Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3434203d3e20323133383634.roa
File: 326130393a353463373a343030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier: EFqicSg94nd6ATXXm/YdB+FyCcemx19D/U6Go3loZzM=
Subject key identifier: 5C:62:EA:24:B5:6C:2F:8E:D2:94:37:4E:B7:82:A1:B3:64:57:B6:10
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 14C626BDCD7B8387184CF337DEBB6B9396E5921D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3434203d3e20323133383634.roa
Signing time: Mon 30 Jun 2025 12:07:34 +0000
ROA not before: Mon 30 Jun 2025 12:02:34 +0000
ROA not after: Mon 29 Jun 2026 12:07:34 +0000
asID: 213864
IP address blocks: 2a09:54c7:4000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c6:26:bd:cd:7b:83:87:18:4c:f3:37:de:bb:6b:93:96:e5:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 12:02:34 2025 GMT
Not After : Jun 29 12:07:34 2026 GMT
Subject: CN=5C62EA24B56C2F8ED294374EB782A1B36457B610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:0f:c6:0e:50:29:8c:86:f6:6d:fe:63:d7:
da:52:11:25:c5:7c:34:4b:8e:06:e1:18:24:aa:83:
f7:46:04:b9:ca:e9:2d:82:9f:fc:56:ed:46:68:23:
b3:6a:fd:d1:04:85:b6:34:a1:53:35:a0:4c:3f:03:
55:a2:a8:d4:c5:a0:14:db:8d:03:de:ce:da:dd:70:
bc:ba:c1:3d:0c:d8:1a:3d:59:c8:73:ad:88:5a:c4:
57:4c:0d:94:25:d7:09:b0:e2:d2:f7:cb:4f:7e:19:
da:f2:c9:42:fb:cb:20:22:7c:83:8b:9d:48:f9:28:
1d:15:92:b1:bf:23:f2:d2:3f:69:ec:58:46:60:42:
a1:45:3d:db:61:cf:4d:07:a6:af:ef:2f:e3:99:da:
ba:19:21:ab:63:ab:79:49:bf:4e:42:12:87:f3:c7:
06:5e:a3:d0:f8:2d:42:11:55:d0:a2:c5:de:6b:ff:
05:02:5b:dc:8f:c8:92:6c:81:e1:d8:48:2c:ba:8a:
79:28:13:af:85:58:09:af:67:4e:7a:4b:7e:b2:37:
26:40:10:03:19:55:9c:31:c5:53:5b:68:17:01:7e:
da:cd:c0:1c:14:ff:47:b8:88:c8:ba:e7:9e:72:0e:
d7:6d:49:73:f1:3b:7b:73:b6:32:88:a5:a9:ad:c6:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:62:EA:24:B5:6C:2F:8E:D2:94:37:4E:B7:82:A1:B3:64:57:B6:10
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a343030303a3a2f33362d3434203d3e20323133383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
14:13:1e:01:68:13:12:ca:f6:02:6d:5d:e4:f4:60:46:da:a4:
29:8d:51:a5:6d:17:df:1a:a2:b5:58:ab:ac:e7:8c:24:4b:80:
20:26:3d:1c:57:64:78:8b:7d:d0:5f:f2:75:3e:91:0a:fc:1f:
3a:0a:c6:d5:fb:16:f9:f1:31:bc:a1:df:07:d7:b4:e5:fc:c0:
e5:bc:82:26:d4:88:83:39:4d:07:a3:e6:3e:24:e2:c3:24:f5:
d9:a1:2e:45:c1:9f:ea:98:23:73:5f:d1:9d:d5:73:01:03:8c:
f9:73:fd:b9:da:c1:fd:cb:61:31:e9:d4:ef:dc:59:a1:53:32:
9f:f1:4c:ab:53:21:f3:87:c2:b9:39:c9:1f:ac:a0:ae:e8:05:
84:a9:64:c2:0b:c9:52:1a:c2:e8:c3:da:36:68:f7:46:8f:3f:
93:f0:1c:d4:d9:84:57:b1:ad:3a:55:69:34:1b:da:21:5d:e2:
87:51:ae:b7:5d:76:08:53:10:cc:d2:22:62:31:08:10:22:fd:
5e:0f:af:83:21:9d:bb:5f:ee:34:f2:60:35:53:76:fb:7e:29:
af:a5:15:d1:26:d4:69:32:06:b8:65:a4:df:ea:0b:e2:51:cf:
d7:d9:21:5a:18:33:ea:97:da:e9:58:fd:8a:36:0f:fe:4e:d8:
0c:23:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:27 2025 by rpki-client