Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31333a3a2f34382d313238203d3e203437323732.roa
File: 326130663a363238303a31333a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: ZJnFKhBQMAWk6fwio7VF8Yqz77hDiWDqkLz66j1A3eM=
Subject key identifier: 4D:D0:C8:55:C7:63:9F:DB:65:2F:2F:CA:9A:AE:49:F5:51:F9:8C:7E
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 53C5B95DB763698374D966ACFC06C51869235F79
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31333a3a2f34382d313238203d3e203437323732.roa
Signing time: Mon 30 Jun 2025 13:02:50 +0000
ROA not before: Mon 30 Jun 2025 12:57:50 +0000
ROA not after: Mon 29 Jun 2026 13:02:50 +0000
asID: 47272
IP address blocks: 2a0f:6280:13::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c5:b9:5d:b7:63:69:83:74:d9:66:ac:fc:06:c5:18:69:23:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 12:57:50 2025 GMT
Not After : Jun 29 13:02:50 2026 GMT
Subject: CN=4DD0C855C7639FDB652F2FCA9AAE49F551F98C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:12:31:45:0f:ce:7e:84:95:94:40:f9:6d:
4f:da:fb:26:40:d6:dd:c0:ee:3c:e5:d8:e2:cf:96:
55:b7:6d:6e:4a:e3:33:87:93:33:80:67:a4:3f:b0:
ad:94:73:92:2f:44:8b:4c:9c:9b:09:2f:75:92:74:
16:b7:11:19:15:35:db:7d:28:fa:72:b0:1e:ac:5a:
1c:2b:ac:4f:58:89:80:b6:db:8d:30:ab:8c:58:4d:
ea:fe:0e:d2:d2:fb:31:fd:63:78:7e:ab:77:2c:75:
58:f3:71:cb:ce:9d:0c:23:5f:3f:87:18:47:ad:26:
d2:8b:72:8f:37:46:34:e7:00:ca:21:c9:0f:f1:53:
65:92:ae:48:75:d2:ee:77:88:c6:81:2a:3a:42:28:
ad:64:5d:13:30:8e:32:ab:00:ec:3f:94:7b:ee:12:
db:5a:72:c7:e7:83:c7:f7:c1:75:eb:c1:88:90:86:
47:74:17:c7:b1:4d:41:69:fe:2c:77:4a:65:e8:bf:
63:27:e3:f3:9c:33:30:84:5b:b0:3c:ec:63:b3:0e:
a3:ac:73:0e:df:99:37:fa:61:22:e3:1d:d5:3c:cd:
1c:6c:4a:a9:ff:0f:37:55:f5:b3:9b:63:74:32:ff:
2e:e6:e7:5f:3e:b9:cd:16:fc:06:19:55:73:31:43:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:C8:55:C7:63:9F:DB:65:2F:2F:CA:9A:AE:49:F5:51:F9:8C:7E
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31333a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:13::/48
Signature Algorithm: sha256WithRSAEncryption
3a:19:31:19:fa:b0:80:91:92:d7:5f:67:39:01:ea:97:e6:1f:
10:27:d5:cc:d1:97:41:e9:34:07:dd:5a:35:ef:7a:9c:07:8b:
6b:4f:28:48:a8:49:c8:8c:c4:18:32:e1:e8:35:98:38:08:a9:
22:28:46:eb:e2:85:c5:3e:d8:e6:27:0f:13:94:de:e4:40:be:
f7:1c:ac:88:83:dd:ca:8b:5c:89:2d:c4:b9:d5:83:11:74:79:
ce:e9:05:98:eb:39:8b:f6:46:0c:bf:b0:5b:47:cb:3c:27:f9:
f1:a2:4a:23:93:23:57:5b:43:e3:d4:13:af:4e:d4:e1:10:af:
0f:c0:d3:e5:01:b0:41:5d:6e:c1:19:10:95:51:6a:4d:c8:8c:
b7:3d:e2:6c:63:1c:bf:93:63:e7:88:0b:ef:af:c8:07:74:7d:
ad:7e:f8:68:92:55:2d:4b:54:2d:5f:6f:dc:c7:e3:1c:ae:91:
2c:6b:00:c7:6d:2b:39:ca:c7:af:37:09:7d:86:78:d1:be:17:
3b:14:67:d1:fa:18:78:53:8f:3e:ad:f9:8f:2c:e6:09:df:2f:
90:f5:45:ab:4c:ac:3d:6d:d4:42:0d:9e:4c:74:db:f3:57:7f:
df:79:f1:97:58:a5:f7:04:cf:ce:44:14:00:9b:20:d4:43:1b:
bf:db:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:58 2025 by rpki-client