Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3434203d3e20323136323630.roa
File: 326130393a353463373a333030303a3a2f33362d3434203d3e20323136323630.roa (raw, json)
Hash identifier: FiaHcXnlDkLBcDaH+j0aGQot5U9UApSLLCi8RejEVhM=
Subject key identifier: 6C:E9:2C:BC:2F:8B:09:3C:E8:9A:CB:BC:31:24:9C:0C:9B:ED:AB:A3
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 7DC9C0D8018ECBCB188C64A305E1BEA7A9BA67E4
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3434203d3e20323136323630.roa
Signing time: Mon 30 Jun 2025 14:08:16 +0000
ROA not before: Mon 30 Jun 2025 14:03:16 +0000
ROA not after: Mon 29 Jun 2026 14:08:16 +0000
asID: 216260
IP address blocks: 2a09:54c7:3000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c9:c0:d8:01:8e:cb:cb:18:8c:64:a3:05:e1:be:a7:a9:ba:67:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:03:16 2025 GMT
Not After : Jun 29 14:08:16 2026 GMT
Subject: CN=6CE92CBC2F8B093CE89ACBBC31249C0C9BEDABA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:3e:91:6d:e5:2c:73:98:bd:85:19:03:d9:
3f:f2:c7:1c:9f:84:4a:8c:2b:cc:44:4f:c9:a7:1d:
05:6d:92:05:12:24:ae:87:03:29:02:a1:54:7d:17:
8c:67:42:29:d8:92:c4:b7:b7:9c:fd:3b:99:de:e4:
a0:97:15:b8:91:6b:3c:ea:a7:a9:c6:6e:e2:e2:6b:
07:61:fc:d8:47:8d:a4:73:c4:4e:ba:87:91:7b:a5:
ef:2d:a3:52:40:d9:9d:17:30:02:3f:9c:18:af:55:
70:62:af:0f:6b:8a:cc:7c:23:30:55:f9:19:cc:6f:
6a:f6:7a:f0:92:47:84:34:a6:36:41:1b:74:77:08:
f1:52:c0:42:a7:62:8a:49:98:69:d9:53:c9:e6:1e:
80:5b:f6:43:51:8b:c9:69:2e:4d:3a:e0:34:a0:c6:
8e:9c:1b:60:4a:45:97:b0:36:c6:d0:d5:14:69:14:
1e:75:02:e2:07:10:78:d3:78:ec:06:98:fe:6f:e6:
3f:fd:b0:58:30:6a:ab:b4:96:96:5e:cd:e1:3a:60:
19:1d:75:b8:27:16:38:53:eb:3c:fa:e3:03:d8:19:
db:f9:a8:47:53:46:c1:a8:09:2e:b7:53:b2:2c:3c:
57:ef:46:2e:0e:74:38:73:90:88:58:30:70:25:ce:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:2C:BC:2F:8B:09:3C:E8:9A:CB:BC:31:24:9C:0C:9B:ED:AB:A3
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a333030303a3a2f33362d3434203d3e20323136323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
bb:6f:d3:38:f6:d5:72:3f:54:21:73:e9:90:ec:92:2a:6a:fa:
4c:e8:86:d3:c0:4a:05:d0:4e:81:2e:e6:43:97:58:d7:a4:32:
cb:cc:60:a2:e2:e6:2b:40:f7:16:27:69:d2:ad:51:c3:06:70:
2e:8a:5f:cc:f6:35:78:e0:9a:cf:c8:4e:63:ce:4a:37:0c:0c:
c4:01:7f:66:89:94:78:95:50:3a:46:a8:5f:08:c7:c5:64:03:
eb:d1:72:f0:c3:49:f6:fa:6b:1c:93:9b:9c:a0:32:bc:9e:ff:
3c:e8:9d:a8:12:58:39:fc:e5:d7:aa:88:78:36:0b:ce:77:42:
da:1c:2a:a5:22:52:2f:06:f2:5d:73:d4:fc:03:46:42:e7:a7:
b8:71:3d:e1:51:d6:33:97:06:21:fe:e3:66:74:23:56:4e:38:
4d:ff:f5:94:7c:1e:68:23:e4:e6:14:5f:ee:b1:c5:70:87:4a:
5d:5b:87:b0:d9:ed:54:73:86:39:98:1a:5b:bf:25:73:2f:af:
eb:d3:45:c5:d8:97:9f:75:d2:7a:6e:99:ae:1c:6c:f3:45:fb:
ae:ae:12:d2:ca:0f:41:a0:25:4d:ee:51:71:ef:72:18:b6:73:
2c:6c:9f:cb:71:db:0c:39:31:9d:c7:e0:69:48:ab:c1:bc:f3:
1f:2d:eb:a3
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUfcnA2AGOy8sYjGSjBeG+p6m6Z+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDAzMTZaFw0yNjA2MjkxNDA4MTZaMDMxMTAvBgNV
BAMTKDZDRTkyQ0JDMkY4QjA5M0NFODlBQ0JCQzMxMjQ5QzBDOUJFREFCQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMWj6RbeUsc5i9hRkD2T/yxxyf
hEqMK8xET8mnHQVtkgUSJK6HAykCoVR9F4xnQinYksS3t5z9O5ne5KCXFbiRazzq
p6nGbuLiawdh/NhHjaRzxE66h5F7pe8to1JA2Z0XMAI/nBivVXBirw9risx8IzBV
+RnMb2r2evCSR4Q0pjZBG3R3CPFSwEKnYopJmGnZU8nmHoBb9kNRi8lpLk064DSg
xo6cG2BKRZewNsbQ1RRpFB51AuIHEHjTeOwGmP5v5j/9sFgwaqu0lpZezeE6YBkd
dbgnFjhT6zz64wPYGdv5qEdTRsGoCS63U7IsPFfvRi4OdDhzkIhYMHAlzoVHAgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUbOksvC+LCTzomsu8MSScDJvtq6MwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM3
M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDM0MzQyMDNkM2UyMDMyMzEzNjMyMzYzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoJVMcwMA0GCSqGSIb3DQEBCwUAA4IBAQC7b9M49tVyP1Qhc+mQ
7JIqavpM6IbTwEoF0E6BLuZDl1jXpDLLzGCi4uYrQPcWJ2nSrVHDBnAuil/M9jV4
4JrPyE5jzko3DAzEAX9miZR4lVA6RqhfCMfFZAPr0XLww0n2+msck5ucoDK8nv88
6J2oElg5/OXXqoh4NgvOd0LaHCqlIlIvBvJdc9T8A0ZC56e4cT3hUdYzlwYh/uNm
dCNWTjhN//WUfB5oI+TmFF/uscVwh0pdW4ew2e1Uc4Y5mBpbvyVzL6/r00XF2Jef
ddJ6bpmuHGzzRfuurhLSyg9BoCVN7lFx73IYtnMsbJ/LcdsMOTGdx+BpSKvBvPMf
Leuj
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:11 2025 by rpki-client