Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa
File: 326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa (raw, json)
Hash identifier: 7JWPSbuWUj3JLmVMpQpgJYayx2gO5Bkv1INn4E6UY2k=
Subject key identifier: 41:98:CA:66:FD:4A:C9:D6:63:CC:3E:A8:62:7E:67:AC:BA:1E:83:51
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2125945E128EB01CEBB59C91990D63F738B77EF2
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa
Signing time: Tue 27 May 2025 10:07:58 +0000
ROA not before: Tue 27 May 2025 10:02:58 +0000
ROA not after: Tue 26 May 2026 10:07:58 +0000
asID: 208884
IP address blocks: 2a05:dfc3:f600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:25:94:5e:12:8e:b0:1c:eb:b5:9c:91:99:0d:63:f7:38:b7:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 27 10:02:58 2025 GMT
Not After : May 26 10:07:58 2026 GMT
Subject: CN=4198CA66FD4AC9D663CC3EA8627E67ACBA1E8351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:a6:3e:96:c8:c1:c1:dd:77:c6:c3:2b:68:
f5:6e:8c:3b:bb:03:df:ad:21:70:05:d5:f3:d1:18:
f2:c1:7d:a4:8f:b3:2c:1f:6a:da:6b:95:2e:18:4b:
14:d8:75:3e:4d:5b:4b:80:f5:9f:fb:2d:d8:66:4b:
32:c9:eb:fa:ec:de:d0:d4:9c:00:b8:10:a6:62:60:
a1:0f:79:ee:fd:10:2b:1b:3d:93:ac:97:42:55:e2:
f2:8a:c0:f1:b1:6d:04:31:c5:b9:a2:ac:45:ca:47:
4c:ed:a1:1d:af:f7:be:3d:2d:12:c7:35:c6:1c:ab:
b1:f6:7a:57:b7:aa:ec:e5:b7:fd:ac:bc:bb:e9:62:
72:ca:ca:09:6f:67:15:88:38:b1:ff:cb:da:ea:e5:
5e:d2:85:53:3d:11:e3:6e:d6:0f:53:09:d6:ce:4a:
a4:70:a9:63:1a:7c:29:67:36:fe:86:72:73:91:5f:
fd:0a:83:db:ab:5f:5f:b2:3e:8e:29:62:1f:21:ea:
63:1f:28:48:ab:66:1f:6f:54:55:94:37:97:a1:0e:
9c:aa:38:8d:43:a4:32:4b:12:d5:bd:68:e0:c5:d5:
76:5e:c9:2f:43:02:0d:f9:ae:e3:cc:80:ea:be:ed:
9c:c5:d0:a2:2e:94:a3:26:e4:9c:ff:77:0c:d2:59:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:CA:66:FD:4A:C9:D6:63:CC:3E:A8:62:7E:67:AC:BA:1E:83:51
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663630303a3a2f34302d3438203d3e20323038383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f600::/40
Signature Algorithm: sha256WithRSAEncryption
5f:bc:d9:f5:0d:ce:d8:eb:97:2c:2e:a2:df:a2:6c:32:86:bb:
5a:24:ad:48:4c:6d:6f:d9:af:6a:df:5c:26:99:f4:a2:f5:d2:
2f:7d:30:d6:f1:09:15:ea:14:a9:9e:7a:57:8a:09:77:1c:13:
3b:f0:ea:9b:3f:2c:f8:23:16:e9:87:3e:2d:fa:35:fa:3d:19:
e0:72:70:a1:1e:46:cd:e4:04:63:01:f7:53:85:8f:e6:e2:39:
04:db:3e:70:fd:63:af:ce:5f:eb:5b:87:9d:a1:6d:cc:f3:10:
30:4b:de:d4:b9:29:5f:41:62:8f:dd:a6:a8:fc:77:bb:50:71:
b1:fc:8e:6f:fc:7b:87:1f:a2:fb:46:67:7e:83:14:04:81:c9:
db:1b:1b:34:a6:73:8b:92:09:aa:05:a0:88:25:4c:c4:b1:66:
58:c1:43:08:64:77:be:0e:ab:67:e9:86:3e:07:3f:65:93:47:
e2:8b:33:1a:c6:0a:60:7b:92:a9:3e:4b:e8:a1:9b:d2:47:5e:
8a:db:e0:8a:95:77:cb:6f:dc:30:b1:1b:4a:98:da:ab:05:ef:
75:1a:f6:92:7c:46:eb:51:3a:ba:78:7f:e7:94:f5:ec:7d:4d:
2d:8e:5d:0b:db:65:00:25:5e:8a:11:25:dd:1c:bf:db:82:c1:
2a:89:a5:8d
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUISWUXhKOsBzrtZyRmQ1j9zi3fvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA1MjcxMDAyNThaFw0yNjA1MjYxMDA3NThaMDMxMTAvBgNV
BAMTKDQxOThDQTY2RkQ0QUM5RDY2M0NDM0VBODYyN0U2N0FDQkExRTgzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7raY+lsjBwd13xsMraPVujDu7
A9+tIXAF1fPRGPLBfaSPsywfatprlS4YSxTYdT5NW0uA9Z/7LdhmSzLJ6/rs3tDU
nAC4EKZiYKEPee79ECsbPZOsl0JV4vKKwPGxbQQxxbmirEXKR0ztoR2v9749LRLH
NcYcq7H2ele3quzlt/2svLvpYnLKyglvZxWIOLH/y9rq5V7ShVM9EeNu1g9TCdbO
SqRwqWMafClnNv6GcnORX/0Kg9urX1+yPo4pYh8h6mMfKEirZh9vVFWUN5ehDpyq
OI1DpDJLEtW9aODF1XZeyS9DAg35ruPMgOq+7ZzF0KIulKMm5Jz/dwzSWWFrAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUQZjKZv1KydZjzD6oYn5nrLoeg1EwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz
M2E2NjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzODM4MzgzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoF38P2MA0GCSqGSIb3DQEBCwUAA4IBAQBfvNn1Dc7Y65csLqLf
omwyhrtaJK1ITG1v2a9q31wmmfSi9dIvfTDW8QkV6hSpnnpXigl3HBM78OqbPyz4
Ixbphz4t+jX6PRngcnChHkbN5ARjAfdThY/m4jkE2z5w/WOvzl/rW4edoW3M8xAw
S97UuSlfQWKP3aao/He7UHGx/I5v/HuHH6L7Rmd+gxQEgcnbGxs0pnOLkgmqBaCI
JUzEsWZYwUMIZHe+Dqtn6YY+Bz9lk0fiizMaxgpge5KpPkvooZvSR16K2+CKlXfL
b9wwsRtKmNqrBe91GvaSfEbrUTq6eH/nlPXsfU0tjl0L22UAJV6KESXdHL/bgsEq
iaWN
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:00 2025 by rpki-client