This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337653a3a2f34382d3438203d3e20323134373537.roa
File:                     326130613a363034343a616337653a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          BDcu7BFAw9J8Tp2er7153eCkmzoWyGI2OBjnlCbFZp4=
Subject key identifier:   A8:14:4B:1E:E2:0C:A0:08:B4:29:CC:13:C4:70:ED:F0:AF:6C:59:0B
Certificate issuer:       /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
Certificate serial:       2C51B1210D5B2F4C82CC349D57AF530ABD36F074
Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337653a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Sat 08 Jun 2024 14:02:52 +0000
ROA not before:           Sat 08 Jun 2024 13:57:52 +0000
ROA not after:            Sat 07 Jun 2025 14:02:52 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac7e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:51:b1:21:0d:5b:2f:4c:82:cc:34:9d:57:af:53:0a:bd:36:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C
        Validity
            Not Before: Jun  8 13:57:52 2024 GMT
            Not After : Jun  7 14:02:52 2025 GMT
        Subject: CN=A8144B1EE20CA008B429CC13C470EDF0AF6C590B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:82:e6:8a:2f:20:de:fd:68:20:fd:9a:f9:
                    63:12:52:44:ae:54:02:1f:e8:13:f3:01:f5:63:9a:
                    b7:10:f3:96:0f:e0:b4:a2:bd:ef:5f:57:27:0d:68:
                    06:99:dd:e4:a9:94:05:e9:42:2a:57:a7:c3:b8:f0:
                    86:a3:ec:85:dc:8f:02:3c:11:9c:d7:83:5d:c8:36:
                    b6:46:bf:d5:67:b3:34:3f:d6:c6:8c:92:8d:ca:44:
                    e8:0b:c9:2e:52:a5:66:ed:b1:cd:7b:f0:b9:16:35:
                    96:c1:3b:c2:22:d9:fa:9d:01:cc:8e:7c:d3:f1:e7:
                    da:53:0a:87:93:61:66:20:76:03:6e:3d:f1:61:e4:
                    9c:b5:a8:76:b9:42:a2:a7:76:9b:26:d0:7e:d0:48:
                    b1:de:74:e0:b3:ce:ad:aa:b0:34:96:9d:35:61:aa:
                    e9:f5:f1:46:96:73:8b:6d:5e:80:89:7c:0a:81:d5:
                    3c:51:6b:6a:84:0e:79:a7:ee:7b:8f:be:ac:05:fd:
                    82:bf:8b:ff:fd:f3:10:4d:c2:44:aa:e6:7e:fa:61:
                    c7:4e:da:e3:9b:49:41:c9:12:3c:4c:55:87:5d:b6:
                    c8:33:f9:4a:8f:cb:42:92:e8:08:cc:0f:61:46:4c:
                    79:15:2d:a4:7c:ff:12:d5:21:d3:a2:00:89:0b:e5:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:14:4B:1E:E2:0C:A0:08:B4:29:CC:13:C4:70:ED:F0:AF:6C:59:0B
            X509v3 Authority Key Identifier:
                keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/326130613a363034343a616337653a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac7e::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:fe:21:95:8d:28:18:fc:1e:11:aa:e0:b7:bc:a3:39:6d:
         1c:3d:2f:d9:9b:14:3f:27:3a:15:cb:06:82:ef:d7:0e:ae:b4:
         2c:c6:cd:9b:4a:bf:fe:a6:e3:6a:21:e9:7d:f4:1f:2e:0f:df:
         61:0b:90:de:f1:81:69:2f:71:a4:47:12:77:ef:9c:4d:6e:f7:
         3d:d9:dc:4b:58:05:e1:8f:b0:e4:60:71:7c:c0:b9:67:df:cf:
         70:c1:a1:f7:0b:f3:32:67:5a:84:0d:66:ce:9a:cc:db:1e:f7:
         c7:31:c5:99:03:ec:de:59:12:8f:a1:13:96:89:c7:03:6a:a2:
         91:a2:35:d4:44:36:5a:58:d7:51:9a:8b:2f:84:33:14:bf:d7:
         ef:bd:6f:d0:76:90:1b:41:3b:87:02:3e:c6:32:90:8e:23:b1:
         24:4b:db:0b:e2:48:9e:23:0e:86:1d:41:06:c4:3e:a5:3e:94:
         02:94:59:52:32:07:24:12:82:01:35:c5:5c:89:ee:61:25:37:
         c6:d8:b1:2f:59:e9:45:40:69:f9:81:69:1e:dc:a8:08:22:43:
         a2:39:cb:e7:20:6e:30:d3:4f:59:36:b9:45:22:7f:6f:28:3f:
         88:92:c0:fd:0f:9a:c8:c2:12:73:6d:c4:09:fa:0b:5a:56:ed:
         31:8f:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----