (raw, json)
Hash identifier: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=
Subject key identifier: 84:91:D5:FA:AB:61:CE:D5:7C:9B:98:2E:C1:44:33:73:99:75:65:30
Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343
Certificate serial: 01671F45824ABAF541C35E37E218D7C7684297A1
Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa
Signing time: Fri 07 Feb 2025 19:02:22 +0000
ROA not before: Fri 07 Feb 2025 18:57:22 +0000
ROA not after: Fri 06 Feb 2026 19:02:22 +0000
asID: 214486
IP address blocks: 2a0a:6044:7e00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:67:1f:45:82:4a:ba:f5:41:c3:5e:37:e2:18:d7:c7:68:42:97:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343
Validity
Not Before: Feb 7 18:57:22 2025 GMT
Not After : Feb 6 19:02:22 2026 GMT
Subject: CN=8491D5FAAB61CED57C9B982EC144337399756530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:64:55:26:87:68:2d:aa:6a:0b:07:a3:7f:
7a:fd:49:05:67:e3:2e:92:39:65:ec:5b:6b:76:c6:
cf:f9:fc:c4:7d:34:20:a9:ec:cc:88:41:15:ac:d5:
5f:59:13:bb:ed:03:35:f5:a8:c6:8d:6b:6b:d0:10:
51:de:38:40:12:be:10:1b:0d:c8:2c:ec:19:e7:d8:
26:96:f8:bd:4a:db:dc:73:94:ef:8f:61:66:e2:e3:
35:dc:05:69:b8:f2:50:39:cc:0f:95:6a:5e:0a:14:
75:ef:ec:cf:d1:bb:1a:59:e7:2d:77:40:cd:c1:79:
52:ba:65:43:9b:ec:1b:54:87:c3:be:af:5e:11:7e:
60:53:36:c0:73:f0:4f:65:35:f1:af:77:7b:e0:c6:
28:a3:15:7f:ab:97:41:80:a4:8a:3b:69:1a:e5:a8:
fe:16:4c:24:8f:11:a7:67:d8:0e:0d:3a:40:64:b8:
6a:43:75:c8:00:5a:9c:96:d5:ea:be:13:d1:ce:1a:
ca:b1:92:26:73:36:a1:29:40:0f:7c:d2:98:6c:e0:
3e:75:fa:ca:c5:1d:30:d2:13:f3:f5:cb:1a:e9:f7:
70:e5:28:e7:1c:c2:a6:dd:b2:27:4c:cc:c9:42:61:
72:39:da:e7:d3:48:b2:eb:bf:07:3f:fd:6a:52:eb:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:D5:FA:AB:61:CE:D5:7C:9B:98:2E:C1:44:33:73:99:75:65:30
X509v3 Authority Key Identifier:
keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7e00::/40
Signature Algorithm: sha256WithRSAEncryption
07:0b:68:f8:24:2f:a9:be:86:5c:15:59:28:49:2a:b1:3a:2e:
3f:dc:f1:36:05:84:13:fd:ea:67:db:2f:0c:1c:e7:08:97:93:
a7:40:b9:d0:c7:fb:12:89:a1:b4:47:a2:e3:14:52:11:a2:a4:
54:6c:f1:92:10:64:06:cf:63:c7:12:15:d2:55:de:74:12:79:
9b:f4:13:78:8a:22:4b:93:d3:de:27:a6:67:ad:e1:f0:1d:c2:
20:5c:a9:1d:9d:e0:e3:12:bd:f4:16:78:c7:d4:b0:4d:e8:17:
21:f1:f5:14:af:48:42:43:76:ec:0b:37:9c:d1:9a:d6:5c:7b:
02:fa:4e:40:ce:94:cc:d0:1a:b7:00:1d:59:0d:6e:e5:6c:cf:
13:bb:ea:24:78:47:6b:ac:b0:20:24:7d:65:b4:5b:59:09:cc:
d7:d2:af:65:6e:48:f9:db:d3:30:3f:13:05:da:ac:98:2c:e5:
b1:c5:16:f8:75:c9:a8:4d:02:63:a6:63:50:85:79:ba:b4:9c:
ea:75:6f:18:5c:05:03:29:4f:32:5b:74:90:b8:74:50:7c:ff:
63:29:40:64:6a:f6:42:5b:83:ff:e1:96:d6:ee:82:9a:3d:1a:
36:1c:78:62:85:71:e0:0a:fb:e8:7a:32:7f:32:f9:c2:ff:b1:
c3:23:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:38 2025 by rpki-client