Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa
File: 326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa (raw, json)
Hash identifier: +VQfiOnoyYbcrtNEjRqNZ1sp4+XxXQ2+pZFd/3Tdl44=
Subject key identifier: 28:8C:F8:01:2E:DF:5E:22:C6:A4:29:5B:24:5D:5F:9F:CE:44:9A:DD
Certificate issuer: /CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
Certificate serial: 0C2445F13792114E8DFDB83F540C27981636D569
Authority key identifier: 3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa
Signing time: Fri 11 Apr 2025 12:16:41 +0000
ROA not before: Fri 11 Apr 2025 12:11:41 +0000
ROA not after: Fri 10 Apr 2026 12:16:41 +0000
asID: 13852
IP address blocks: 2a0b:4e07:10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:24:45:f1:37:92:11:4e:8d:fd:b8:3f:54:0c:27:98:16:36:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
Validity
Not Before: Apr 11 12:11:41 2025 GMT
Not After : Apr 10 12:16:41 2026 GMT
Subject: CN=288CF8012EDF5E22C6A4295B245D5F9FCE449ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:bb:c3:7d:b0:78:fe:e9:07:40:24:67:57:
1b:f1:2f:c6:69:49:00:6a:37:8e:10:68:5c:2b:bd:
27:38:3f:8d:3f:94:88:9e:7f:e4:b1:5a:f7:88:b3:
50:cf:b1:7f:9f:a2:b4:74:89:83:f1:7a:4f:03:69:
0d:db:55:0e:67:3e:6a:15:45:2c:cc:c3:7f:57:59:
99:d1:64:79:c7:13:06:a2:86:b1:b5:10:29:d6:86:
a7:2e:a5:4d:1d:6a:ba:43:06:ed:dc:16:2c:2b:6b:
b1:35:12:6c:68:e4:54:05:8d:b8:a8:21:66:33:9e:
dc:ae:ea:d6:80:55:8a:d2:bb:d7:51:e4:57:a3:28:
9b:64:ce:68:47:68:81:53:5d:43:c7:56:ee:db:38:
a8:9c:93:88:86:55:31:00:84:1b:ea:63:f3:88:f6:
8c:8e:21:d8:d6:ae:ba:4d:4a:9d:63:20:ec:4c:fb:
49:a7:43:5f:b0:48:44:2e:a1:54:52:77:66:ab:75:
da:b4:67:1e:36:85:30:a2:42:7b:d4:1b:e2:c4:f6:
6f:24:e9:b7:01:ee:c2:2a:d0:ba:5a:80:6a:6f:b8:
9e:9e:24:73:a0:13:70:f3:08:04:f3:df:c7:43:35:
1d:6f:68:4f:0d:3a:e1:33:f5:4a:63:3b:20:a8:af:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:F8:01:2E:DF:5E:22:C6:A4:29:5B:24:5D:5F:9F:CE:44:9A:DD
X509v3 Authority Key Identifier:
keyid:3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/326130623a346530373a31303a3a2f34342d3434203d3e203133383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:10::/44
Signature Algorithm: sha256WithRSAEncryption
b1:e4:0b:df:cd:ea:d0:1d:0b:c4:2d:ab:6f:6b:5a:d3:9b:c6:
3e:c9:42:99:02:d0:59:9a:92:21:00:2c:45:7f:9b:6b:d6:6f:
4e:43:c7:f7:e3:c6:4d:04:3c:08:02:bb:7b:0b:56:89:97:95:
a0:9f:1d:10:08:1d:91:c1:f3:e9:3d:d3:49:cb:70:30:48:40:
