Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
File: 326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier: vqpwVGynQril99VBHevTKZcGDVp26XI+tvsVEDyJKac=
Subject key identifier: 75:D5:37:AB:80:0B:AB:54:25:68:70:B5:BF:4A:20:56:9D:82:4C:33
Certificate issuer: /CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Certificate serial: 0FBA325ABD8B5DAC33B494AD45002B0EB4DE3B8A
Authority key identifier: BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
Signing time: Thu 02 Jan 2025 11:37:11 +0000
ROA not before: Thu 02 Jan 2025 11:32:11 +0000
ROA not after: Thu 01 Jan 2026 11:37:11 +0000
asID: 214757
IP address blocks: 2a0a:6044:ac70::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ba:32:5a:bd:8b:5d:ac:33:b4:94:ad:45:00:2b:0e:b4:de:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA1E57809F341A79CDDA255B18E19FA068FA270F
Validity
Not Before: Jan 2 11:32:11 2025 GMT
Not After : Jan 1 11:37:11 2026 GMT
Subject: CN=75D537AB800BAB54256870B5BF4A20569D824C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:b4:9f:16:12:f1:a2:10:c5:b0:34:c9:2d:
c1:8b:18:0e:14:71:5d:98:c0:f9:3e:f1:eb:83:e0:
9b:b8:94:9e:c5:96:dd:f4:01:d1:ab:27:41:b5:fc:
1a:7d:3c:06:4b:bd:1e:fb:dd:ad:41:86:61:6e:82:
50:ee:d0:4d:ca:6a:ba:22:6f:bd:f9:79:dd:e7:a6:
cd:d9:c1:a3:e2:af:40:6d:db:57:3d:99:91:d4:52:
23:2e:44:0a:d9:f9:e0:ab:98:38:17:a2:7c:b8:7a:
48:d8:18:d1:4b:82:42:ea:0a:c1:f2:e7:33:5b:49:
0c:29:2f:17:97:7d:4e:97:6f:3d:68:b2:b7:60:3c:
7b:53:2a:d2:c9:f8:95:10:dc:03:ce:cd:80:65:5d:
7c:9f:48:59:07:9d:81:8e:8b:63:2d:9c:83:5d:95:
2e:57:a4:56:0f:f9:f5:b9:ae:10:27:6e:57:f8:12:
ee:64:99:b6:50:f0:cf:80:fe:32:92:e8:c7:0a:50:
e8:e1:15:68:90:08:20:23:45:6f:01:e6:37:4d:59:
f5:14:bf:78:0f:1f:e8:d2:c7:a1:02:90:eb:93:17:
45:e0:35:ce:ed:70:b9:69:96:3b:80:1e:77:5b:c8:
b2:18:3b:65:ef:81:f2:b5:46:c5:ea:3f:e8:d1:5c:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:37:AB:80:0B:AB:54:25:68:70:B5:BF:4A:20:56:9D:82:4C:33
X509v3 Authority Key Identifier:
keyid:BA:1E:57:80:9F:34:1A:79:CD:DA:25:5B:18:E1:9F:A0:68:FA:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/BA1E57809F341A79CDDA255B18E19FA068FA270F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BA1E57809F341A79CDDA255B18E19FA068FA270F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/2/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
ab:6c:c9:18:df:54:df:4b:ce:e2:c1:35:0f:a1:e5:7e:16:5b:
71:7f:7a:03:2b:c5:21:90:2d:ee:99:ad:b8:9d:37:a5:1c:67:
14:b7:41:db:0f:f6:dd:2c:5a:27:27:76:98:66:8f:fb:d2:70:
22:ef:65:b2:ac:96:54:28:3e:d1:e7:46:1a:58:93:c4:14:e1:
11:cd:82:1c:29:45:3b:12:49:ef:0c:05:71:ca:33:60:8c:c4:
0f:d3:29:45:a2:d8:47:27:72:13:29:9c:ba:c3:9f:bb:b3:73:
5f:ec:15:84:ca:34:98:a0:18:89:46:48:8a:52:4a:f8:57:9c:
b3:8c:d3:df:ca:0d:e2:df:69:37:a8:6c:15:0f:97:5a:d3:3d:
a1:18:3b:a5:15:f0:aa:14:64:02:d4:4a:d9:75:54:56:42:b5:
90:2e:0f:32:fa:88:1c:59:51:7a:d9:a9:34:71:b1:b5:e4:48:
3d:0f:d8:e4:da:5d:b6:68:28:71:9e:d9:9e:46:df:ab:82:d3:
be:dd:4e:dd:8f:1c:9a:30:fe:67:29:e4:61:a7:9e:ab:c7:16:
3e:98:d6:fd:29:49:5b:ed:5f:5c:ce:f4:1c:34:13:e9:ac:b2:
77:1a:29:0e:aa:5a:38:15:b9:42:cf:c7:ef:b6:b3:3d:a5:d9:
b4:56:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:20:55 2025 by rpki-client