Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa
File: 326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa (raw, json)
Hash identifier: n27iqAXuEam/zakDHlq3DR1FmT6AVTRE8CLqIku5Ff8=
Subject key identifier: 5E:93:4F:66:4F:61:E0:73:B9:30:DF:82:F3:95:0D:EA:5F:BF:5C:82
Certificate issuer: /CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Certificate serial: 0B5625F03ECDCEA640ED886937D34B1DE0A7A952
Authority key identifier: F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa
Signing time: Sat 05 Apr 2025 20:42:51 +0000
ROA not before: Sat 05 Apr 2025 20:37:51 +0000
ROA not after: Sat 04 Apr 2026 20:42:51 +0000
asID: 213707
IP address blocks: 2a06:9f40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:56:25:f0:3e:cd:ce:a6:40:ed:88:69:37:d3:4b:1d:e0:a7:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Validity
Not Before: Apr 5 20:37:51 2025 GMT
Not After : Apr 4 20:42:51 2026 GMT
Subject: CN=5E934F664F61E073B930DF82F3950DEA5FBF5C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:d0:95:5b:d5:d0:de:b5:de:fc:20:6a:7f:
e2:7d:6d:16:bc:8b:64:42:a4:ed:d6:cc:64:45:1f:
93:ae:53:44:98:53:0b:cc:d0:1f:fc:17:99:9d:70:
dd:3f:70:8a:89:f2:e7:31:a4:f8:a4:f8:6d:ff:c0:
81:3a:8a:66:25:6d:6c:b0:df:17:29:25:dd:6f:ef:
69:49:c3:a2:d2:14:2a:3c:76:e0:22:b2:11:2f:2b:
d4:70:8b:d6:0d:c4:38:7d:54:9c:42:de:9b:08:9f:
ba:d0:e5:fd:42:b2:25:52:bf:78:d4:24:bb:88:cc:
9a:b1:53:7f:65:76:5c:12:a7:29:19:ed:fd:73:00:
67:2e:08:e6:4b:b5:9b:38:85:21:75:3a:12:7d:94:
6a:2a:70:b5:6b:28:96:22:07:49:1b:cb:c7:61:72:
f4:cb:21:2d:e3:06:3f:fb:64:72:59:69:81:0c:bf:
fb:fd:95:a9:08:25:dd:91:81:fb:48:1c:d0:56:9d:
81:4a:eb:4e:f7:36:cb:95:88:1f:33:a2:13:c0:0d:
4b:3f:c1:b3:e3:6a:56:88:e9:7d:5f:95:a3:f0:23:
1b:c6:58:01:1f:48:30:88:54:e2:46:30:81:6f:18:
d1:6a:ff:6f:08:89:ae:25:6d:09:a9:a2:93:22:f4:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:4F:66:4F:61:E0:73:B9:30:DF:82:F3:95:0D:EA:5F:BF:5C:82
X509v3 Authority Key Identifier:
keyid:F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/326130363a396634303a313a3a2f34382d3438203d3e20323133373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f40:1::/48
Signature Algorithm: sha256WithRSAEncryption
47:69:38:a4:14:d1:53:93:8c:01:50:9c:da:a3:34:0f:b3:63:
09:c3:ac:f4:b4:cb:dd:bf:35:2d:5f:ed:26:68:11:e4:0c:5f:
8d:0c:38:23:62:25:29:99:f5:ce:22:2a:b0:4c:56:bd:74:b4:
4c:9d:57:58:46:18:00:6a:90:b9:57:ba:ca:40:db:5f:e4:09:
d0:37:f8:b0:8e:30:b6:91:ae:09:89:83:c3:87:d9:b9:da:ef:
c4:5c:f1:20:60:c7:b4:5e:47:db:37:75:56:da:fd:9b:56:bd:
9b:b1:e8:79:5c:e9:ae:4f:ea:5a:84:eb:38:f4:7a:66:ae:13:
6c:8f:20:af:59:c4:7a:61:4b:48:9b:ea:a2:0d:da:09:87:3f:
c3:e5:4f:c2:c0:5a:b2:95:5b:62:98:b2:b6:d0:e7:3d:1d:6b:
df:5e:41:47:bf:3e:b1:91:af:8d:77:e7:96:65:37:74:b2:fb:
41:df:fd:fb:32:7c:f9:cb:7e:79:9e:85:50:f5:8f:f0:75:29:
2f:4c:11:48:46:b7:e9:a8:e7:63:80:03:80:b9:a8:93:c2:a5:
7c:51:66:17:a0:3a:d2:e0:47:d6:90:aa:c0:f5:ed:2c:b3:cf:
fb:66:82:78:06:07:3b:a4:84:90:3b:35:0f:2c:72:fc:fb:02:
22:1e:eb:6c
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUC1Yl8D7NzqZA7YhpN9NLHeCnqVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNG
OEM1NkRGNTAeFw0yNTA0MDUyMDM3NTFaFw0yNjA0MDQyMDQyNTFaMDMxMTAvBgNV
BAMTKDVFOTM0RjY2NEY2MUUwNzNCOTMwREY4MkYzOTUwREVBNUZCRjVDODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGtCVW9XQ3rXe/CBqf+J9bRa8
i2RCpO3WzGRFH5OuU0SYUwvM0B/8F5mdcN0/cIqJ8ucxpPik+G3/wIE6imYlbWyw
3xcpJd1v72lJw6LSFCo8duAishEvK9Rwi9YNxDh9VJxC3psIn7rQ5f1CsiVSv3jU
JLuIzJqxU39ldlwSpykZ7f1zAGcuCOZLtZs4hSF1OhJ9lGoqcLVrKJYiB0kby8dh
cvTLIS3jBj/7ZHJZaYEMv/v9lakIJd2RgftIHNBWnYFK6073NsuViB8zohPADUs/
wbPjalaI6X1flaPwIxvGWAEfSDCIVOJGMIFvGNFq/28Iia4lbQmpopMi9HMhAgMB
AAGjggJ0MIICcDAdBgNVHQ4EFgQUXpNPZk9h4HO5MN+C85UN6l+/XIIwHwYDVR0j
BBgwFoAU9gv8Is5aPfVR2rvMTEjSs/jFbfUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGU2NTBiNTQtYWJjNC00NDE4LWFlYjYtMDg4YTUwZDFk
NWYxLzAvRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNGOEM1NkRGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvRjYwQkZDMjJDRTVBM0RGNTUxREFCQkNDNEM0OEQyQjNGOEM1
NkRGNS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNGU2NTBiNTQt
YWJjNC00NDE4LWFlYjYtMDg4YTUwZDFkNWYxLzAvMzI2MTMwMzYzYTM5NjYzNDMw
M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMzM3MzAzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoGn0AAATANBgkqhkiG9w0BAQsFAAOCAQEAR2k4pBTRU5OMAVCc2qM0D7Nj
CcOs9LTL3b81LV/tJmgR5AxfjQw4I2IlKZn1ziIqsExWvXS0TJ1XWEYYAGqQuVe6
ykDbX+QJ0Df4sI4wtpGuCYmDw4fZudrvxFzxIGDHtF5H2zd1Vtr9m1a9m7HoeVzp
rk/qWoTrOPR6Zq4TbI8gr1nEemFLSJvqog3aCYc/w+VPwsBaspVbYpiyttDnPR1r
315BR78+sZGvjXfnlmU3dLL7Qd/9+zJ8+ct+eZ6FUPWP8HUpL0wRSEa36ajnY4AD
gLmok8KlfFFmF6A60uBH1pCqwPXtLLPP+2aCeAYHO6SEkDs1Dyxy/PsCIh7rbA==
-----END CERTIFICATE-----
Generated at Sat May 10 01:39:48 2025 by rpki-client