7e:65:da:4e:bb:d5:57:ec:9b:a0:da:a7:57:46:1b:4c:55:71:
c3:ef:2e:42:cd:70:cc:cf:01:4c:f9:c8:82:51:cb:32:a1:67:
fd:8d:f6:6d:02:d2:0f:4d:ac:59:11:20:df:5f:c0:85:8b:4f:
0a:7c:6d:83:bd:c3:34:b0:a1:f6:1f:19:cf:f2:65:e7:2e:2c:
50:11:ab:a1:13:a0:dc:99:09:54:55:4a:fc:0d:47:2d:49:19:
95:09:b3:d2:6a:2c:bc:24:11:55:b5:3d:ad:54:37:d6:00:9f:
3e:d5:4f:5f:8a:a0:4f:1f:88:a0:ad:35:46:21:86:bc:77:b9:
75:f8:8e:24:fb:8f:7a:57:81:db:18:61:f7:ab:30:15:d4:11:
a1:eb:80:7b:26:a5:36:13:81:e6:70:0f:f8:c7:92:3d:f2:e9:
ed:84:7f:cf:9e:c1:54:13:d5:db:ee:eb:a3:14:7b:4a:4f:22:
19:d4:3d:e3
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUDCRF8TeSEU6N/bg/VAwnmBY21WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q4QzM3QjcyNzdGNzJFM0Y0Q0FBQTY5REMzMEIyMkEy
QjY2MjAyNTAeFw0yNTA0MTExMjExNDFaFw0yNjA0MTAxMjE2NDFaMDMxMTAvBgNV
BAMTKDI4OENGODAxMkVERjVFMjJDNkE0Mjk1QjI0NUQ1RjlGQ0U0NDlBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+LvDfbB4/ukHQCRnVxvxL8Zp
SQBqN44QaFwrvSc4P40/lIief+SxWveIs1DPsX+forR0iYPxek8DaQ3bVQ5nPmoV
RSzMw39XWZnRZHnHEwaihrG1ECnWhqcupU0darpDBu3cFiwra7E1Emxo5FQFjbio
IWYzntyu6taAVYrSu9dR5FejKJtkzmhHaIFTXUPHVu7bOKick4iGVTEAhBvqY/OI
9oyOIdjWrrpNSp1jIOxM+0mnQ1+wSEQuoVRSd2arddq0Zx42hTCiQnvUG+LE9m8k
6bcB7sIq0LpagGpvuJ6eJHOgE3DzCATz38dDNR1vaE8NOuEz9UpjOyCorxBpAgMB
AAGjggJ0MIICcDAdBgNVHQ4EFgQUKIz4AS7fXiLGpClbJF1fn85Emt0wHwYDVR0j
BBgwFoAUPYw3tyd/cuP0yqpp3DCyKitmICUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzY3MGQ3YzMtYTdjMy00YWMwLThiNDUtMzk0NDlkZDY1
Y2NmLzAvM0Q4QzM3QjcyNzdGNzJFM0Y0Q0FBQTY5REMzMEIyMkEyQjY2MjAyNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzQvM0Q4QzM3QjcyNzdGNzJFM0Y0Q0FBQTY5REMzMEIyMkEyQjY2
MjAyNS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzY3MGQ3YzMt
YTdjMy00YWMwLThiNDUtMzk0NDlkZDY1Y2NmLzAvMzI2MTMwNjIzYTM0NjUzMDM3
M2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzMzM4MzUzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCoLTgcAEDANBgkqhkiG9w0BAQsFAAOCAQEAseQL383q0B0LxC2rb2ta05vG
PslCmQLQWZqSIQAsRX+ba9ZvTkPH9+PGTQQ8CAK7ewtWiZeVoJ8dEAgdkcHz6T3T
SctwMEhAfmXaTrvVV+yboNqnV0YbTFVxw+8uQs1wzM8BTPnIglHLMqFn/Y32bQLS
D02sWREg31/AhYtPCnxtg73DNLCh9h8Zz/Jl5y4sUBGroROg3JkJVFVK/A1HLUkZ
lQmz0mosvCQRVbU9rVQ31gCfPtVPX4qgTx+IoK01RiGGvHe5dfiOJPuPeleB2xhh
96swFdQRoeuAeyalNhOB5nAP+MeSPfLp7YR/z57BVBPV2+7roxR7Sk8iGdQ94w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:52:46 2025 by rpki-client