Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa
File: 326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier: k3FJXVM4TEttJvbotUtqQjFz1XxoO17WZiC7A/kNS6c=
Subject key identifier: 45:0F:B0:CD:42:77:3A:C1:11:DA:77:1D:46:C9:8C:ED:80:66:A5:CC
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 22575023780913E4137E0A4FCA24734798DE6FEE
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa
Signing time: Wed 14 May 2025 17:27:19 +0000
ROA not before: Wed 14 May 2025 17:22:19 +0000
ROA not after: Wed 13 May 2026 17:27:19 +0000
asID: 213864
IP address blocks: 2a09:54c6:1000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:57:50:23:78:09:13:e4:13:7e:0a:4f:ca:24:73:47:98:de:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 14 17:22:19 2025 GMT
Not After : May 13 17:27:19 2026 GMT
Subject: CN=450FB0CD42773AC111DA771D46C98CED8066A5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:9f:a4:af:ab:8d:89:32:a7:79:50:91:73:
fa:04:9b:73:f7:9d:d4:61:22:eb:e5:74:47:14:0e:
be:5f:4e:fa:de:5b:96:d5:82:b1:16:87:96:f5:22:
5f:bf:5e:1f:da:c3:bc:6c:37:5b:07:75:8c:a3:b6:
96:a5:7e:f0:e8:8a:8b:de:0f:41:94:17:4a:87:e3:
52:57:0e:99:d3:e6:e0:97:46:55:4e:a3:31:83:a1:
b4:cb:4f:1b:10:88:97:36:50:ad:95:58:98:f3:26:
3e:c4:e0:ad:0d:f2:b1:dd:3f:a3:d9:59:3c:d4:01:
52:c5:3c:46:57:93:40:30:d0:0f:90:aa:d1:57:7b:
79:c7:e7:cf:c9:1d:e7:8d:03:71:bb:d9:e5:6c:d5:
56:90:d1:c9:0c:ef:a8:51:95:e7:c8:ad:4b:e7:03:
8e:e0:3e:a7:a6:74:cc:50:17:8f:32:8f:b9:27:da:
fe:9e:c1:f5:3d:9d:87:c0:13:9e:c1:4b:21:06:15:
c0:f4:73:a7:a9:77:ea:1b:07:cc:a0:23:d1:b5:f4:
00:61:e6:18:d5:fb:74:f8:8f:e7:b0:61:d5:62:69:
67:5b:99:18:85:7e:58:d2:f1:56:e4:3b:2e:c1:be:
f2:46:a6:66:f1:d3:4e:b3:15:ab:0c:84:8f:58:ae:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:B0:CD:42:77:3A:C1:11:DA:77:1D:46:C9:8C:ED:80:66:A5:CC
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a313030303a3a2f33362d3434203d3e20323133383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6d:66:dd:b6:a6:dd:82:6d:7d:82:02:e9:a9:f4:f0:05:ce:a9:
d0:08:5b:ad:50:46:c1:a2:b0:11:6f:42:55:a1:0c:a0:db:70:
cc:24:df:c2:fe:35:81:cc:95:8c:d5:ea:34:17:72:31:62:29:
1a:2e:0a:07:8d:9e:f9:36:57:13:fa:76:e1:ae:2e:2d:3c:5d:
2b:44:88:c2:5a:c7:83:22:6b:6f:74:d8:a2:a7:13:0a:35:34:
18:b9:80:73:82:40:4e:d7:6d:0c:e5:f8:0c:4a:fc:a1:d6:d3:
be:52:8b:4d:d5:db:53:27:29:dc:b7:09:72:37:2d:b0:68:05:
5b:bf:53:ca:ae:20:a3:a4:f9:32:76:e0:c1:74:5d:c7:a0:42:
95:81:2a:96:18:25:11:0e:f2:88:fb:be:2a:cd:0e:c6:5c:09:
e6:06:c0:4f:38:5d:d9:3f:23:d6:3c:e8:b9:50:e7:83:be:94:
c1:23:ee:a4:d7:c3:bc:35:cf:61:19:ce:54:e8:69:21:99:b7:
9c:cb:ff:df:c3:61:db:e6:8a:68:c9:32:6f:ba:30:8e:86:d3:
c3:15:de:ae:d6:07:2d:9f:84:9f:b8:5a:ff:ed:9b:e0:20:79:
39:19:87:86:13:07:fd:cc:0b:b4:3e:4d:d8:4b:c3:92:5c:e3:
94:b6:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:59 2025 by rpki-client