Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3336203d3e2030.roa
File: 326130393a353463373a363030303a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier: qTKZdpJwzsbaHCs2VZSCg4Dh+Bb1Hw6L7DLlsSt70LU=
Subject key identifier: 9A:8E:7B:18:BF:45:DE:18:F2:80:32:03:67:03:FA:25:D7:BC:3B:2A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4AE807D12DF7CAEBE4F068D276E5CBAD8A4BC3F2
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3336203d3e2030.roa
Signing time: Sun 29 Jun 2025 18:35:34 +0000
ROA not before: Sun 29 Jun 2025 18:30:34 +0000
ROA not after: Sun 28 Jun 2026 18:35:34 +0000
asID: 0
IP address blocks: 2a09:54c7:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e8:07:d1:2d:f7:ca:eb:e4:f0:68:d2:76:e5:cb:ad:8a:4b:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 29 18:30:34 2025 GMT
Not After : Jun 28 18:35:34 2026 GMT
Subject: CN=9A8E7B18BF45DE18F28032036703FA25D7BC3B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:e6:96:90:5c:b9:3b:01:27:51:da:6e:2b:
98:55:29:66:9c:7a:ac:13:b2:61:56:30:f0:c3:c5:
c6:2f:65:22:69:c2:3b:7a:d0:82:96:86:70:cd:5b:
41:6e:ae:74:29:22:4b:da:69:04:14:29:a3:8b:b6:
c1:7d:74:87:d3:d2:f0:db:88:93:04:cf:5f:2b:ed:
d4:a9:02:8d:96:40:62:02:6a:56:58:cd:6f:ca:06:
cd:e9:c8:dd:8b:54:4c:cb:6d:c2:2e:99:8a:86:da:
a0:3f:74:45:f6:12:6f:cf:fc:be:e8:53:00:ab:ae:
28:64:08:b7:d8:c3:3f:f5:0c:63:cb:ab:97:62:6c:
bd:12:ba:0f:3f:f3:0a:c4:68:39:1f:6a:c3:0a:34:
ea:c9:cd:de:76:3d:bb:53:67:e8:56:00:50:1a:5e:
97:60:c9:51:19:e0:fe:59:60:6b:03:6e:59:63:2d:
b9:e3:e4:2b:b8:86:26:aa:e7:10:7f:79:32:6a:a5:
1b:0d:65:aa:a8:47:69:5e:f0:ad:51:34:d9:8d:00:
f2:26:d4:1d:09:3e:a0:11:2d:fa:9c:a6:db:08:e5:
93:69:94:77:94:26:bd:58:0e:c4:e7:9f:83:67:17:
be:84:3e:73:2a:1f:38:9f:89:78:c4:d5:5a:ac:1a:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8E:7B:18:BF:45:DE:18:F2:80:32:03:67:03:FA:25:D7:BC:3B:2A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3336203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
24:ce:17:ec:b2:1d:e0:a1:75:96:2b:e7:0f:59:d0:c8:48:e0:
f7:3f:31:04:23:f0:ae:0a:ff:f6:25:cb:08:79:2b:48:9d:3d:
b6:4f:74:bf:23:f2:cc:18:cd:7c:4c:2e:7a:06:5d:a2:03:d1:
2a:0e:21:ef:b7:43:41:35:93:89:0f:1b:c4:58:ae:8b:1f:51:
c9:12:20:3e:b4:d1:04:69:e9:99:44:4e:d3:b6:d4:49:1a:99:
b5:23:74:e4:3c:20:26:07:8c:20:28:01:91:9e:bd:ab:c5:26:
10:65:44:4d:55:1d:00:56:e8:2b:18:a5:c2:31:eb:d8:6a:68:
52:70:29:67:50:ff:b9:2e:03:c6:87:42:1f:0a:61:5b:90:67:
1f:31:92:51:87:2b:f1:ae:56:36:2f:f2:dd:cb:94:de:9f:a3:
48:e8:a8:db:33:8b:e1:ce:0b:18:0d:be:97:fb:78:bf:2e:7b:
7d:4b:20:96:26:49:70:dc:5a:f4:cc:f7:d1:56:eb:03:96:40:
72:66:91:72:81:95:87:ce:6d:2c:98:4b:9a:cf:4e:01:b0:13:
c0:f1:6d:5b:b8:76:f4:a9:21:3c:20:eb:2c:1a:46:fc:71:e9:
6e:0a:89:62:c5:5c:39:77:2c:88:30:3d:e6:ab:8c:e9:a8:a2:
a5:58:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:55:24 2025 by rpki-client