Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa
File: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (raw, json)
Hash identifier: xcYG0bixW6kCSJk5922PfoUP+3KbffonYM5K4oIHRaQ=
Subject key identifier: E2:C8:CB:1B:34:FC:84:20:46:61:8B:E3:34:09:EF:54:CA:ED:B9:C4
Certificate issuer: /CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Certificate serial: 40E7CA0D82F7F57D2A8C26D96131190BF5BF58C7
Authority key identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa
Signing time: Tue 28 Oct 2025 12:54:14 +0000
ROA not before: Tue 28 Oct 2025 12:49:14 +0000
ROA not after: Tue 27 Oct 2026 12:54:14 +0000
asID: 213413
IP address blocks: 2a0b:4e07:a82::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e7:ca:0d:82:f7:f5:7d:2a:8c:26:d9:61:31:19:0b:f5:bf:58:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Validity
Not Before: Oct 28 12:49:14 2025 GMT
Not After : Oct 27 12:54:14 2026 GMT
Subject: CN=E2C8CB1B34FC842046618BE33409EF54CAEDB9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:9d:92:3c:ad:5f:c0:4e:a7:fb:f6:9d:74:
b8:ad:35:e0:f7:74:07:4c:bb:6c:8b:6f:03:b2:78:
3e:9b:3b:54:24:6b:f3:7d:41:7b:44:11:e0:b0:a5:
d5:5f:ae:1f:6c:27:ed:74:89:e8:0a:7d:2d:a8:d8:
f1:9f:5b:59:16:70:a8:4e:cd:ab:a3:73:81:5f:e2:
69:37:16:fb:77:83:4b:31:c3:3e:f9:6e:21:a6:d1:
37:6b:13:a8:92:ae:ff:a8:2b:12:f6:6b:61:f1:82:
2a:35:e0:41:b3:34:2e:91:d2:30:a9:2f:e4:d1:7f:
8c:13:e6:66:9b:70:b4:b5:2c:8f:48:a1:66:2d:37:
09:cb:18:79:dd:65:75:b8:21:b1:c2:df:32:cf:30:
13:f9:a8:ef:9e:a3:f3:c1:d7:a0:75:15:37:4d:41:
c5:e6:c0:27:d6:e6:61:a7:54:32:03:8e:b4:6f:75:
90:e5:25:65:ff:e9:75:34:77:50:89:d7:7c:09:f5:
92:04:84:7a:31:c5:b1:0a:8a:20:cd:3b:ac:fe:14:
0a:75:58:32:db:df:00:a2:9c:1a:05:1f:76:3b:1c:
be:76:15:d9:d2:cc:aa:9c:c3:31:8f:ad:94:cb:25:
2b:1b:85:84:5f:ad:fe:90:a8:98:f0:d4:dd:80:d9:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:CB:1B:34:FC:84:20:46:61:8B:E3:34:09:EF:54:CA:ED:B9:C4
X509v3 Authority Key Identifier:
keyid:44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:a82::/48
Signature Algorithm: sha256WithRSAEncryption
71:9a:e4:cb:ad:f8:6d:59:71:2b:a8:f8:b6:29:5a:03:44:f2:
df:03:d5:75:ba:77:09:b4:d2:87:7e:70:d4:3e:ae:7b:5b:48:
7e:2f:f1:72:40:51:92:06:e0:81:bf:2e:3f:2b:f4:f0:c6:45:
cc:47:b4:3c:df:e9:74:71:94:27:43:e8:a9:ac:2f:b4:1e:dd:
41:dc:eb:b6:03:65:f6:fa:1d:f2:ae:da:bf:c6:c3:9b:d3:fc:
92:4f:ca:2c:45:39:70:eb:60:a6:e0:3e:5a:a0:3c:7b:d5:db:
e7:b8:ff:48:92:d0:8a:b8:cd:0a:13:47:2a:05:f0:21:67:ff:
92:75:37:c2:e1:78:19:c6:36:db:f7:d2:af:ff:ff:af:44:a0:
32:ab:64:64:b5:11:b7:45:15:55:05:77:9b:83:70:31:4a:ba:
d3:d5:fb:a3:8e:97:6c:64:82:f1:da:59:41:e0:09:a5:cf:90:
89:83:17:3d:52:e8:6c:7f:e7:05:94:bd:66:82:5a:f6:d2:de:
88:0f:db:9a:d8:41:32:30:c0:91:1f:c1:cc:0c:da:02:d0:ec:
1f:b9:79:12:8b:31:d3:c9:f1:24:8b:60:8a:11:5b:cc:1d:9d:
26:5e:3b:cc:b8:c5:2a:d5:b4:45:83:09:81:1e:d2:70:2e:91:
a0:49:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:43:25 2025 by rpki-client