Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa
File: 326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier: MrTu7FoatlgPGiKv5BWBxwZ6bvxxg/WNjb3IKxqjgGQ=
Subject key identifier: F1:11:FA:D0:A4:69:D3:A9:C7:DC:5F:AD:A3:74:AC:4C:B4:AD:05:1F
Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial: 7D1321E6DF79EEC8002B01D6392CBF8FA1F7BDC6
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access: rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa
Signing time: Tue 11 Apr 2023 05:47:45 +0000
ROA not before: Tue 11 Apr 2023 05:42:45 +0000
ROA not after: Tue 09 Apr 2024 05:47:45 +0000
asID: 203069
IP address blocks: 2a12:dd47:8230::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:13:21:e6:df:79:ee:c8:00:2b:01:d6:39:2c:bf:8f:a1:f7:bd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Validity
Not Before: Apr 11 05:42:45 2023 GMT
Not After : Apr 9 05:47:45 2024 GMT
Subject: CN=F111FAD0A469D3A9C7DC5FADA374AC4CB4AD051F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:26:2f:05:99:39:f3:a8:96:33:6a:6b:ad:
2c:85:96:1d:f4:9d:a6:91:5a:52:be:0f:1e:1c:8a:
e8:82:f9:d7:4a:20:c9:a4:88:1c:62:06:54:ce:1f:
08:58:74:a0:b1:02:58:9d:43:07:7a:b0:de:b4:f3:
6e:d2:16:c3:63:5b:35:af:85:8e:fe:f5:a9:e9:d5:
b4:48:30:b0:54:6d:b7:ab:e2:4b:ff:5b:6b:f5:c3:
19:7f:72:c7:55:5f:6a:a8:04:25:e5:43:32:a7:bb:
68:37:ba:17:01:e5:80:94:22:d6:92:d2:db:da:91:
bf:48:fd:ea:8f:6e:c9:90:ea:a1:03:93:e5:da:95:
66:a4:07:16:a4:ea:95:48:fb:48:c7:81:0b:31:81:
89:23:ba:ec:d4:c9:9a:e2:82:dd:27:e1:b7:d0:b5:
fb:e6:cd:5a:0b:32:b1:cb:fb:95:c2:f6:d3:bc:61:
fa:12:47:81:27:ed:1e:fb:39:fe:ef:5c:42:e8:cb:
92:45:f0:87:82:0d:eb:ab:82:3b:21:8c:1d:e0:8d:
47:b8:19:e3:bd:b3:3e:6e:61:97:a5:b8:12:3d:a8:
b0:d2:8d:54:29:5d:48:80:90:1b:81:80:ec:be:9b:
ef:1b:a1:64:71:24:38:aa:99:d7:d3:59:6d:87:ee:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:FA:D0:A4:69:D3:A9:C7:DC:5F:AD:A3:74:AC:4C:B4:AD:05:1F
X509v3 Authority Key Identifier:
keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8230::/44
Signature Algorithm: sha256WithRSAEncryption
34:d7:af:39:c2:2d:3e:cb:37:ff:35:22:98:1b:48:3d:a3:66:
42:2a:d3:04:98:42:59:ee:c9:50:9d:97:37:2d:50:96:4d:be:
e3:63:da:7f:f5:f2:f1:d5:f7:c4:b3:d7:87:95:28:df:43:b4:
86:59:cd:2b:58:8b:af:40:a1:be:27:18:8d:44:3b:c1:40:06:
93:26:fa:5c:ff:79:5b:f2:a8:b8:e7:fc:02:95:0a:f5:5d:06:
98:94:94:a3:c1:8f:31:a8:fa:0a:92:87:d2:dc:c6:3b:b8:ac:
6e:ff:ac:2f:67:e1:5e:4d:50:d0:e6:e8:0d:7f:d2:98:03:98:
c7:d5:f2:07:92:7c:56:f5:4c:f4:ba:76:47:cc:ed:c9:85:37:
e0:1a:1c:3b:86:7f:8a:64:57:aa:20:98:e7:43:c7:45:d7:40:
8f:db:83:0e:fd:13:f9:83:b8:28:b3:e0:63:3e:3c:8a:8c:c4:
63:73:d5:37:7c:fc:00:d9:2c:12:a9:f8:fd:bb:b9:14:8a:62:
9f:0d:50:b4:f1:af:42:6c:b9:20:5e:9c:8d:46:ff:3b:cb:d6:
98:43:b1:0a:43:04:3a:49:14:79:92:82:35:65:94:f4:41:a7:
71:f1:53:f8:0a:3d:79:55:0d:46:a0:1c:c0:9a:1d:cc:de:f5:
69:fb:97:f0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfRMh5t957sgAKwHWOSy/j6H3vcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFF
NTBEQUQ1MTAeFw0yMzA0MTEwNTQyNDVaFw0yNDA0MDkwNTQ3NDVaMDMxMTAvBgNV
BAMTKEYxMTFGQUQwQTQ2OUQzQTlDN0RDNUZBREEzNzRBQzRDQjRBRDA1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyiYvBZk586iWM2prrSyFlh30
naaRWlK+Dx4ciuiC+ddKIMmkiBxiBlTOHwhYdKCxAlidQwd6sN60827SFsNjWzWv
hY7+9anp1bRIMLBUbber4kv/W2v1wxl/csdVX2qoBCXlQzKnu2g3uhcB5YCUItaS
0tvakb9I/eqPbsmQ6qEDk+XalWakBxak6pVI+0jHgQsxgYkjuuzUyZrigt0n4bfQ
tfvmzVoLMrHL+5XC9tO8YfoSR4En7R77Of7vXELoy5JF8IeCDeurgjshjB3gjUe4
GeO9sz5uYZeluBI9qLDSjVQpXUiAkBuBgOy+m+8boWRxJDiqmdfTWW2H7qsXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU8RH60KRp06nH3F+to3SsTLStBR8wHwYDVR0j
BBgwFoAUNOaqx0GT/jTFfLX1YmCO4eUNrVEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzYvMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFFNTBEQUQ1MS5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v
cmVwby9BUzk0NS8xLzM0RTZBQUM3NDE5M0ZFMzRDNTdDQjVGNTYyNjA4RUUxRTUw
REFENTEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3
LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS82LzMyNjEzMTMyM2E2NDY0MzQz
NzNhMzgzMjMzMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzMzMDM2Mzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQqEt1HgjAwDQYJKoZIhvcNAQELBQADggEBADTXrznCLT7LN/81
IpgbSD2jZkIq0wSYQlnuyVCdlzctUJZNvuNj2n/18vHV98Sz14eVKN9DtIZZzStY
i69Aob4nGI1EO8FABpMm+lz/eVvyqLjn/AKVCvVdBpiUlKPBjzGo+gqSh9Lcxju4
rG7/rC9n4V5NUNDm6A1/0pgDmMfV8geSfFb1TPS6dkfM7cmFN+AaHDuGf4pkV6og
mOdDx0XXQI/bgw79E/mDuCiz4GM+PIqMxGNz1Td8/ADZLBKp+P27uRSKYp8NULTx
r0JsuSBenI1G/zvL1phDsQpDBDpJFHmSgjVllPRBp3HxU/gKPXlVDUagHMCaHcze
9Wn7l/A=
-----END CERTIFICATE-----
Generated at Tue May 27 18:34:37 2025 by rpki-client