Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa
File: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (raw, json)
Hash identifier: GX3HMOpdC/5UsyTVbvjWmLoyYITuDsKGldV1n8v/5ak=
Subject key identifier: 04:3E:A8:C4:20:A9:C9:9C:FE:BB:B5:2E:45:D9:00:05:D7:58:2B:D7
Certificate issuer: /CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Certificate serial: 305E613DC3A48B8A29B70C48B7C7A562086E860C
Authority key identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa
Signing time: Tue 28 Oct 2025 12:51:32 +0000
ROA not before: Tue 28 Oct 2025 12:46:32 +0000
ROA not after: Tue 27 Oct 2026 12:51:32 +0000
asID: 207567
IP address blocks: 2a0b:4e07:ae0::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5e:61:3d:c3:a4:8b:8a:29:b7:0c:48:b7:c7:a5:62:08:6e:86:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Validity
Not Before: Oct 28 12:46:32 2025 GMT
Not After : Oct 27 12:51:32 2026 GMT
Subject: CN=043EA8C420A9C99CFEBBB52E45D90005D7582BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:14:a0:41:c6:38:92:11:cd:70:6f:22:c1:
0d:a8:e4:85:cc:90:38:82:fe:37:67:74:b9:a7:d5:
9f:4e:e7:39:75:20:f4:66:c7:a7:45:04:c1:ee:c9:
ec:21:58:50:99:d0:d1:c9:81:97:c0:ec:98:45:2b:
15:46:d1:53:39:1d:4a:62:35:e9:54:fc:93:a6:29:
b3:30:55:3b:d6:7c:ca:ac:2e:1e:11:98:91:80:5a:
45:a3:ab:2c:e9:e1:10:19:77:ec:ce:b3:6d:6b:2b:
e1:9f:14:d1:fd:af:1c:4c:5f:33:a7:1e:34:5d:31:
ea:0d:6a:3b:ca:a0:a4:89:5a:f9:35:62:4c:e5:a6:
28:59:ad:92:54:d1:fe:4d:a8:af:29:a2:11:67:21:
ef:83:74:71:aa:30:43:54:81:ef:36:2a:3e:92:2b:
4a:ad:0a:9b:5b:15:8a:42:31:8b:56:a1:4e:90:a3:
ee:1b:61:f4:1a:da:ce:d1:68:10:de:70:38:c0:35:
c0:03:c4:d3:d8:59:a8:da:f1:9e:f9:1a:c1:26:4d:
4e:cb:64:c8:90:d3:f7:c8:8f:1a:d8:4e:4e:9a:1f:
a6:64:f8:95:24:8b:1d:23:ee:c9:1f:c6:b0:18:ff:
90:fa:5d:58:93:82:9c:0c:e6:d8:4e:f2:4a:ae:5d:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:A8:C4:20:A9:C9:9C:FE:BB:B5:2E:45:D9:00:05:D7:58:2B:D7
X509v3 Authority Key Identifier:
keyid:44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
3b:49:53:29:6a:53:66:bc:7c:9b:8c:fa:0c:c6:6f:67:1a:08:
e0:bc:cc:40:9f:b4:f8:72:c1:37:1b:e5:da:f8:e6:50:ae:25:
d9:69:7d:e6:0a:29:47:54:e4:82:bf:a2:94:6a:65:ad:f2:ec:
a0:60:ff:99:55:05:51:e5:dd:41:07:6b:5f:f4:3f:f0:8e:26:
dc:d1:10:9c:fe:ef:ad:c6:ad:90:f2:50:56:3b:38:69:6f:3b:
5f:3b:af:74:cb:c0:1d:96:da:ae:8c:9b:62:db:20:1c:a1:ae:
ae:ce:fe:16:fd:6b:3e:a3:98:fa:79:3c:85:f9:51:ed:01:71:
fd:9e:91:70:65:2e:30:48:2f:07:71:81:dc:d4:91:d3:61:0d:
9b:6c:28:3a:32:1a:b8:d2:b8:4c:5c:88:5c:a0:60:f8:92:57:
97:cb:cf:6c:3c:07:78:ec:aa:41:f3:10:51:ec:90:96:c3:c0:
e8:b8:c1:a7:91:36:7f:85:42:e0:c7:d1:2d:22:03:36:ce:68:
e6:00:45:75:1f:11:f2:4b:d0:28:c2:a4:dd:f7:0a:50:4e:9a:
f7:61:ae:ee:53:ed:3e:a0:55:10:d2:a7:10:7a:80:9c:90:36:
78:76:0b:aa:44:9e:e9:cc:56:ec:aa:93:05:81:b2:02:84:1a:
a9:ad:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:18:58 2025 by rpki-client