Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
File: 326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa (raw, json)
Hash identifier: xYUitT2HUWdZQdWhhtvOL/N6dHGaHT8vesYBPh3VEWk=
Subject key identifier: 31:AC:2C:61:23:A4:90:5C:57:D8:A7:D1:20:CF:32:4E:ED:AE:27:03
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 452BB7BDB161A1E8BFF17C95DBA0E806FF213E1B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
Signing time: Mon 05 May 2025 21:26:20 +0000
ROA not before: Mon 05 May 2025 21:21:20 +0000
ROA not after: Mon 04 May 2026 21:26:20 +0000
asID: 214223
IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2b:b7:bd:b1:61:a1:e8:bf:f1:7c:95:db:a0:e8:06:ff:21:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 5 21:21:20 2025 GMT
Not After : May 4 21:26:20 2026 GMT
Subject: CN=31AC2C6123A4905C57D8A7D120CF324EEDAE2703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e4:35:5f:cd:cb:0b:8b:69:2a:df:1a:96:30:
09:e8:f4:6a:16:53:2a:eb:2a:04:b0:75:0a:ad:d6:
bf:38:3d:46:e7:19:d2:95:c4:70:03:6a:c1:00:d8:
0a:75:ec:fe:b0:a9:9e:29:bd:bb:69:c3:66:0e:32:
da:46:bb:e6:1e:a5:2e:2a:b2:c0:54:59:ee:15:44:
92:76:d1:1e:bd:ae:d3:3b:79:cf:f2:f4:05:d3:73:
45:c6:7b:cd:0d:f2:29:12:2e:ec:48:fa:84:ca:81:
54:d5:ef:0a:ad:8d:0d:66:0c:ed:35:40:af:01:f6:
52:ce:f5:92:d4:64:98:c9:d2:db:0c:f2:73:51:c2:
8a:b6:20:01:e1:63:ca:c3:1f:04:f3:ed:fc:d2:4e:
5c:5c:73:9a:45:28:66:e7:66:67:a8:11:8e:fd:8e:
60:07:1b:da:e9:1d:7c:cb:42:a6:7b:83:13:5e:31:
19:be:d6:f2:12:e9:1f:38:05:42:0d:57:66:81:e1:
73:e4:7a:4c:37:c5:ed:c8:e2:31:b6:3c:55:42:93:
24:8f:cf:84:54:73:e6:2e:d9:fa:5a:c3:3f:d9:0f:
9c:56:51:74:d5:98:45:ce:6f:f8:2c:2a:dd:01:58:
11:88:11:a4:85:e4:6c:3f:d1:bf:17:3f:64:20:76:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:2C:61:23:A4:90:5C:57:D8:A7:D1:20:CF:32:4E:ED:AE:27:03
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
04:a6:1c:09:b6:70:5b:b0:84:38:b8:33:c7:0a:33:73:b5:de:
f0:19:bc:d5:76:2e:f1:80:b0:33:bb:e7:ea:73:45:d4:1f:d6:
95:c7:58:d5:53:9c:f4:23:e5:6e:f1:a6:50:13:1e:b5:04:6c:
48:1c:84:1f:25:ef:9f:26:a1:8e:da:7c:11:fb:00:bc:ce:47:
83:70:db:f5:2a:bd:10:a4:00:07:c9:24:ea:22:7a:01:04:bf:
fe:50:bd:3e:3b:0d:2e:a5:4e:2b:ce:53:16:ad:da:ed:43:ce:
f6:a8:5a:84:46:32:b4:e5:98:19:3f:51:11:6f:94:dc:00:5a:
14:19:b6:19:e4:af:9f:3b:da:93:c9:1f:d0:6d:fa:ef:a8:d8:
2b:d1:1d:bc:07:c2:c9:12:34:90:0f:e4:3d:5a:54:3c:a1:55:
b3:a1:a2:17:5e:d5:6e:06:a6:f2:8b:7f:fc:d4:16:26:b5:78:
1a:70:1c:8d:07:cc:58:fe:f4:78:3d:c6:3a:59:81:3a:e8:6f:
7f:94:fe:9e:79:39:c9:be:26:49:2e:58:d8:1c:64:42:00:93:
15:88:cc:12:e4:88:c3:f8:ec:b6:5d:8e:ea:df:8c:76:fe:29:
52:d2:c6:47:3f:eb:47:4b:9d:e4:f8:86:3d:af:59:b1:ba:e3:
ad:18:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:56:53 2025 by rpki-client