Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
File: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (raw, json)
Hash identifier: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=
Subject key identifier: 82:05:EB:42:0E:0F:34:D1:5E:0D:9E:E3:E2:98:15:1F:B2:E5:79:ED
Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Certificate serial: 63FBA486B853E2D36065FDD203B3225BAF28FAEE
Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
Signing time: Wed 23 Jul 2025 20:06:54 +0000
ROA not before: Wed 23 Jul 2025 20:01:54 +0000
ROA not after: Wed 22 Jul 2026 20:06:54 +0000
asID: 151704
IP address blocks: 2a0b:4e07:1c01::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fb:a4:86:b8:53:e2:d3:60:65:fd:d2:03:b3:22:5b:af:28:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Validity
Not Before: Jul 23 20:01:54 2025 GMT
Not After : Jul 22 20:06:54 2026 GMT
Subject: CN=8205EB420E0F34D15E0D9EE3E298151FB2E579ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:87:d3:26:4f:bd:37:3b:c1:08:1a:7c:e4:
59:4f:91:86:36:e3:65:fd:fe:75:2b:63:08:6b:7c:
ad:57:f4:b7:f4:98:2e:e4:de:0d:d5:b6:a6:4a:79:
47:99:15:92:69:18:4f:ad:fc:ac:db:13:a0:a2:3e:
be:84:5f:e1:e6:47:59:f3:f3:c3:09:8f:61:d4:45:
77:42:07:47:6e:bf:19:cb:eb:80:f6:b7:73:0d:98:
52:45:2b:0b:32:71:fc:91:e6:a4:35:cb:77:da:b1:
dd:42:c6:dd:9c:38:42:98:a3:db:b9:31:85:e6:01:
3d:af:bc:3f:46:cc:22:d7:43:6b:b2:5c:ac:b1:fe:
63:ef:96:90:6d:24:d9:1c:86:4d:57:61:be:f8:f0:
a6:08:ff:8d:3a:ef:99:e0:79:b1:2d:da:ae:e9:65:
94:d9:39:b6:c8:9b:86:4b:a8:60:f0:e8:52:f2:53:
fa:e9:33:bd:e2:3f:d9:5f:68:79:6a:89:ed:3b:11:
8f:db:83:4c:70:5c:c9:23:4d:0d:52:78:ee:bd:ac:
02:a5:77:99:19:43:88:b4:04:cf:1c:a9:68:74:28:
90:c8:90:b2:9b:11:d1:d8:35:30:8d:b2:6f:6f:91:
d0:b5:d3:e0:e9:21:97:d4:fd:b3:b2:1c:cc:47:69:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:EB:42:0E:0F:34:D1:5E:0D:9E:E3:E2:98:15:1F:B2:E5:79:ED
X509v3 Authority Key Identifier:
keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1c01::/48
Signature Algorithm: sha256WithRSAEncryption
30:21:0a:1a:9d:7e:4a:58:6c:af:be:9d:18:7b:30:da:17:7f:
90:9d:6e:e2:92:3a:9b:7e:ee:5d:48:88:fc:61:f0:be:28:64:
fb:b8:24:52:a2:46:41:f0:8c:e1:7b:3b:7d:5d:bb:6b:fc:6d:
f5:13:ac:5e:0d:67:b8:84:cc:69:2f:b3:04:2c:ea:5f:62:1c:
92:58:a2:17:01:4a:ef:01:34:47:ec:88:4e:f4:ec:19:a3:54:
b1:72:04:72:83:d7:88:d8:cb:e9:ac:f2:1c:a1:7f:ba:c2:42:
a0:5e:6a:0e:ed:15:83:eb:8e:bc:98:9e:a2:b8:3f:d8:eb:90:
ec:95:ec:9e:b6:a7:a2:83:7d:51:f0:13:67:f9:8f:39:ac:88:
37:d6:ed:66:35:07:2b:66:68:2b:17:7b:19:88:ef:bc:f0:f2:
ac:62:1c:c9:d1:a5:ef:03:b3:40:cf:5c:f4:71:1f:74:14:3f:
12:2c:cb:85:67:e6:8d:dc:0f:73:12:83:aa:8a:e1:cb:3b:5e:
9b:ba:42:ca:c3:e8:4f:19:e3:5a:f6:04:6a:af:02:83:13:f5:
a1:84:03:75:04:9f:ee:5d:b7:03:07:14:57:02:bf:16:8f:03:
c7:75:b1:b6:72:c9:17:72:bc:0a:7e:ea:47:b9:f0:89:4b:bc:
d5:c8:21:d2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUY/ukhrhT4tNgZf3SA7MiW68o+u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy
RjM0MzJCNjAeFw0yNTA3MjMyMDAxNTRaFw0yNjA3MjIyMDA2NTRaMDMxMTAvBgNV
BAMTKDgyMDVFQjQyMEUwRjM0RDE1RTBEOUVFM0UyOTgxNTFGQjJFNTc5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIYfTJk+9NzvBCBp85FlPkYY2
42X9/nUrYwhrfK1X9Lf0mC7k3g3VtqZKeUeZFZJpGE+t/KzbE6CiPr6EX+HmR1nz
88MJj2HURXdCB0duvxnL64D2t3MNmFJFKwsycfyR5qQ1y3fasd1Cxt2cOEKYo9u5
MYXmAT2vvD9GzCLXQ2uyXKyx/mPvlpBtJNkchk1XYb748KYI/40675ngebEt2q7p
ZZTZObbIm4ZLqGDw6FLyU/rpM73iP9lfaHlqie07EY/bg0xwXMkjTQ1SeO69rAKl
d5kZQ4i0BM8cqWh0KJDIkLKbEdHYNTCNsm9vkdC10+DpIZfU/bOyHMxHac99AgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUggXrQg4PNNFeDZ7j4pgVH7Llee0wHwYDVR0j
BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm
OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0
MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt
MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3
M2EzMTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoLTgccATANBgkqhkiG9w0BAQsFAAOCAQEAMCEKGp1+Slhsr76d
GHsw2hd/kJ1u4pI6m37uXUiI/GHwvihk+7gkUqJGQfCM4Xs7fV27a/xt9ROsXg1n
uITMaS+zBCzqX2IckliiFwFK7wE0R+yITvTsGaNUsXIEcoPXiNjL6azyHKF/usJC
oF5qDu0Vg+uOvJieorg/2OuQ7JXsnranooN9UfATZ/mPOayIN9btZjUHK2ZoKxd7
GYjvvPDyrGIcydGl7wOzQM9c9HEfdBQ/EizLhWfmjdwPcxKDqorhyztem7pCysPo
TxnjWvYEaq8CgxP1oYQDdQSf7l23AwcUVwK/Fo8Dx3WxtnLJF3K8Cn7qR7nwiUu8
1cgh0g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:27:11 2025 by rpki-client