Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: uaGvh5y6g/n+IajvLm269FFtcZlT+XLpi3Tf9SMjs1E=
Subject key identifier: 3B:43:76:85:E2:41:F6:3B:52:C5:B3:AE:67:E5:26:F5:15:D6:EE:CB
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3EC6FD54638DE7E36022BF1C4050C99A99F2B83E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 29 Jun 2025 18:34:06 +0000
ROA not before: Sun 29 Jun 2025 18:29:06 +0000
ROA not after: Sun 28 Jun 2026 18:34:06 +0000
asID: 0
IP address blocks: 2a09:54c7:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c6:fd:54:63:8d:e7:e3:60:22:bf:1c:40:50:c9:9a:99:f2:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 29 18:29:06 2025 GMT
Not After : Jun 28 18:34:06 2026 GMT
Subject: CN=3B437685E241F63B52C5B3AE67E526F515D6EECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:b4:ab:b0:88:09:3d:a5:3e:38:d7:5c:08:
f0:7b:4b:96:89:a0:e7:a1:87:9b:70:f7:44:87:4e:
75:03:68:5c:53:27:48:69:45:5b:d1:9c:a6:f0:88:
0f:a2:c3:5b:16:fc:19:89:03:fe:85:51:d5:10:74:
03:cf:8b:e0:aa:3a:18:b7:13:9e:b1:a6:b1:4d:49:
23:31:b8:e4:ed:f3:27:85:ba:c0:94:04:d6:94:1c:
0b:7f:33:92:7b:28:bd:18:d0:fe:2a:7d:79:c8:75:
bc:42:6b:e5:75:7e:40:ed:d1:8b:5e:ea:f7:7a:7f:
ed:2e:25:e2:3b:1e:12:fe:56:a4:36:5a:5e:48:8e:
bc:67:37:87:18:16:1c:8d:a4:13:10:02:73:11:40:
a2:f6:58:8e:52:bb:2d:9b:f8:24:91:71:14:90:f3:
04:0a:6e:3d:a9:4e:3d:2b:6b:33:7e:4d:74:24:8b:
ff:9f:77:f9:11:d2:92:6f:ee:3f:cb:2e:20:ba:ca:
26:d5:66:cc:9d:b5:72:3c:53:d3:cd:75:a3:92:fb:
50:d3:01:6f:99:5a:9f:13:3f:7b:91:88:6e:71:07:
95:33:22:5b:8d:59:48:88:f8:f8:a9:5b:8d:16:66:
a8:30:44:9b:e2:4e:f2:c9:ef:80:eb:98:cf:73:42:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:76:85:E2:41:F6:3B:52:C5:B3:AE:67:E5:26:F5:15:D6:EE:CB
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
81:f0:bc:7f:fe:70:e1:5e:d3:00:bf:48:90:74:6c:7d:9f:b9:
d0:33:f9:0a:63:85:2a:90:8c:7e:98:1e:99:0f:3d:2a:04:6a:
7f:e1:c7:86:2d:6e:bc:19:1d:43:6a:18:3e:a8:b6:5d:71:da:
b1:f5:6f:51:58:a3:f8:6f:ef:b7:cf:a0:02:67:32:4b:ea:39:
48:bf:97:ef:b7:a2:6d:61:15:60:67:4f:20:b4:de:7c:05:61:
25:20:e9:55:8a:75:a4:f1:1b:eb:14:67:22:b7:c3:dc:70:ac:
49:f4:d5:b9:7d:0f:d9:93:2b:e5:eb:d8:f7:c8:73:e5:4f:f9:
30:7c:6b:c7:da:ef:cf:d5:0f:45:6d:7a:5b:ea:76:e1:e1:25:
6c:96:aa:d5:48:d6:d5:ab:81:d4:07:68:e0:79:f3:09:85:72:
cc:63:a1:03:30:c9:bf:6a:20:44:b2:6f:37:89:0d:4b:d4:c7:
22:ff:00:ef:82:f1:58:bc:53:c2:f5:67:8e:06:c0:c7:8e:28:
06:e1:93:32:79:5e:85:85:8a:fe:f8:78:06:11:fd:c2:e9:a6:
a2:8c:38:56:d9:aa:73:64:f2:9b:57:ee:e8:3b:c2:8f:90:bf:
13:24:42:f2:cf:54:69:55:f9:fd:49:d5:86:f6:44:eb:90:4b:
03:79:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:55:24 2025 by rpki-client