Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203134363138.roa
File: 326130613a363034343a616363303a3a2f34342d3438203d3e203134363138.roa (raw, json)
Hash identifier: NkkIpH6GMybIer0ETl2aFClV3uwzH8tyqnOWnhOBYP4=
Subject key identifier: 05:18:C6:9C:D5:78:0B:83:EB:A4:36:EA:A0:4D:DF:A0:77:F4:32:29
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 75AB1E947E2720BE687202388D9844279632A77E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203134363138.roa
Signing time: Fri 06 Jun 2025 12:33:56 +0000
ROA not before: Fri 06 Jun 2025 12:28:56 +0000
ROA not after: Fri 05 Jun 2026 12:33:56 +0000
asID: 14618
IP address blocks: 2a0a:6044:acc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ab:1e:94:7e:27:20:be:68:72:02:38:8d:98:44:27:96:32:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 6 12:28:56 2025 GMT
Not After : Jun 5 12:33:56 2026 GMT
Subject: CN=0518C69CD5780B83EBA436EAA04DDFA077F43229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:3a:f6:1b:11:85:7c:af:96:fc:29:fa:5c:
44:e1:ae:ac:71:5b:38:82:04:0a:20:19:18:dd:48:
9b:d5:2d:f3:2d:46:e2:fb:74:9d:e7:a8:77:6e:0e:
9f:ff:79:98:83:7a:9c:bf:df:fb:3d:a4:73:db:9b:
e2:7c:45:ae:1a:67:55:c5:24:8a:10:58:3d:b3:f7:
14:70:71:15:9e:16:6e:d8:1d:79:e7:8a:93:91:1d:
24:0f:16:c1:1e:7e:12:e4:39:f5:5b:a7:e6:39:24:
71:2f:ac:99:f0:d6:9a:f6:bd:49:14:65:86:a4:8d:
b6:24:60:7a:be:4f:76:76:76:68:1c:f4:5d:cf:dd:
06:e7:83:27:11:39:5a:8b:30:aa:d6:fd:a1:95:c5:
1f:1c:0b:08:4b:d8:62:6e:6f:64:ef:7c:73:45:aa:
31:b5:06:25:cb:57:fd:68:d1:ae:22:dc:1e:43:b9:
18:a6:49:d2:92:72:ce:0e:53:39:4f:28:68:f3:91:
e6:9f:45:74:79:48:b6:0f:90:1d:fd:d9:5d:47:d6:
5b:ab:8e:ce:98:33:40:fb:75:6e:9a:32:cf:cb:62:
66:cd:8f:9a:e2:6c:b6:b5:1f:b3:df:11:fc:da:cb:
ee:19:9d:d5:9b:f0:36:a8:77:99:db:ba:18:0c:f5:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:C6:9C:D5:78:0B:83:EB:A4:36:EA:A0:4D:DF:A0:77:F4:32:29
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:acc0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:16:da:fe:f4:7a:bd:6c:22:7a:5d:e7:d5:2d:11:a8:e7:0f:
69:0e:48:3a:58:ee:e9:a8:0e:67:bf:40:58:d8:f4:ab:2e:45:
42:c1:63:83:ed:fa:98:a0:fc:be:9a:e3:c3:62:8d:89:f2:19:
3a:61:ea:3a:cc:13:33:b0:c3:05:c9:b3:48:b7:51:34:23:1e:
08:74:45:ad:92:ed:b9:88:04:28:bd:92:8a:35:c9:8d:fb:ce:
84:38:62:1c:22:34:63:70:0d:6a:b4:d3:23:fb:68:d5:7b:f4:
8a:ec:0e:0c:36:20:49:ce:92:19:2a:20:d5:45:9d:5f:93:ab:
d1:ec:5a:70:3b:ea:29:52:7a:e6:5b:dd:3c:08:fe:b4:d8:63:
fc:51:2d:18:f2:d9:21:d5:89:38:63:0d:96:e0:4a:62:b6:c3:
4a:8d:eb:09:5d:17:57:a7:94:09:57:3a:39:67:08:8f:fa:4e:
30:d0:af:b2:e0:ec:96:af:bd:ff:a0:cf:ab:b2:95:c2:71:54:
00:6c:47:84:21:53:88:f5:04:91:c3:3e:65:1a:bf:42:c3:2f:
42:b4:f7:d6:8d:57:e3:bd:d4:22:c7:f4:3c:7f:4e:ca:2a:94:
53:b5:a4:8b:93:bc:53:72:da:d4:af:dc:8f:a9:ce:cf:ab:f1:
93:20:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:19 2025 by rpki-client