Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa
File: 326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: ELraLWp+2IEPLrT7tu8aXx6s3XMNWrlbH7y6iJUlav8=
Subject key identifier: 4F:11:00:41:B6:D8:76:5E:FB:8E:D0:7D:68:C4:E8:71:7D:2B:B0:12
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 28029BC639597B11C44DC7888BFD9D69998ADD0A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa
Signing time: Mon 30 Jun 2025 13:53:08 +0000
ROA not before: Mon 30 Jun 2025 13:48:08 +0000
ROA not after: Mon 29 Jun 2026 13:53:08 +0000
asID: 47272
IP address blocks: 2a0f:6280:18::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:02:9b:c6:39:59:7b:11:c4:4d:c7:88:8b:fd:9d:69:99:8a:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 13:48:08 2025 GMT
Not After : Jun 29 13:53:08 2026 GMT
Subject: CN=4F110041B6D8765EFB8ED07D68C4E8717D2BB012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:21:fb:c3:9f:d3:6c:94:41:51:71:bf:c4:
09:ac:f0:0c:5f:f0:8b:f4:6f:bb:dc:0b:dd:8b:b1:
07:03:a2:77:cd:87:68:98:e9:36:89:01:b2:e7:63:
02:90:da:61:ef:b2:0c:d2:37:ab:d1:95:8c:31:66:
d8:42:8f:dc:f3:43:3c:83:43:64:3e:1b:f8:62:a0:
4c:30:66:02:66:f8:03:04:60:51:3e:dc:7d:62:b4:
f2:7a:ed:e2:61:93:32:95:51:4b:55:ba:93:f7:da:
9d:d3:aa:d3:87:fe:61:7a:6a:e7:27:8a:28:43:69:
f2:e4:07:41:6e:a7:bb:cb:2a:3a:ab:d9:bf:38:b5:
9b:db:25:57:a0:d4:6d:9d:ad:4b:51:ad:ae:6b:a3:
72:fa:98:25:ff:a1:d8:6e:b8:aa:29:55:67:4b:7a:
b2:44:c2:95:74:57:8c:df:c8:22:00:8c:bc:fd:54:
33:27:bc:51:20:07:b6:1e:95:8f:1f:49:62:72:62:
d3:94:8f:d5:7e:76:e9:df:2b:b0:78:97:f1:70:67:
df:5b:87:8c:ea:ea:23:fd:5e:41:18:79:8d:fd:46:
5c:6f:13:20:f0:3e:05:07:8a:e4:3c:50:02:9f:ae:
5c:e6:8d:3f:67:97:20:58:bc:b0:a6:dd:92:02:7c:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:00:41:B6:D8:76:5E:FB:8E:D0:7D:68:C4:E8:71:7D:2B:B0:12
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238303a31383a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:18::/48
Signature Algorithm: sha256WithRSAEncryption
30:08:83:22:fd:1a:19:53:79:65:fc:f2:30:a4:1f:3d:79:02:
a7:8b:85:d6:01:b3:62:ae:55:3e:98:3f:6b:9c:9f:a7:66:8e:
11:9d:a4:38:d2:58:9f:91:35:00:9b:dd:85:a8:8c:f2:a5:b6:
79:06:b5:f9:59:17:7e:79:09:1a:8e:54:17:52:6c:34:6b:14:
d2:d9:ad:f3:7c:b3:54:33:e7:7d:6f:f0:72:69:ea:a2:00:c7:
e8:9b:03:f2:1b:95:4d:b4:6a:22:17:df:b9:c1:b2:03:bd:6c:
8e:fa:f5:96:59:1f:7a:40:37:cf:16:b8:25:57:09:f2:bf:07:
9a:fd:b9:27:24:55:49:f8:c3:52:20:37:f6:43:8c:fe:ba:a6:
49:3f:b9:e8:bb:08:94:97:1a:44:3b:0e:46:67:51:40:5d:bf:
44:61:3d:36:90:18:d5:07:7d:bf:97:c6:d5:04:44:35:5f:d1:
49:ee:2f:d2:fa:39:e4:1b:fd:2a:3d:d8:a9:14:94:95:16:ab:
3a:bf:86:b0:43:85:51:e7:0d:d2:fa:f0:e0:89:78:87:e5:36:
8e:59:c8:bb:b1:58:85:6c:47:8d:bb:a0:d5:bb:06:37:c1:c2:
6a:d5:15:d1:b8:b1:14:fe:73:6e:02:8a:4f:e0:f7:d6:e1:4b:
8f:83:e9:8d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUKAKbxjlZexHETceIi/2daZmK3QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxMzQ4MDhaFw0yNjA2MjkxMzUzMDhaMDMxMTAvBgNV
BAMTKDRGMTEwMDQxQjZEODc2NUVGQjhFRDA3RDY4QzRFODcxN0QyQkIwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08SH7w5/TbJRBUXG/xAms8Axf
8Iv0b7vcC92LsQcDonfNh2iY6TaJAbLnYwKQ2mHvsgzSN6vRlYwxZthCj9zzQzyD
Q2Q+G/hioEwwZgJm+AMEYFE+3H1itPJ67eJhkzKVUUtVupP32p3TqtOH/mF6aucn
iihDafLkB0Fup7vLKjqr2b84tZvbJVeg1G2drUtRra5ro3L6mCX/odhuuKopVWdL
erJEwpV0V4zfyCIAjLz9VDMnvFEgB7YelY8fSWJyYtOUj9V+dunfK7B4l/FwZ99b
h4zq6iP9XkEYeY39RlxvEyDwPgUHiuQ8UAKfrlzmjT9nlyBYvLCm3ZICfD57AgMB
AAGjggJ2MIICcjAdBgNVHQ4EFgQUTxEAQbbYdl77jtB9aMTocX0rsBIwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjYzYTM2MzIzODMw
M2EzMTM4M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKg9igAAYMA0GCSqGSIb3DQEBCwUAA4IBAQAwCIMi/RoZU3ll/PIwpB89
eQKni4XWAbNirlU+mD9rnJ+nZo4RnaQ40lifkTUAm92FqIzypbZ5BrX5WRd+eQka
jlQXUmw0axTS2a3zfLNUM+d9b/ByaeqiAMfomwPyG5VNtGoiF9+5wbIDvWyO+vWW
WR96QDfPFrglVwnyvwea/bknJFVJ+MNSIDf2Q4z+uqZJP7nouwiUlxpEOw5GZ1FA
Xb9EYT02kBjVB32/l8bVBEQ1X9FJ7i/S+jnkG/0qPdipFJSVFqs6v4awQ4VR5w3S
+vDgiXiH5TaOWci7sViFbEeNu6DVuwY3wcJq1RXRuLEU/nNuAopP4PfW4UuPg+mN
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:39 2025 by rpki-client