Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa
File: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier: 5ff9So6R+4JwgBaznVT50fWcxXl/IM1ZqlDezEJNdUI=
Subject key identifier: 4B:04:1C:7A:C9:25:4E:F3:ED:B7:09:76:B0:7D:0B:0A:54:1B:DE:17
Certificate issuer: /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial: 3F6B4CE47C3D9483263DEBAA5FBE0B87C7F05339
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa
Signing time: Sun 25 May 2025 06:46:20 +0000
ROA not before: Sun 25 May 2025 06:41:20 +0000
ROA not after: Sun 24 May 2026 06:46:20 +0000
asID: 199763
IP address blocks: 2a0a:6044:bcff::/48 maxlen: 64
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6b:4c:e4:7c:3d:94:83:26:3d:eb:aa:5f:be:0b:87:c7:f0:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Validity
Not Before: May 25 06:41:20 2025 GMT
Not After : May 24 06:46:20 2026 GMT
Subject: CN=4B041C7AC9254EF3EDB70976B07D0B0A541BDE17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:aa:be:50:0a:76:61:ec:f6:a8:02:4f:00:
81:30:dd:56:a4:24:1a:93:2a:cc:ea:3a:8e:de:45:
e2:87:78:aa:c4:e6:92:21:53:14:6b:a7:2f:ba:05:
47:9a:ed:e3:c4:0b:b1:fd:1a:a9:45:de:20:c6:c4:
3c:1d:36:c6:9d:b6:3a:17:d1:93:af:2b:27:7f:52:
86:ad:d4:82:ef:63:56:9b:36:87:4d:3b:32:e1:6d:
76:c4:e7:a8:f2:fd:8b:13:67:d4:2e:db:89:61:66:
47:77:ad:77:c0:eb:dc:23:5b:56:56:22:45:22:45:
5c:31:6d:50:b1:1a:3a:a0:fe:64:1f:13:fb:8c:f6:
cc:e5:95:28:5a:d4:c8:03:92:8c:6f:d0:70:df:86:
07:70:4d:d7:40:18:ad:46:54:47:87:c8:3e:95:f1:
49:0f:12:7f:39:d4:d5:15:51:b2:4b:84:4c:f9:a7:
6c:eb:ab:c8:7e:36:86:f8:81:30:02:f8:4e:b8:44:
44:5f:38:b5:68:b0:8d:90:4d:d6:7d:8b:72:e8:ae:
a4:57:93:1c:88:b2:4d:ef:05:8f:5d:fa:81:21:4b:
05:c9:b2:fa:cd:47:a2:f2:92:c2:d5:39:c2:6d:ba:
54:55:5b:0e:05:c3:f4:6d:8f:37:af:b7:4a:62:4d:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:1C:7A:C9:25:4E:F3:ED:B7:09:76:B0:7D:0B:0A:54:1B:DE:17
X509v3 Authority Key Identifier:
keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bcff::/48
Signature Algorithm: sha256WithRSAEncryption
54:6d:31:3c:1d:60:18:97:5e:8f:f3:d4:ef:67:dd:09:4a:5d:
9b:a8:c5:d5:a5:75:f3:29:e5:c0:ba:e7:54:b3:38:44:74:d2:
4e:b8:9d:83:df:c8:69:fc:28:6b:01:f5:ac:a6:ee:4f:8b:b5:
a7:ef:e2:f3:9c:54:dd:b7:6f:14:92:68:a3:db:37:2e:40:0d:
49:1d:62:82:b1:c1:48:b9:90:dd:12:fd:a4:90:35:4b:29:bf:
0b:da:ba:05:fb:0d:99:43:c8:12:4e:76:83:ad:96:06:24:c2:
44:3b:85:28:04:0f:bf:7f:ab:9b:de:a1:1e:f9:42:95:ab:ee:
f0:f4:01:81:7f:90:32:ab:b8:21:86:cd:8c:bb:b2:2f:0c:8a:
0a:3b:fe:d0:c3:d4:45:cf:cf:a5:3a:87:d5:76:e6:a1:01:c9:
a5:30:98:f6:c0:0a:bc:cc:67:cc:aa:85:0b:a7:71:33:15:81:
f3:5f:d9:28:18:29:7c:a4:9d:f7:8b:80:a0:4a:f5:aa:cb:19:
9a:c2:72:9a:e8:8e:43:e5:37:e8:35:2d:55:aa:20:62:6a:36:
a8:92:3a:2a:2a:6a:0f:a3:65:5d:c6:80:b4:d8:b5:9e:15:a6:
dd:27:d3:e5:d7:17:1e:6d:9c:1f:2a:18:1e:c3:5a:09:60:1f:
50:57:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:33:39 2025 by rpki-client