Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34382d3438203d3e20323134323233.roa
File: 326130623a346530373a333030303a3a2f34382d3438203d3e20323134323233.roa (raw, json)
Hash identifier: XmqgexNq2xyJOLQ920xniNdnjbna4JiFf1Xw0ofGF9g=
Subject key identifier: E3:F4:4A:30:84:9F:56:84:B0:98:21:F8:59:ED:E0:32:1D:D3:24:F3
Certificate issuer: /CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Certificate serial: 0485189D8755621868B90DF9AF3BE6372C3170FF
Authority key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34382d3438203d3e20323134323233.roa
Signing time: Sat 25 Jan 2025 23:17:53 +0000
ROA not before: Sat 25 Jan 2025 23:12:53 +0000
ROA not after: Sat 24 Jan 2026 23:17:53 +0000
asID: 214223
IP address blocks: 2a0b:4e07:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:85:18:9d:87:55:62:18:68:b9:0d:f9:af:3b:e6:37:2c:31:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Validity
Not Before: Jan 25 23:12:53 2025 GMT
Not After : Jan 24 23:17:53 2026 GMT
Subject: CN=E3F44A30849F5684B09821F859EDE0321DD324F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:3e:c1:07:f6:5b:8a:52:6f:49:63:26:c8:
7f:eb:d6:52:70:df:cf:ab:39:19:60:f8:62:86:56:
8a:98:c4:72:da:48:d2:aa:33:8f:ff:9c:1e:17:bb:
dd:44:81:69:3c:99:b6:3c:ef:c3:4f:f3:49:61:f3:
8c:4b:6a:e5:05:b8:33:a2:ec:10:06:be:11:52:38:
76:0b:af:34:37:d3:99:9b:f9:e1:13:8e:53:91:e3:
e0:81:8f:0e:f3:57:72:8d:92:9f:1b:bf:5b:a4:99:
e4:32:61:14:90:05:d0:d3:2a:96:27:89:58:b8:5d:
67:b4:54:3a:f8:f8:ad:de:77:1c:14:c4:6e:1d:63:
80:6d:61:34:e1:93:10:e0:3c:70:27:0f:7c:73:d4:
89:cd:b7:dc:91:dc:14:38:71:f4:8f:97:0f:39:a4:
08:aa:d0:d9:69:0f:c5:71:a1:a6:4d:65:50:57:8a:
2f:07:d1:fe:16:73:e2:5a:f3:b4:20:9f:76:94:55:
fb:42:94:ae:dd:d4:92:d9:2c:c8:45:80:f8:72:3a:
87:e4:64:eb:5d:58:d7:3e:0e:8d:bb:ee:a4:f5:6d:
90:e3:16:a2:c6:b7:1f:97:34:ed:df:91:7b:8c:20:
74:79:b3:03:b8:78:6d:b4:7c:87:ff:1f:4a:80:61:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:4A:30:84:9F:56:84:B0:98:21:F8:59:ED:E0:32:1D:D3:24:F3
X509v3 Authority Key Identifier:
keyid:E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/326130623a346530373a333030303a3a2f34382d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:3000::/48
Signature Algorithm: sha256WithRSAEncryption
83:85:f8:12:b9:92:03:04:17:df:77:d0:6d:0a:c4:a7:11:2c:
36:01:bb:73:d7:91:ed:2c:72:2b:99:41:65:c0:84:88:25:1d:
33:8d:98:01:65:64:76:26:8f:2b:3d:2e:a5:52:32:f7:be:ce:
31:86:86:26:d9:ac:a3:6f:1c:55:fe:63:9b:8f:07:df:14:b1:
37:9d:d3:1a:ab:ee:c9:83:81:72:51:70:65:16:df:2e:2b:2f:
79:a3:7e:1f:9d:e8:a0:81:7c:ef:3b:a7:aa:a1:29:c1:a1:55:
51:71:da:2d:e6:c3:32:28:48:0d:03:21:da:70:72:4e:a3:c6:
dd:e9:93:27:9f:c5:4e:25:cd:26:03:84:b8:b6:69:b9:39:22:
96:61:71:10:db:9f:b6:bb:3d:b4:8c:ac:65:99:12:58:36:72:
83:18:a5:f3:d4:20:3d:4e:5c:32:01:41:4b:fe:d0:c6:ad:e6:
91:37:69:5a:86:88:74:a1:5e:48:77:58:9d:7f:4f:05:d9:35:
ba:3c:69:61:6f:ba:d7:8f:56:65:0f:28:ae:fe:e9:b1:57:67:
7e:e1:8b:b6:b8:29:15:7c:c1:f7:ad:ab:fa:1a:33:2c:80:48:
9d:7c:87:fc:37:ce:d9:aa:b0:66:eb:a0:29:1b:27:a8:47:d0:
75:bf:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:31 2025 by rpki-client