Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203136353039.roa
File: 326130613a363034343a616363303a3a2f34342d3438203d3e203136353039.roa (raw, json)
Hash identifier: gkWmNxcgyNnsNfsBYSgS/8GzwKRzcEKGXOty5YAgIiI=
Subject key identifier: 24:82:13:CF:9E:FD:D8:DA:AD:B8:F5:D2:D0:9B:CD:A5:FE:03:B1:2C
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4CB9493ECFF161FBC4178430ED14247523CE262B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203136353039.roa
Signing time: Fri 06 Jun 2025 12:33:41 +0000
ROA not before: Fri 06 Jun 2025 12:28:41 +0000
ROA not after: Fri 05 Jun 2026 12:33:41 +0000
asID: 16509
IP address blocks: 2a0a:6044:acc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b9:49:3e:cf:f1:61:fb:c4:17:84:30:ed:14:24:75:23:ce:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 6 12:28:41 2025 GMT
Not After : Jun 5 12:33:41 2026 GMT
Subject: CN=248213CF9EFDD8DAADB8F5D2D09BCDA5FE03B12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:11:2a:48:4f:41:1a:f9:1e:61:af:ad:9e:
00:fa:ff:21:2a:2a:b7:54:a5:48:2c:72:6c:bc:23:
75:84:a7:21:a7:e1:55:ea:1f:75:58:08:eb:61:13:
d7:44:b9:bc:04:1f:1e:56:c4:db:ce:99:01:cc:d4:
93:66:55:35:65:f6:09:c9:9b:17:e7:44:a1:1f:ac:
7e:c1:49:42:64:c3:80:8c:c1:c1:5d:ee:c9:d3:64:
16:bd:91:01:df:d2:2a:94:b1:39:9d:03:78:6d:5a:
8d:a0:83:71:9e:77:38:bc:ad:fa:a3:8e:f0:f6:de:
6a:11:1a:6d:82:f1:e1:6a:f1:1d:2b:13:f8:8b:94:
92:51:30:ba:23:db:59:1e:21:3a:dc:c4:07:af:93:
6f:35:b4:b5:f2:f4:02:53:f4:60:a3:bd:25:1d:ba:
2f:17:37:53:3f:48:99:4a:fc:e7:9f:df:8d:0b:96:
e9:16:97:66:5b:83:a4:2f:d5:71:b4:c4:6b:23:fa:
c8:ad:20:1b:c0:43:33:8a:9a:c8:77:f6:35:1c:d8:
4e:e1:08:a1:e2:e7:2a:34:74:d7:f6:09:03:13:47:
21:2a:3e:c5:68:ef:e3:e6:53:45:2d:e8:d4:30:e8:
48:6f:3d:c2:cd:a3:f2:a1:66:08:76:85:8f:f2:84:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:13:CF:9E:FD:D8:DA:AD:B8:F5:D2:D0:9B:CD:A5:FE:03:B1:2C
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616363303a3a2f34342d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:acc0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:6e:c8:91:64:9d:72:2b:5d:f4:51:a8:df:9d:7e:82:f6:f2:
8e:23:da:a6:17:82:30:2a:de:3b:d3:a0:d1:4a:c0:de:b9:1d:
55:f3:0b:4e:26:27:56:ac:42:bb:32:dc:f6:47:61:d5:3b:37:
6d:86:a9:d3:9a:a4:82:9d:6a:e5:2a:da:1b:33:f9:36:d6:68:
c5:ce:74:9a:7e:2f:86:35:16:5c:69:ea:72:0e:90:02:0f:b5:
66:fd:d0:a1:9c:60:54:e7:78:6f:75:0f:a8:5a:71:22:1a:a5:
bd:86:2a:18:fd:04:4e:45:21:a4:de:58:57:4a:98:e8:e8:3c:
79:db:58:5f:c0:42:2f:ce:8e:9c:e1:64:cb:d6:7b:90:2d:89:
21:52:25:74:ff:63:0c:63:39:c8:3a:5a:a1:f5:74:04:29:c8:
85:6e:e6:7a:27:89:1c:1b:f9:45:41:9c:74:91:f5:49:3d:78:
0e:ef:fc:ad:36:51:a7:4d:b5:9b:7a:27:fa:89:63:53:a5:81:
fa:3e:8c:da:3f:b4:0b:51:8a:70:7e:dd:c9:54:1c:79:39:71:
ef:28:08:02:ef:a5:b3:9f:e0:ef:c7:6f:90:db:eb:58:34:02:
d0:0f:df:e1:8d:57:09:7f:c6:7a:d2:0d:96:ff:4d:e7:0e:53:
8f:4b:07:ec
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUTLlJPs/xYfvEF4Qw7RQkdSPOJiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MDYxMjI4NDFaFw0yNjA2MDUxMjMzNDFaMDMxMTAvBgNV
BAMTKDI0ODIxM0NGOUVGREQ4REFBREI4RjVEMkQwOUJDREE1RkUwM0IxMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxREqSE9BGvkeYa+tngD6/yEq
KrdUpUgscmy8I3WEpyGn4VXqH3VYCOthE9dEubwEHx5WxNvOmQHM1JNmVTVl9gnJ
mxfnRKEfrH7BSUJkw4CMwcFd7snTZBa9kQHf0iqUsTmdA3htWo2gg3Gedzi8rfqj
jvD23moRGm2C8eFq8R0rE/iLlJJRMLoj21keITrcxAevk281tLXy9AJT9GCjvSUd
ui8XN1M/SJlK/Oef340LlukWl2Zbg6Qv1XG0xGsj+sitIBvAQzOKmsh39jUc2E7h
CKHi5yo0dNf2CQMTRyEqPsVo7+PmU0Ut6NQw6EhvPcLNo/KhZgh2hY/yhIFTAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUJIITz5792NqtuPXS0JvNpf4DsSwwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0
M2E2MTYzNjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzYzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqCmBErMAwDQYJKoZIhvcNAQELBQADggEBAApuyJFknXIrXfRRqN+d
foL28o4j2qYXgjAq3jvToNFKwN65HVXzC04mJ1asQrsy3PZHYdU7N22GqdOapIKd
auUq2hsz+TbWaMXOdJp+L4Y1Flxp6nIOkAIPtWb90KGcYFTneG91D6hacSIapb2G
Khj9BE5FIaTeWFdKmOjoPHnbWF/AQi/OjpzhZMvWe5AtiSFSJXT/YwxjOcg6WqH1
dAQpyIVu5noniRwb+UVBnHSR9Uk9eA7v/K02UadNtZt6J/qJY1Olgfo+jNo/tAtR
inB+3clUHHk5ce8oCALvpbOf4O/Hb5Db61g0AtAP3+GNVwl/xnrSDZb/TecOU49L
B+w=
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:07 2025 by rpki-client