Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3338203d3e20323136313332.roa
File: 326131333a646638373a383030303a3a2f33382d3338203d3e20323136313332.roa (raw, json)
Hash identifier: JOTpxuBv8scnMCl8rzFBklFWeCjrKq/U2VdgyWyXX6I=
Subject key identifier: CA:12:A7:79:47:CC:EA:5D:30:2A:B0:19:70:EF:E0:9A:CD:C1:CB:07
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 6B914DC15836CC42BA8A5A41CDFFDB9434909B3A
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3338203d3e20323136313332.roa
Signing time: Fri 15 Dec 2023 22:53:22 +0000
ROA not before: Fri 15 Dec 2023 22:48:22 +0000
ROA not after: Fri 13 Dec 2024 22:53:22 +0000
asID: 216132
IP address blocks: 2a13:df87:8000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:91:4d:c1:58:36:cc:42:ba:8a:5a:41:cd:ff:db:94:34:90:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Dec 15 22:48:22 2023 GMT
Not After : Dec 13 22:53:22 2024 GMT
Subject: CN=CA12A77947CCEA5D302AB01970EFE09ACDC1CB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:94:55:a2:59:3f:13:71:a0:f1:7d:d8:37:
00:ec:64:98:24:c7:82:83:22:a3:61:68:64:db:d8:
a8:2d:b6:7a:bc:b9:45:67:f9:32:61:4b:3d:a6:62:
9a:bd:8a:9d:4c:55:b9:f7:f2:26:3e:8f:f0:e9:3f:
25:80:de:5b:d8:bf:8b:17:b1:93:db:1e:76:9e:6f:
4d:7d:77:60:28:b0:7a:1b:40:4d:12:f7:eb:0b:3f:
1b:3f:5b:e5:b6:c0:e0:6e:fc:b2:37:89:8d:df:ba:
51:5c:2d:af:ef:d5:41:02:46:41:c7:6a:30:85:9f:
ba:e5:36:a8:1d:94:f8:db:29:87:cc:76:b0:12:e2:
dc:90:05:91:54:4b:72:e9:18:d3:75:d8:dd:e5:bf:
9e:9b:4f:c6:5a:9f:6a:e7:83:f2:67:da:24:6e:99:
80:66:0c:02:63:77:ed:b9:5e:a4:ab:59:5c:05:1f:
7d:b6:05:5a:95:f9:af:d1:3d:cd:ae:e9:13:53:69:
b3:87:88:2c:50:9c:7d:1a:91:40:6c:ae:49:68:85:
63:80:3a:e9:09:c2:54:f2:52:45:ab:d2:5d:19:33:
1c:0f:c3:bd:ad:91:4e:1e:bb:67:4f:ed:1b:cd:45:
9e:0d:6f:44:98:9e:df:ea:57:59:89:50:78:47:38:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:12:A7:79:47:CC:EA:5D:30:2A:B0:19:70:EF:E0:9A:CD:C1:CB:07
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a383030303a3a2f33382d3338203d3e20323136313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:8000::/38
Signature Algorithm: sha256WithRSAEncryption
84:80:a9:6d:ae:88:e6:f7:9e:d3:b9:f8:8b:f9:f0:2f:3e:86:
ca:dc:90:b4:5a:ab:7d:e7:8a:a9:5c:ce:2a:24:34:63:15:76:
d4:b6:9f:6e:cd:6e:85:af:9d:fd:bf:87:84:d0:c4:1b:e5:18:
83:c3:ec:b8:31:e3:25:b5:ce:90:d5:fb:3d:c7:dc:4f:5d:b0:
52:34:f4:9f:e9:6e:2d:5f:fb:83:f4:b8:a7:84:59:7b:7d:98:
bc:80:8e:49:a7:d4:da:7f:db:18:3a:ed:1e:fa:0f:80:30:5c:
e4:e2:9c:c6:84:01:0f:36:fb:ce:57:10:7a:f6:8a:70:a2:f0:
25:be:34:58:8e:44:2c:bf:eb:e9:2b:4f:0e:37:9e:9f:4d:3b:
9d:80:b5:6c:0c:73:be:0f:41:7a:9e:57:0d:2f:3d:68:42:35:
05:51:16:3f:1a:24:2e:f4:67:2b:e2:66:69:96:35:e6:e3:1a:
30:1e:66:fd:5a:1f:e0:e6:2c:ca:73:75:61:a6:22:b4:ce:2e:
10:60:f2:52:0a:89:e4:cf:1d:27:77:8e:91:19:e5:9e:f9:21:
fb:43:e0:d7:a5:62:80:7c:ea:7d:61:67:90:2e:0c:f7:bd:78:
98:27:9d:2a:d7:21:e9:07:8e:c4:b3:85:50:2f:6d:0c:e3:f2:
5e:4b:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:37 2025 by rpki-client