Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa
File: 326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa (raw, json)
Hash identifier: GEkeFzq1BUZUXr07U5oeBFiVxkvQislt7X9omrg4/pE=
Subject key identifier: 64:D7:70:53:F1:21:52:1E:88:DB:31:1B:0C:1D:17:8D:F2:05:86:86
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 7622C45A8EAFFDA09BBE42CED163847387DBCB6E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa
Signing time: Mon 30 Jun 2025 11:20:57 +0000
ROA not before: Mon 30 Jun 2025 11:15:57 +0000
ROA not after: Mon 29 Jun 2026 11:20:57 +0000
asID: 212112
IP address blocks: 2a09:54c7:2000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:22:c4:5a:8e:af:fd:a0:9b:be:42:ce:d1:63:84:73:87:db:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 11:15:57 2025 GMT
Not After : Jun 29 11:20:57 2026 GMT
Subject: CN=64D77053F121521E88DB311B0C1D178DF2058686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:5d:d7:f5:e7:de:15:e8:c1:e5:54:c3:2e:
59:0a:b9:c0:f4:e0:56:0b:8c:03:a1:79:84:bd:49:
90:7a:eb:e4:08:81:ea:31:fc:a9:88:79:6e:46:5b:
bb:23:8e:ed:20:5d:13:38:df:d3:8b:2e:41:54:6d:
e3:1e:e6:c3:8f:9e:a2:a3:e3:a6:3a:b1:8a:65:aa:
09:49:bf:32:f7:a1:35:15:10:09:81:7b:b7:b7:75:
b0:eb:4e:4a:1d:b2:5d:e4:6c:63:b5:69:a5:82:2f:
c6:4e:30:b1:df:65:b4:7a:82:db:f4:d6:2c:be:77:
d8:a7:56:83:07:1f:e1:29:24:ba:d6:38:73:59:a6:
9f:6e:37:74:89:a8:e1:b4:d5:a0:4f:56:df:bd:1d:
82:1e:c5:f4:a8:d8:fd:45:64:26:24:a8:07:39:2d:
f5:46:20:ce:b0:2b:92:cd:21:4b:ca:c9:d9:7d:0f:
54:a8:f6:a1:6f:d3:ef:47:7e:66:5c:28:30:49:92:
67:73:6f:60:18:4a:a6:b1:57:48:93:5f:c0:e1:5c:
ea:a7:c4:eb:ac:2a:23:3f:55:cc:dd:ef:cc:7d:2c:
37:a4:a3:04:7b:9d:60:1b:1c:ca:73:0b:85:cd:03:
5b:75:80:3d:9b:d4:a0:06:b9:a6:0c:de:35:4a:62:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:70:53:F1:21:52:1E:88:DB:31:1B:0C:1D:17:8D:F2:05:86:86
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a323030303a3a2f33362d3434203d3e20323132313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
57:0d:76:71:1b:74:30:13:af:8d:86:a2:00:ec:e7:ca:05:40:
e1:a6:48:e1:e1:bb:45:e0:09:da:3e:01:eb:07:70:27:eb:71:
6b:8d:78:04:3b:34:37:39:a4:80:68:26:83:9f:48:be:96:58:
a4:ea:10:6f:a0:e4:d9:11:fc:e3:3a:a7:7e:12:2b:12:8b:92:
89:7b:57:e6:33:08:9d:13:c6:cf:4a:d4:ee:a0:e5:75:f5:f7:
12:b0:1d:4e:1b:57:b4:dc:39:1d:d4:da:a8:b0:48:43:80:1e:
8a:60:a6:0a:4c:e7:d5:a6:db:b3:99:c8:c6:0e:3f:53:b2:b2:
a9:c3:c1:39:a6:1e:4b:d8:20:07:88:09:16:40:c7:30:a9:28:
f0:df:e2:6f:d8:9e:33:c7:fd:30:4b:ce:bb:b8:22:a3:e7:60:
39:20:4e:43:60:e8:8e:90:5b:c8:b8:b4:67:94:2a:7c:3b:d0:
7e:fc:76:19:9d:65:47:d0:09:c8:5c:1c:a4:ad:03:ba:3f:31:
92:57:d5:5b:ea:a4:d4:c2:44:4c:0b:6d:50:83:b9:29:df:a6:
04:3e:cc:53:f7:cd:c4:cd:05:b3:49:2e:b1:de:f6:67:41:06:
49:5f:b5:13:07:fb:69:45:78:c8:39:8e:18:40:65:58:47:1a:
6d:0e:8e:42
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUdiLEWo6v/aCbvkLO0WOEc4fby24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxMTE1NTdaFw0yNjA2MjkxMTIwNTdaMDMxMTAvBgNV
BAMTKDY0RDc3MDUzRjEyMTUyMUU4OERCMzExQjBDMUQxNzhERjIwNTg2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7713X9efeFejB5VTDLlkKucD0
4FYLjAOheYS9SZB66+QIgeox/KmIeW5GW7sjju0gXRM439OLLkFUbeMe5sOPnqKj
46Y6sYplqglJvzL3oTUVEAmBe7e3dbDrTkodsl3kbGO1aaWCL8ZOMLHfZbR6gtv0
1iy+d9inVoMHH+EpJLrWOHNZpp9uN3SJqOG01aBPVt+9HYIexfSo2P1FZCYkqAc5
LfVGIM6wK5LNIUvKydl9D1So9qFv0+9HfmZcKDBJkmdzb2AYSqaxV0iTX8DhXOqn
xOusKiM/Vczd78x9LDekowR7nWAbHMpzC4XNA1t1gD2b1KAGuaYM3jVKYlZFAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUZNdwU/EhUh6I2zEbDB0XjfIFhoYwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM3
M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzMjMxMzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoJVMcgMA0GCSqGSIb3DQEBCwUAA4IBAQBXDXZxG3QwE6+NhqIA
7OfKBUDhpkjh4btF4AnaPgHrB3An63FrjXgEOzQ3OaSAaCaDn0i+llik6hBvoOTZ
EfzjOqd+EisSi5KJe1fmMwidE8bPStTuoOV19fcSsB1OG1e03Dkd1NqosEhDgB6K
YKYKTOfVptuzmcjGDj9TsrKpw8E5ph5L2CAHiAkWQMcwqSjw3+Jv2J4zx/0wS867
uCKj52A5IE5DYOiOkFvIuLRnlCp8O9B+/HYZnWVH0AnIXBykrQO6PzGSV9Vb6qTU
wkRMC21Qg7kp36YEPsxT983EzQWzSS6x3vZnQQZJX7UTB/tpRXjIOY4YQGVYRxpt
Do5C
-----END CERTIFICATE-----
Generated at Fri Jul 25 03:56:47 2025 by rpki-client