Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33322d3438203d3e20313530323439.roa
File: 326130363a396634343a3a2f33322d3438203d3e20313530323439.roa (raw, json)
Hash identifier: U3xtjM0Ex2GWpyFoGD8bhKYZEn5bf2RNrA1f0Cof/Ts=
Subject key identifier: 24:F1:CA:39:D6:07:EC:42:4F:91:A1:9B:BE:C1:40:5C:EC:89:23:58
Certificate issuer: /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial: 65E47A04ED7AB1BFFA31D9687182B35F01B88420
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33322d3438203d3e20313530323439.roa
Signing time: Tue 28 Nov 2023 23:09:27 +0000
ROA not before: Tue 28 Nov 2023 23:04:27 +0000
ROA not after: Tue 26 Nov 2024 23:09:27 +0000
asID: 150249
IP address blocks: 2a06:9f44::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e4:7a:04:ed:7a:b1:bf:fa:31:d9:68:71:82:b3:5f:01:b8:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Validity
Not Before: Nov 28 23:04:27 2023 GMT
Not After : Nov 26 23:09:27 2024 GMT
Subject: CN=24F1CA39D607EC424F91A19BBEC1405CEC892358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:f2:40:dc:8b:72:2f:9d:14:83:c2:82:b3:
15:23:02:0d:78:87:27:cd:a9:eb:17:04:90:70:d6:
c7:8f:80:61:58:a7:14:4e:aa:2c:84:d8:89:c4:68:
9b:e1:0b:b7:ae:e1:64:c3:19:fa:61:5e:ae:95:ae:
e8:17:c7:e6:1a:16:0a:fc:2c:89:74:34:cc:ca:c5:
a1:51:ad:91:17:b7:55:60:8d:c3:48:1b:d6:e6:04:
ac:13:5b:44:f2:32:bc:d5:93:33:12:fe:e9:5e:39:
b1:c3:b6:6d:f9:b5:a3:7f:9d:21:a6:f5:b4:15:ea:
ba:19:fa:7c:61:96:54:c7:cc:62:59:50:18:34:08:
69:3d:ac:47:28:ba:09:74:03:81:4d:69:be:8a:ea:
d2:14:c1:56:5e:ba:a2:ed:74:ad:59:4c:77:09:a4:
dd:01:55:2d:c4:2e:46:e3:ae:67:43:e3:88:14:29:
d3:8e:9e:2f:ab:87:53:30:86:64:a4:df:0c:d1:89:
74:2e:ac:81:68:3b:8b:86:5f:95:f4:e2:29:df:93:
f9:5d:76:27:16:67:c2:a0:aa:66:ab:66:83:31:0a:
e8:8d:b7:3d:e4:82:3f:64:a2:70:e9:51:70:91:90:
76:41:b3:f3:62:a8:6a:31:75:5f:90:c7:9d:d0:5c:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F1:CA:39:D6:07:EC:42:4F:91:A1:9B:BE:C1:40:5C:EC:89:23:58
X509v3 Authority Key Identifier:
keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a3a2f33322d3438203d3e20313530323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44::/32
Signature Algorithm: sha256WithRSAEncryption
79:44:f9:c3:c3:8a:a1:3e:65:b8:be:1e:bc:76:88:4b:51:c7:
3e:69:2b:89:42:b5:15:29:33:9b:4d:b0:88:87:68:40:5a:6b:
ec:80:3d:57:1a:c6:2c:23:65:d2:6c:22:87:70:eb:75:e1:8d:
51:42:f7:c3:20:94:58:9d:0a:0b:a9:09:35:05:6a:16:1a:f3:
c6:fd:ee:05:1e:ca:56:ab:31:52:0d:9d:d6:83:07:1c:27:0c:
22:3f:28:8d:50:05:90:4b:21:23:88:4e:9c:76:a8:3a:b9:28:
26:5c:da:ef:39:96:db:2c:f7:a3:5c:46:e4:7c:32:f0:57:9a:
b9:58:ef:d8:f3:4e:37:27:3e:4c:0e:64:69:a0:c6:fe:d3:e0:
9c:34:0a:ac:1f:2c:51:b9:d6:f1:80:3a:62:4d:2a:84:6f:20:
4e:cd:a3:3e:33:0d:83:94:83:90:3a:ca:84:0f:1e:e9:25:5d:
59:fa:43:2d:ad:3e:13:d8:21:ee:fa:db:1a:cc:28:78:80:9e:
31:52:63:80:e3:ee:a8:c5:1d:00:92:5c:55:f6:0a:3b:82:dd:
bb:b4:2c:e0:6f:a4:f6:3d:4d:dd:af:5b:17:d8:96:2a:53:76:
b7:39:a0:10:43:31:c1:1e:1e:75:71:6d:55:ea:1a:89:07:21:
49:2c:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:20:17 2025 by rpki-client