Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3434203d3e20323133383634.roa
File: 326130393a353463373a363030303a3a2f33362d3434203d3e20323133383634.roa (raw, json)
Hash identifier: a8sS9azTYd2dYQe2x7np/TStoXrgLdWuNnt0El2XRE4=
Subject key identifier: C9:02:AB:95:3A:0D:28:D2:DE:90:8F:A0:4E:29:E5:22:19:AA:1D:DC
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 46743F720B83A2A5B39483484C5B964D6EC26AFE
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3434203d3e20323133383634.roa
Signing time: Mon 30 Jun 2025 12:12:31 +0000
ROA not before: Mon 30 Jun 2025 12:07:31 +0000
ROA not after: Mon 29 Jun 2026 12:12:31 +0000
asID: 213864
IP address blocks: 2a09:54c7:6000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:74:3f:72:0b:83:a2:a5:b3:94:83:48:4c:5b:96:4d:6e:c2:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 12:07:31 2025 GMT
Not After : Jun 29 12:12:31 2026 GMT
Subject: CN=C902AB953A0D28D2DE908FA04E29E52219AA1DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:30:c5:94:14:5b:e3:7e:e7:01:cb:f9:5f:
8e:3d:84:c1:9a:e1:56:31:c9:ea:56:c7:f4:38:22:
eb:06:b8:c7:1d:d0:c4:99:64:f6:1c:20:db:eb:31:
d2:0e:a1:86:d6:45:07:df:8b:2a:ef:89:66:81:d5:
e8:8d:96:b4:dc:95:65:71:53:b4:55:6c:c3:5f:1d:
63:3a:06:17:0a:c7:fc:6d:8b:f2:2e:c2:3b:7a:ae:
b6:6e:98:24:af:31:83:3d:1a:99:94:a2:2c:47:cb:
81:77:20:48:96:23:10:b4:aa:64:68:a3:2c:58:54:
35:47:49:97:65:a2:61:34:d8:cc:83:c2:ff:27:c8:
a1:07:99:30:b9:03:22:bf:58:cc:49:e7:4c:f5:fc:
cc:c2:27:14:38:60:17:87:18:85:1d:a7:fa:e4:d3:
a3:b1:7b:f1:ac:26:14:67:53:ae:8e:e1:49:19:34:
7f:eb:59:a9:cf:ef:db:da:3f:64:1b:51:85:7c:7d:
91:52:eb:b6:0a:10:22:d9:98:b8:89:98:8a:b4:ce:
a9:69:19:40:48:47:a0:d7:ef:e6:38:e8:8c:79:dc:
b8:22:64:c7:5f:76:b7:d9:3d:28:65:3b:31:d3:6b:
14:99:a5:d2:e1:ee:8c:73:ac:87:53:7e:1a:d0:72:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:AB:95:3A:0D:28:D2:DE:90:8F:A0:4E:29:E5:22:19:AA:1D:DC
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a363030303a3a2f33362d3434203d3e20323133383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
41:b1:cc:34:45:d8:54:1d:68:a9:12:e6:36:30:3e:98:27:35:
95:24:ab:6c:ac:b5:f3:11:93:4f:66:4c:f4:bd:1d:ab:8f:b9:
af:e0:48:f7:d5:f4:1b:b2:ed:f9:eb:36:fa:2d:74:11:3f:0d:
58:c1:aa:0c:11:59:ad:bc:2d:60:dc:6e:52:3a:c3:2b:af:a9:
90:48:d9:7b:ce:74:3c:49:6e:f1:8c:40:67:fe:04:12:df:1f:
ba:30:95:2c:f8:a3:47:ec:1a:e9:86:67:63:0e:c3:b1:41:66:
ac:3a:9c:21:46:0b:12:95:17:00:ec:ea:95:0d:68:58:b9:c7:
4d:24:08:00:05:af:89:b5:6e:9c:34:5e:2c:78:8d:9a:ab:00:
47:c6:23:30:3a:45:1d:7c:98:5a:4b:53:de:36:41:21:c1:64:
5b:b6:80:a7:71:24:c1:d0:f0:19:5e:67:19:2a:dd:5f:03:bf:
70:6e:1f:ac:fe:a3:8f:af:2f:cc:89:82:74:b5:4b:94:2e:a0:
70:b2:0c:a3:b2:1d:0c:a4:be:27:0b:a2:65:a9:dc:f0:39:78:
23:39:b1:b1:32:aa:72:25:a1:cd:df:f9:3a:d1:7a:f5:de:76:
07:b8:f4:37:54:ab:b3:57:2b:18:1a:6f:0b:83:2f:7b:ae:77:
f5:5e:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:22 2025 by rpki-client