Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/326130363a613030373a3a2f33322d3332203d3e20323135363439.roa
File: 326130363a613030373a3a2f33322d3332203d3e20323135363439.roa (raw, json)
Hash identifier: r2Odt3IY0KcEXOjg3ZomCmpglxo3i3Egjj6VgNOH1vU=
Subject key identifier: 13:BF:BE:3D:57:A3:4D:3C:EA:0B:ED:BA:34:1B:A2:AD:06:5A:D8:4D
Certificate issuer: /CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Certificate serial: 01B1778517E698A46B729E7C491B2EA906EBB266
Authority key identifier: 98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/326130363a613030373a3a2f33322d3332203d3e20323135363439.roa
Signing time: Sat 18 Jan 2025 21:45:55 +0000
ROA not before: Sat 18 Jan 2025 21:40:55 +0000
ROA not after: Sat 17 Jan 2026 21:45:55 +0000
asID: 215649
IP address blocks: 2a06:a007::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b1:77:85:17:e6:98:a4:6b:72:9e:7c:49:1b:2e:a9:06:eb:b2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8
Validity
Not Before: Jan 18 21:40:55 2025 GMT
Not After : Jan 17 21:45:55 2026 GMT
Subject: CN=13BFBE3D57A34D3CEA0BEDBA341BA2AD065AD84D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:2e:4c:23:63:a4:e0:ab:27:41:7a:80:b9:
fc:b1:31:7e:80:7d:ff:f5:4d:0d:82:c8:5d:4c:09:
f0:93:f4:59:57:1e:49:ca:28:98:32:f8:96:eb:ed:
b1:00:fa:d6:0f:8b:d2:6b:ef:5c:ca:79:91:c7:be:
bb:96:ec:be:45:bb:88:24:76:3c:b4:4d:00:26:25:
bf:cc:4c:91:05:9d:d5:32:72:f8:af:8a:8a:a5:ec:
79:9a:de:87:10:4e:cd:4e:57:30:34:8e:79:83:d7:
81:bd:6c:c2:2b:03:9d:2b:9e:42:b9:62:89:96:8e:
81:e8:59:26:ec:fc:e1:f5:8e:b7:ba:78:d5:31:ac:
f5:2a:b1:af:91:7a:1b:4b:8e:35:7a:72:01:2b:4a:
fb:63:f2:d1:d1:4f:8f:8e:64:87:b4:bc:f9:41:b6:
61:32:fd:19:c0:3b:cc:9d:a4:0b:2e:5f:a4:e3:c2:
53:99:15:21:12:b0:44:a0:c7:32:69:21:30:da:53:
a8:0b:27:17:d5:3c:75:3c:02:ca:8a:86:86:1b:b4:
ba:6f:9d:a8:03:e2:0c:8f:e3:61:0e:b5:5f:a1:dc:
4d:b0:0c:52:e7:74:98:ce:0a:43:24:fb:cc:ae:18:
17:ec:e6:be:d2:ba:df:2e:b5:8f:7f:8d:fe:bc:7f:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:BE:3D:57:A3:4D:3C:EA:0B:ED:BA:34:1B:A2:AD:06:5A:D8:4D
X509v3 Authority Key Identifier:
keyid:98:94:CB:F5:4A:B8:42:F7:D8:A9:BC:F4:4F:11:38:EF:C8:C8:BC:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/9894CBF54AB842F7D8A9BCF44F1138EFC8C8BCC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/1/326130363a613030373a3a2f33322d3332203d3e20323135363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a007::/32
Signature Algorithm: sha256WithRSAEncryption
60:9b:5c:8d:71:54:37:0e:ae:2e:85:03:92:80:37:a2:c0:41:
4d:fb:5e:8d:b6:63:fb:13:cc:ff:e5:e5:82:2d:bf:85:67:cc:
c3:6f:0f:cd:6f:6c:c4:48:1c:c8:71:0d:bb:62:bf:4e:c3:59:
ad:bd:f3:b7:d8:91:4d:39:d3:ba:39:1d:50:26:0f:40:ab:2b:
8f:a6:59:31:6c:cd:95:91:a2:76:37:14:18:80:14:0e:e4:f9:
92:31:93:32:22:14:10:e1:fb:bb:5d:52:c3:33:d8:f2:4c:85:
ec:0a:9e:38:9a:d4:c8:65:8b:9b:1e:85:09:ab:4d:98:4c:11:
7e:0d:b4:97:9a:b6:bd:66:d4:f4:0a:b8:68:71:78:31:a1:58:
db:39:9d:2a:49:8f:cf:3c:42:13:a5:cf:d6:03:5b:f0:fa:e7:
5d:1f:5c:2e:0c:d4:67:17:39:5d:55:ac:04:ac:43:cb:1f:43:
0f:e4:3a:2f:95:b6:40:05:d4:e7:a9:23:28:df:a0:91:79:76:
61:74:d9:02:09:10:a6:b9:c3:bc:b8:9f:a7:19:b1:04:d0:ad:
93:ef:bd:51:54:5a:91:bd:15:dc:bc:f2:00:e7:0a:49:58:7e:
1d:d5:5a:eb:2f:96:56:fe:a9:be:83:68:a2:17:2e:1b:d2:23:
e7:6f:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:03 2025 by rpki-client