Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463373a323030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: wzCx1yew7uTA2KLmqRj6E1rdcN/Yeh3aEBKUq2hUZQc=
Subject key identifier: D3:6D:83:CD:01:15:5A:83:AC:5F:55:9B:DA:1D:48:B3:17:6A:8C:F0
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3F9349BE16C807D4CECFCDBACE5E1F9EE074A1CA
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 29 Jun 2025 18:22:10 +0000
ROA not before: Sun 29 Jun 2025 18:17:10 +0000
ROA not after: Sun 28 Jun 2026 18:22:10 +0000
asID: 0
IP address blocks: 2a09:54c7:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:93:49:be:16:c8:07:d4:ce:cf:cd:ba:ce:5e:1f:9e:e0:74:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 29 18:17:10 2025 GMT
Not After : Jun 28 18:22:10 2026 GMT
Subject: CN=D36D83CD01155A83AC5F559BDA1D48B3176A8CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:b5:6d:40:a2:ce:ee:b9:a4:27:fd:2c:2e:
1f:18:1d:85:99:8a:2e:ac:28:30:3d:f6:dc:f0:69:
5f:56:94:77:b2:00:c8:ef:b7:72:32:83:29:97:75:
9b:70:7b:50:39:d0:f4:c5:5d:a8:4f:9d:9f:32:00:
21:9e:97:59:20:0f:4b:e5:af:06:72:1f:1d:65:b3:
1a:54:92:71:d8:c3:17:55:63:bb:2c:af:c4:d4:60:
b9:ba:3f:64:f4:cd:bd:5b:13:b0:c4:4b:49:84:dd:
7a:5f:12:f3:27:df:46:e6:3c:2d:df:0b:7e:56:14:
be:bd:52:86:9b:db:f1:42:bb:56:0b:18:7f:56:92:
0d:75:09:01:76:ea:76:ad:77:85:99:11:a4:2e:3e:
39:81:1e:a1:1c:84:9e:33:53:e8:48:4b:d8:9f:96:
29:d8:41:69:36:07:72:4f:7a:ba:2f:58:d7:23:29:
a2:71:d7:82:6b:f4:ff:89:73:28:c0:2d:03:e2:21:
4e:57:7f:4b:b7:df:ee:56:29:99:c5:96:8e:48:a2:
62:b8:69:7b:5a:d4:f9:96:93:46:7f:bc:7a:c6:89:
8c:69:39:81:55:20:3a:08:b9:11:b9:60:e1:44:e7:
15:19:28:77:b1:44:9b:f4:9e:98:ca:55:d0:28:c5:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:83:CD:01:15:5A:83:AC:5F:55:9B:DA:1D:48:B3:17:6A:8C:F0
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
36:d7:33:81:f3:36:e1:83:eb:af:03:16:6e:ee:88:59:7e:6f:
b3:c4:7e:f1:ab:8f:46:8a:e6:51:8a:70:f9:38:8c:98:ee:2c:
39:f7:b5:1a:38:6c:cf:3f:37:ec:d6:04:fb:3d:a8:77:06:f9:
7d:66:cc:e7:90:97:32:96:2a:de:5d:1e:b6:45:46:96:44:45:
b0:18:ba:c8:07:d6:84:42:6d:c8:19:6f:bf:d2:a5:c3:71:f3:
4d:29:6a:9f:9d:3b:24:37:c1:a2:93:e0:e6:19:3e:a9:16:f9:
0a:14:3f:ed:de:41:23:f3:80:52:89:a4:09:c5:fb:d1:09:be:
36:14:b7:2e:57:3d:75:5f:bb:21:f1:07:a3:85:d5:40:f8:66:
f5:ff:b7:22:f1:9f:f8:05:a3:01:e0:b7:95:35:1a:8b:38:1a:
e9:01:fc:e2:f2:54:12:1a:c7:c3:43:83:a7:cb:9b:81:94:de:
92:f6:1d:85:6a:72:1f:48:25:ae:5d:90:4b:dc:fe:5a:c7:b0:
30:2f:7a:ad:d7:f9:b6:a0:72:78:20:98:7e:25:8f:17:e0:10:
b1:64:9c:c9:e2:da:90:e3:0b:72:13:58:49:48:76:10:89:ca:
1e:fb:42:38:3b:fe:4e:4b:56:06:e0:3f:b2:e4:a4:32:34:1a:
dd:14:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:18:11 2025 by rpki-client