Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa
File: 323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier: v8VIz6Z4U1e+2MARLBqIZLipTale7VMSSo1MTqwjwX8=
Subject key identifier: E3:F8:F9:17:D2:A5:1D:DB:83:F6:BC:98:1D:06:EC:FD:66:AC:14:D0
Certificate issuer: /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial: 2DB1D8093B31F8E7C94F57C86F6E6DBA0455E83C
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 11:41:53 +0000
ROA not before: Fri 07 Feb 2025 11:36:53 +0000
ROA not after: Fri 06 Feb 2026 11:41:53 +0000
asID: 47272
IP address blocks: 2602:f96d:a00::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b1:d8:09:3b:31:f8:e7:c9:4f:57:c8:6f:6e:6d:ba:04:55:e8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Validity
Not Before: Feb 7 11:36:53 2025 GMT
Not After : Feb 6 11:41:53 2026 GMT
Subject: CN=E3F8F917D2A51DDB83F6BC981D06ECFD66AC14D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:89:bd:b7:41:74:cc:ea:17:1e:49:2e:b5:
83:c7:5c:12:1e:40:09:64:70:a0:50:fe:9f:12:19:
58:94:1a:df:fc:b6:64:bc:02:60:2d:88:9a:e7:81:
10:83:9d:4e:9a:68:89:5c:b6:d2:d3:ff:60:1f:65:
91:0d:a7:e9:12:61:04:8f:20:26:f3:0b:f1:3b:d6:
f0:26:64:a8:61:9d:b8:8f:de:89:32:2d:2b:b0:96:
db:cb:bb:c1:37:a8:73:4f:50:b2:62:53:da:15:2d:
75:84:c5:ca:64:b8:80:d6:6b:fe:f3:54:ce:a0:a9:
2e:7b:db:b9:bc:22:42:72:11:c5:34:c1:37:ae:2c:
e9:13:be:c8:06:00:63:5d:72:25:9a:cd:49:68:4a:
45:1e:d9:bb:3f:36:dc:48:1e:1a:e0:1f:4f:67:44:
de:d5:c3:19:88:8e:b6:43:d5:34:ff:77:d3:77:c9:
99:64:02:4d:bd:46:0c:9f:be:9d:05:64:d3:11:8a:
68:df:95:66:fc:c3:ae:21:8f:3d:e9:a1:fe:f9:31:
1b:76:95:d8:0c:82:f9:79:24:93:69:f7:d0:1a:a3:
35:ed:c7:ce:98:9a:68:be:e2:f2:c9:81:7f:cf:99:
6e:ac:97:b3:02:bc:a9:06:a7:02:25:8a:98:8a:67:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:F9:17:D2:A5:1D:DB:83:F6:BC:98:1D:06:EC:FD:66:AC:14:D0
X509v3 Authority Key Identifier:
keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f96d:a00::/40
Signature Algorithm: sha256WithRSAEncryption
03:55:7e:c0:47:1f:b4:b9:5c:19:f9:89:92:f4:90:17:cc:c1:
83:e3:40:a5:be:95:55:1f:d9:f5:9f:d0:da:13:97:9b:2a:07:
34:48:48:77:f0:67:1a:84:23:74:7a:ed:cc:d2:c0:ff:e0:75:
80:39:2b:c7:04:1d:f4:80:86:01:64:69:74:96:22:ab:a3:19:
f4:57:76:da:28:2c:32:57:1c:62:6e:cd:56:7d:2e:2b:5d:13:
84:97:26:4b:24:c8:bb:58:c4:0e:bf:0d:9b:11:47:69:fc:84:
c2:d7:3a:23:16:1c:7e:fc:74:cc:85:8f:30:30:36:ac:44:b9:
95:6a:1b:7f:5b:b7:41:90:e8:ed:b6:5d:35:ef:f0:ac:92:ad:
7a:cf:ea:6d:34:0d:7e:fe:98:e7:1b:61:08:81:51:f7:1a:d0:
85:02:f3:e1:0f:a5:61:cd:8e:56:01:3c:75:cf:4d:88:de:2b:
c2:90:88:c9:00:b2:e3:5c:0f:42:6f:39:87:52:3c:cf:e3:f5:
9a:40:14:1d:62:52:76:28:4f:ec:ea:7e:08:b8:47:d7:fd:fb:
e2:e9:9a:17:28:86:99:89:be:80:fe:f0:fe:31:de:32:3e:99:
16:8d:34:18:77:9e:2d:78:be:72:93:a4:bd:15:9f:58:bc:e3:
50:e9:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:21 2025 by rpki-client on console.sobornost.net