Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
File: 326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa (raw, json)
Hash identifier: pXOm4rd0R8Ae/EK1NYwWSZYxQfjqlYK+FvwSaRNqqYM=
Subject key identifier: C8:1F:64:02:11:F0:0F:11:E7:52:32:58:80:30:CB:42:28:E7:63:EB
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 1B4DAA95BE8FFD040277B332552D583831777393
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
Signing time: Thu 26 Jun 2025 21:05:12 +0000
ROA not before: Thu 26 Jun 2025 21:00:12 +0000
ROA not after: Thu 25 Jun 2026 21:05:12 +0000
asID: 214223
IP address blocks: 2a0a:6044:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4d:aa:95:be:8f:fd:04:02:77:b3:32:55:2d:58:38:31:77:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 26 21:00:12 2025 GMT
Not After : Jun 25 21:05:12 2026 GMT
Subject: CN=C81F640211F00F11E75232588030CB4228E763EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:5a:8c:15:33:69:93:cd:c1:03:01:4c:88:
f4:4f:9f:77:54:0f:0d:9b:ea:57:31:1e:b2:8b:f7:
78:ec:76:c3:92:5a:dc:7a:16:d2:12:07:93:4e:34:
8f:d8:1d:0d:78:92:21:86:00:b8:f3:e2:d0:37:e6:
48:e6:df:84:5c:22:b4:9c:09:c6:ff:51:43:c0:5d:
57:0f:11:a2:f6:63:b7:ae:9b:7b:2b:6e:6c:73:6e:
bb:23:54:f4:4c:f3:4c:a0:dd:26:be:9b:18:63:7b:
3e:a5:16:39:4d:e7:b3:5d:df:91:d3:8a:f1:ba:c1:
3c:96:d1:7a:bc:b2:32:78:a2:56:77:2a:8b:b4:7f:
1c:2a:fe:8f:4e:08:d0:2b:30:bc:a6:19:f7:e7:a9:
da:62:61:4c:4a:b0:51:a7:51:6b:f4:7e:77:54:64:
c3:f4:7e:ba:27:63:70:41:f4:26:9b:80:ad:c0:b1:
b7:1b:d1:6f:79:e0:a0:11:2f:c1:71:7f:e4:d8:27:
e1:9f:fc:28:4e:37:39:0c:24:15:7b:ab:89:24:ad:
86:9e:38:75:df:3b:98:8a:93:7b:31:d5:7a:ab:09:
0d:5e:87:69:38:1e:51:b0:c8:a0:7a:f0:b8:31:2c:
66:f1:59:42:57:dc:18:43:72:55:70:dd:13:b8:d3:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:64:02:11:F0:0F:11:E7:52:32:58:80:30:CB:42:28:E7:63:EB
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6400::/40
Signature Algorithm: sha256WithRSAEncryption
64:78:73:80:48:e0:23:a6:94:1d:2a:91:40:ff:6d:8e:cc:e9:
f8:16:69:26:4c:96:82:fa:c1:e1:6c:e6:39:6a:fd:3d:6e:b4:
75:d7:1c:25:26:96:f6:ec:43:49:d1:11:a5:bc:a9:cc:44:fc:
47:02:30:a2:d8:50:ee:c9:9e:81:29:5b:d2:e3:88:4c:8d:1d:
76:91:9a:2b:0e:54:55:67:a5:fd:d2:3c:67:86:16:06:fd:74:
89:d2:2d:4f:0b:ff:70:5a:9a:e8:37:50:b6:7c:0f:10:4e:ec:
d1:33:d4:35:37:e3:cd:d4:ad:eb:f2:03:50:95:20:66:81:d7:
03:ff:82:db:0e:52:df:51:9d:f9:e5:4b:9e:4e:77:ae:9a:ec:
23:d7:03:a2:b6:11:e1:6b:87:08:e1:e1:f7:59:ff:65:0d:e3:
57:3a:f0:3f:f1:71:9c:25:e0:62:da:d2:8e:b6:ff:11:af:21:
92:1a:e9:ef:61:27:f0:2b:9e:90:c7:78:e6:56:d0:d5:d3:5c:
aa:a3:a7:45:62:ff:85:61:aa:8c:50:30:b3:59:f3:e1:a5:ff:
ac:20:cc:0a:e2:78:37:1f:7c:d9:41:a3:64:26:d2:a8:60:04:
39:b8:30:8b:6c:d4:2a:34:ef:52:11:19:36:49:a3:41:79:63:
ea:8e:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:55:28 2025 by rpki-client