Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238363a3a2f33322d3430203d3e20323134323233.roa
File: 326130663a363238363a3a2f33322d3430203d3e20323134323233.roa (raw, json)
Hash identifier: dEQzs2WygKCJHOR3IsCU8DAKCL6Zs2vjKWMDQNA5US0=
Subject key identifier: 96:24:AA:C7:0B:34:8F:C4:14:46:7D:98:E6:73:90:8C:35:C7:EC:0E
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 66F489265A7C62E53F3CCBA1370C0B6D74760982
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238363a3a2f33322d3430203d3e20323134323233.roa
Signing time: Sun 22 Jun 2025 04:33:37 +0000
ROA not before: Sun 22 Jun 2025 04:28:37 +0000
ROA not after: Sun 21 Jun 2026 04:33:37 +0000
asID: 214223
IP address blocks: 2a0f:6286::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f4:89:26:5a:7c:62:e5:3f:3c:cb:a1:37:0c:0b:6d:74:76:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 22 04:28:37 2025 GMT
Not After : Jun 21 04:33:37 2026 GMT
Subject: CN=9624AAC70B348FC414467D98E673908C35C7EC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:f1:55:de:df:df:04:cf:b7:13:d2:6e:54:
c6:05:6c:88:85:33:6f:54:a6:2a:50:04:52:69:bc:
b5:dc:8d:62:72:4d:ef:c9:79:df:c0:8a:d4:2e:78:
cd:54:8f:ce:de:f0:e7:20:7c:71:0c:02:3c:9e:12:
38:7a:85:77:25:51:3f:f7:8c:6e:5d:80:53:85:c3:
04:0a:9c:08:3f:3d:a9:0e:ed:69:5d:1e:ee:67:29:
22:e0:76:76:50:fc:bf:3a:ab:14:a0:be:0d:1c:fd:
d1:d0:c9:60:c8:2b:3c:1c:fc:a4:5f:60:96:c1:b3:
a6:5a:33:a5:01:ca:a5:04:e7:07:b7:12:b4:e0:d1:
d9:b5:7c:9f:3e:34:20:a3:f0:7a:55:06:7a:cd:47:
f1:c7:82:98:f1:d5:8b:54:d3:1d:5f:de:90:2e:fb:
c6:d6:b1:94:84:42:93:f5:52:43:53:32:b8:58:49:
a3:b2:bf:d2:06:13:ff:58:b3:df:d9:88:24:ed:6f:
4c:fb:d3:4a:a4:e1:d7:48:98:46:f5:93:2b:36:01:
5c:38:36:6f:d3:6b:3a:81:b4:de:de:b1:91:3b:a0:
f2:6b:06:54:42:25:fd:57:5a:c8:f5:48:18:2e:d1:
1a:bb:3d:65:0c:62:00:ae:f1:7e:59:f5:03:f1:f3:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:AA:C7:0B:34:8F:C4:14:46:7D:98:E6:73:90:8C:35:C7:EC:0E
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130663a363238363a3a2f33322d3430203d3e20323134323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6286::/32
Signature Algorithm: sha256WithRSAEncryption
4b:fb:ed:d3:1d:43:f3:c4:2d:c1:07:1f:23:f3:38:3a:8b:c6:
87:4f:ff:16:fb:e9:97:07:40:6a:10:f4:16:cc:c0:45:a9:18:
fc:fa:e8:12:7a:e2:ab:5a:42:a2:59:bf:ef:ad:9d:cc:58:98:
f9:75:1d:f0:fb:25:06:33:9b:cb:3a:7f:c7:30:79:d4:9a:c2:
e5:25:d2:2d:00:d6:87:2f:d0:4b:8f:31:01:88:0b:0d:d4:35:
f0:02:fa:0a:63:63:a8:ee:05:4c:67:1e:3f:35:fb:34:00:e8:
ad:a9:40:e1:b5:4e:e8:59:f0:5b:89:65:2d:c8:cf:48:87:1d:
73:8a:51:f3:f8:7b:69:c1:b0:aa:ff:a0:a9:34:9a:fa:2c:05:
cc:65:75:d0:4a:c4:ff:5c:4d:d6:5d:ef:e1:b9:cd:d8:0c:09:
95:6c:50:31:6e:2a:b9:97:a3:14:a2:36:99:d5:c5:a3:f0:fc:
a0:1d:c8:a2:50:95:52:0a:11:0e:ec:8e:71:46:33:29:65:76:
96:9c:3c:3d:70:2d:8b:6f:e7:e6:e4:69:11:c1:33:3a:ee:d2:
a0:34:68:11:7b:0a:2d:83:e9:b1:f4:3e:14:3e:dc:f2:ae:32:
4f:f7:e3:0e:5d:f6:55:dc:ba:d3:3a:13:28:16:38:41:b3:81:
90:0b:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:17 2025 by rpki-client