
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa
File: 326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa (raw, json)
Hash identifier: gPJ2xtgaJ2u1CChDcJQcPQZ6ELKiSlG4etMyKHn7PrU=
Subject key identifier: 4B:D9:1B:38:D9:8C:3B:E4:76:69:00:F3:49:65:BD:0B:D6:1D:51:86
Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial: 1724F53F8B7E8AE6C0EC727670BCE9E10CE01365
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa
Signing time: Thu 13 Feb 2025 21:39:23 +0000
ROA not before: Thu 13 Feb 2025 21:34:23 +0000
ROA not after: Thu 12 Feb 2026 21:39:23 +0000
asID: 58212
IP address blocks: 2a06:1283:8b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:24:f5:3f:8b:7e:8a:e6:c0:ec:72:76:70:bc:e9:e1:0c:e0:13:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
Validity
Not Before: Feb 13 21:34:23 2025 GMT
Not After : Feb 12 21:39:23 2026 GMT
Subject: CN=4BD91B38D98C3BE4766900F34965BD0BD61D5186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:02:55:d3:34:95:2d:8d:8a:2a:c0:a2:83:
28:09:82:5e:93:de:2d:a0:a9:0e:1f:67:5c:d8:91:
b2:0b:bf:3a:52:e3:64:fd:3e:0d:8d:6f:f1:aa:c3:
ba:af:21:d0:c1:2b:64:25:52:a8:39:43:d1:f8:72:
7c:36:4c:a4:61:31:b2:89:66:c1:2b:6f:e4:de:91:
2e:05:0a:d0:ab:c5:79:fb:ba:85:c0:8c:dc:aa:ed:
8a:79:89:a7:a3:55:be:5e:01:d3:c3:2b:c4:e3:0a:
c2:c1:9a:85:16:41:b9:67:88:7b:ca:c9:9c:d2:d9:
04:c5:c8:7b:32:e6:ae:60:d0:6f:63:c4:f5:0d:ff:
4b:41:9d:b0:57:45:14:6c:75:7c:2a:1b:ea:8a:7c:
a8:a8:52:8f:75:89:c9:e6:59:b5:55:77:57:5b:e1:
70:06:44:37:9c:9a:ef:f6:29:e0:d4:4d:36:78:ec:
a2:95:24:ff:49:63:5c:ea:e3:57:f9:03:6e:3d:97:
8d:dd:47:5d:26:84:d6:7b:57:39:49:c7:d5:ef:4b:
c8:94:aa:46:8b:24:eb:0c:8e:52:39:a1:aa:74:2a:
01:95:b7:3b:e2:64:d1:b9:6a:f5:2e:17:03:eb:88:
9a:77:fa:d9:b0:13:81:20:56:4a:39:54:db:94:2f:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:1B:38:D9:8C:3B:E4:76:69:00:F3:49:65:BD:0B:D6:1D:51:86
X509v3 Authority Key Identifier:
keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230303a3a2f34302d3438203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
8b:e7:59:76:bf:2a:60:e4:00:e2:c3:7a:4f:e5:be:cd:95:a7:
4d:e0:61:64:5f:ab:06:c8:e6:ce:76:5b:af:b3:5b:b5:44:af:
df:e1:52:c7:03:fb:04:b0:fe:7e:60:2f:2c:9a:79:27:49:71:
bc:bf:a9:52:bd:56:ca:74:59:54:ef:62:a5:00:44:78:cf:75:
db:74:28:66:b5:dd:4f:92:27:29:1b:fd:1f:dd:0c:ba:e2:a7:
07:f3:53:2a:ce:7f:86:71:98:c9:5f:dc:e3:20:45:99:6c:61:
31:3d:dc:8b:c5:26:10:55:b9:d4:46:d3:e7:75:9a:3d:b3:fd:
7d:af:0d:ac:d5:26:0b:1a:2a:22:4b:02:94:51:2f:4d:fd:4d:
4e:f2:67:8f:73:d7:71:2c:84:28:85:14:30:d5:58:70:e7:e0:
36:46:51:e4:9f:d5:cc:87:86:04:9a:06:21:92:c7:f6:96:6f:
cb:24:54:3b:c2:a0:f1:07:11:06:0e:d8:b7:57:0a:8e:e6:22:
8e:c5:eb:cb:29:cc:04:08:82:81:e5:66:d5:e4:bb:5e:5d:2c:
10:9b:45:78:ec:7e:ed:60:3a:e6:17:1d:1a:52:7b:fd:40:21:
a8:20:ce:ad:f8:65:77:6d:90:40:2c:47:76:6b:17:e1:9f:2b:
7c:7c:cb:53
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUFyT1P4t+iubA7HJ2cLzp4QzgE2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3
OTg5MkM2QzAeFw0yNTAyMTMyMTM0MjNaFw0yNjAyMTIyMTM5MjNaMDMxMTAvBgNV
BAMTKDRCRDkxQjM4RDk4QzNCRTQ3NjY5MDBGMzQ5NjVCRDBCRDYxRDUxODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRRAJV0zSVLY2KKsCigygJgl6T
3i2gqQ4fZ1zYkbILvzpS42T9Pg2Nb/Gqw7qvIdDBK2QlUqg5Q9H4cnw2TKRhMbKJ
ZsErb+TekS4FCtCrxXn7uoXAjNyq7Yp5iaejVb5eAdPDK8TjCsLBmoUWQblniHvK
yZzS2QTFyHsy5q5g0G9jxPUN/0tBnbBXRRRsdXwqG+qKfKioUo91icnmWbVVd1db
4XAGRDecmu/2KeDUTTZ47KKVJP9JY1zq41f5A249l43dR10mhNZ7VzlJx9XvS8iU
qkaLJOsMjlI5oap0KgGVtzviZNG5avUuFwPriJp3+tmwE4EgVko5VNuULwjrAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUS9kbONmMO+R2aQDzSWW9C9YdUYYwHwYDVR0j
BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz
MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz
NjNhMzEzMjM4MzMzYTM4NjIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzUz
ODMyMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoGEoOLMA0GCSqGSIb3DQEBCwUAA4IBAQCL51l2
vypg5ADiw3pP5b7NladN4GFkX6sGyObOdluvs1u1RK/f4VLHA/sEsP5+YC8smnkn
SXG8v6lSvVbKdFlU72KlAER4z3XbdChmtd1PkicpG/0f3Qy64qcH81Mqzn+GcZjJ
X9zjIEWZbGExPdyLxSYQVbnURtPndZo9s/19rw2s1SYLGioiSwKUUS9N/U1O8meP
c9dxLIQohRQw1Vhw5+A2RlHkn9XMh4YEmgYhksf2lm/LJFQ7wqDxBxEGDti3VwqO
5iKOxevLKcwECIKB5WbV5LteXSwQm0V47H7tYDrmFx0aUnv9QCGoIM6t+GV3bZBA
LEd2axfhnyt8fMtT
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:20:49 2025 by rpki-client on console.sobornost.net