Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
File: 326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa (raw, json)
Hash identifier: JzNbxiRPW9kNVbt7zJuB+37rSf+ffTn4NEPxozK0Z2U=
Subject key identifier: C7:F2:21:87:28:AE:8D:58:BC:1E:73:5D:4F:FE:C5:7E:2A:2E:F1:04
Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial: 3552DFB6F86180C6E4FAEB2F61AEDD2555F675DB
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access: rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
Signing time: Tue 11 Apr 2023 01:14:05 +0000
ROA not before: Tue 11 Apr 2023 01:09:05 +0000
ROA not after: Tue 09 Apr 2024 01:14:05 +0000
asID: 203069
IP address blocks: 2a12:dd47:802c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:52:df:b6:f8:61:80:c6:e4:fa:eb:2f:61:ae:dd:25:55:f6:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Validity
Not Before: Apr 11 01:09:05 2023 GMT
Not After : Apr 9 01:14:05 2024 GMT
Subject: CN=C7F2218728AE8D58BC1E735D4FFEC57E2A2EF104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:c6:01:51:ee:13:42:c6:95:08:58:94:0b:
a4:da:f6:c8:ad:0a:19:4d:1b:79:76:dd:44:f6:ba:
89:ec:74:9a:bc:43:23:25:5b:3c:da:41:3b:51:af:
85:25:4d:5b:2a:23:2e:23:74:42:b7:a9:3b:f1:e9:
7a:8b:68:a7:6f:ee:60:27:3c:58:90:32:f8:0b:56:
70:53:87:64:01:89:77:a1:2e:95:2c:f7:f5:59:20:
de:ca:d2:4f:3a:d9:00:af:c7:14:1e:de:5c:01:95:
61:92:76:09:20:2d:4c:72:97:01:ed:48:39:01:7f:
da:fb:e3:91:ea:22:cb:0c:ab:6b:a5:66:90:34:39:
47:8d:38:ff:9c:a9:8e:06:a6:e7:0d:f9:81:4f:82:
2e:3c:29:0b:08:76:19:42:0b:5d:3e:1e:27:90:00:
37:33:d5:a6:d4:ce:19:55:6c:bd:dc:2b:1f:c9:ce:
30:cc:05:18:12:89:e0:67:ab:8a:b1:b3:f5:6e:cc:
a8:c1:83:e5:ec:96:65:04:5b:e1:e3:e8:18:d2:74:
69:ea:78:44:76:02:0f:a4:5d:46:a2:ce:e6:ba:17:
62:02:af:a0:fc:43:77:b6:13:b0:92:5d:8b:c5:29:
10:a5:61:8e:82:9d:b7:89:a0:07:86:97:b5:b5:9d:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:21:87:28:AE:8D:58:BC:1E:73:5D:4F:FE:C5:7E:2A:2E:F1:04
X509v3 Authority Key Identifier:
keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:802c::/46
Signature Algorithm: sha256WithRSAEncryption
93:78:5f:27:1b:f9:3a:39:75:52:18:38:92:a6:89:31:6d:68:
f6:71:d5:66:10:7f:14:61:91:e2:be:d4:80:96:43:d3:12:4f:
5c:17:5b:14:7c:0c:db:eb:95:9b:be:19:05:98:c0:e3:34:86:
2d:99:98:58:4c:c3:b0:41:f7:10:44:fc:d9:b7:f9:41:e0:d0:
c3:f1:e0:84:3b:3b:41:27:b4:f9:b7:3b:bc:ba:8e:b5:92:1f:
c4:e2:d8:17:ed:2f:e0:15:35:59:5c:45:a6:15:c7:1f:04:3e:
1f:d2:b2:a7:cb:18:12:af:76:a2:44:bf:7e:f4:61:f4:de:c5:
a4:25:d2:87:f6:0b:c1:64:0b:97:07:51:30:66:fa:7b:66:4c:
98:6b:a5:53:c8:80:68:a0:c4:c5:22:5a:8f:82:ba:fb:e1:f8:
8d:82:09:cc:ae:ee:e3:54:7f:26:f6:83:f5:0e:24:93:42:00:
3f:1f:99:c2:be:3a:0d:a1:f3:dd:1b:b0:78:83:35:04:2b:c2:
16:17:62:1b:bc:75:20:1e:d7:55:20:b4:a0:6e:7c:18:0b:73:
de:45:a5:21:13:68:16:ba:72:79:36:07:23:a7:ef:50:97:1a:
f4:9e:d8:da:f6:d5:70:3f:f7:ba:ef:1e:5a:80:58:cc:82:e4:
5b:e7:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:28:06 2025 by rpki-client