Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: fujsiOThtxRKED6Lmw0wEUap+KSYW4WY5VC9KvBlym4=
Subject key identifier: AC:C7:16:DA:A4:E4:5F:21:FC:53:FF:B5:BF:D6:6D:D9:27:D8:64:56
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0D932C7AAF2B0BFC760053B3789CDEB24D67D9CD
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 29 Jun 2025 18:30:33 +0000
ROA not before: Sun 29 Jun 2025 18:25:33 +0000
ROA not after: Sun 28 Jun 2026 18:30:33 +0000
asID: 0
IP address blocks: 2a09:54c7:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:93:2c:7a:af:2b:0b:fc:76:00:53:b3:78:9c:de:b2:4d:67:d9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 29 18:25:33 2025 GMT
Not After : Jun 28 18:30:33 2026 GMT
Subject: CN=ACC716DAA4E45F21FC53FFB5BFD66DD927D86456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:ce:87:ff:f9:89:0a:66:b8:3e:57:38:4b:
da:00:b8:cc:2b:cb:73:e1:a3:03:17:89:29:09:3a:
be:8f:e2:5b:ca:19:55:f5:48:9f:76:9f:91:5a:39:
7f:6c:a3:a4:9e:3c:cc:f1:f4:11:23:a3:d1:72:f8:
27:8c:60:1b:66:e4:78:84:49:25:7b:2d:51:89:11:
4a:34:4c:b7:c1:7d:4f:d3:c1:e7:18:e4:d7:22:ce:
78:55:ca:60:61:64:3a:9a:f1:8a:7a:cc:fd:ff:48:
d5:3b:21:c1:15:8e:a1:45:43:e8:f4:d8:41:6e:f7:
07:ef:f8:25:80:22:d3:6e:48:2b:8e:c0:e4:9c:3e:
53:b4:93:bc:f2:29:c5:fc:94:de:43:81:1f:d7:a6:
db:0e:42:c6:66:55:c5:7f:43:2c:d4:2b:93:8e:a8:
dc:bb:24:3e:51:45:60:d7:65:4c:5e:42:d1:ad:de:
5a:d2:0e:c3:64:bc:27:f2:9c:3a:a6:4e:c0:8d:89:
b9:7a:37:53:90:07:df:f6:a5:f0:2a:ee:d0:f3:b7:
bd:bb:60:3b:9b:5a:7c:d8:33:69:57:ea:8a:14:cd:
0e:12:99:ee:36:70:51:03:a4:26:d5:6d:4d:45:aa:
a5:b1:98:b7:ae:ad:5a:20:37:32:9f:d2:6a:cc:2f:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:16:DA:A4:E4:5F:21:FC:53:FF:B5:BF:D6:6D:D9:27:D8:64:56
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:e7:aa:02:c1:a4:cb:91:d2:61:18:ba:af:b9:df:8e:84:cd:
18:fc:3b:9f:88:4c:ea:01:f1:15:97:09:c8:35:ef:03:5f:15:
ec:da:1d:78:0c:f6:bf:38:14:29:d7:00:3b:ba:b8:e5:8f:f7:
43:56:19:52:e7:7c:d4:aa:9c:5f:a8:69:7e:c0:5c:23:aa:cb:
03:03:9b:ef:0b:c5:4e:60:72:8e:96:1c:bb:1b:5a:38:52:bc:
f1:c2:ca:d4:f8:43:9c:10:0a:9b:50:0c:d7:81:ea:75:6c:d4:
c8:73:68:dd:96:28:9c:68:8c:ca:95:1a:b0:65:cf:e5:f1:a7:
86:53:8d:73:85:76:5f:0f:af:e2:c2:26:e5:41:3e:be:44:cb:
65:59:c6:ec:21:35:d8:34:a9:60:0e:c5:f1:fb:cf:57:52:39:
49:14:90:a2:19:aa:7f:97:dd:71:7a:b1:b7:11:34:f5:a9:33:
3d:fb:b6:3d:e6:a6:0d:c4:34:56:ff:e9:b7:bb:0d:9b:ad:1e:
1f:8a:e5:9b:f8:eb:2c:24:94:48:88:dd:bc:00:89:06:db:89:
8c:5c:5d:61:74:52:a4:5e:93:ba:13:7c:f6:87:14:d0:67:27:
c1:56:a2:b0:67:be:ea:99:1f:e8:af:cf:08:70:9c:59:bd:91:
7b:71:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:55:28 2025 by rpki-client