Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS133504.roa
File: AS133504.roa (raw, json)
Hash identifier: Tt5H183zNHvdcb5ioKDTbl0i9l92/n3IH7R2zK68qK0=
Subject key identifier: D6:9D:CA:E9:E0:88:17:E2:05:1F:82:8B:93:CC:57:4C:04:C5:D1:19
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5D81B074E1F6DF93F200BDAEA0AB76265B25186A
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS133504.roa
Signing time: Mon 30 Jun 2025 14:59:44 +0000
ROA not before: Mon 30 Jun 2025 14:54:44 +0000
ROA not after: Mon 29 Jun 2026 14:59:44 +0000
asID: 133504
IP address blocks: 2a05:dfc3:f700::/40 maxlen: 48
2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:81:b0:74:e1:f6:df:93:f2:00:bd:ae:a0:ab:76:26:5b:25:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:44 2025 GMT
Not After : Jun 29 14:59:44 2026 GMT
Subject: CN=D69DCAE9E08817E2051F828B93CC574C04C5D119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:c2:d4:23:f8:88:e2:f8:32:4e:3b:10:d1:
a5:34:c8:21:d6:ac:81:5e:18:bb:74:5e:18:00:d4:
e5:58:8d:40:fd:ab:45:7a:53:f2:d1:81:79:37:c2:
f0:4f:63:08:5a:95:63:38:b7:66:07:cb:f6:f2:6a:
a8:71:5f:04:ed:5e:46:27:b2:90:1e:23:c8:5a:af:
0c:51:bf:28:99:4b:27:01:82:53:b9:10:28:91:46:
93:85:c9:e8:ce:f2:57:6c:7a:af:e8:7c:b4:8d:f4:
6b:7f:fa:12:51:f1:d4:d6:9a:14:9d:1f:e6:08:a4:
e0:05:99:07:90:77:a3:25:7f:21:c8:a0:e4:a7:41:
41:9a:de:11:a2:4a:58:0a:ac:cb:49:59:24:b6:fe:
26:84:62:8a:5b:14:31:b4:ea:c6:c1:6e:d2:cd:c2:
28:5a:dc:a2:e4:09:e3:da:6d:bc:fb:95:81:0f:a5:
55:c7:8f:7c:18:16:2c:62:4d:e6:35:c5:22:6d:0b:
e6:a9:42:c8:7a:e3:2e:31:b2:bc:c3:76:b6:25:40:
35:5b:6a:98:d2:8a:48:54:68:bf:37:37:23:28:6a:
01:89:68:80:c2:78:b5:de:59:e8:dd:61:e3:3a:b1:
9d:a3:85:29:9b:9d:0b:cf:25:0d:e2:1d:5c:39:62:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:CA:E9:E0:88:17:E2:05:1F:82:8B:93:CC:57:4C:04:C5:D1:19
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS133504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f700::/40
Signature Algorithm: sha256WithRSAEncryption
75:7d:72:4b:fe:69:26:73:0b:fd:5e:3e:99:fa:54:dc:61:5e:
2a:bc:1a:c9:0c:83:49:89:23:1a:d9:b9:a3:1f:09:5c:e6:b2:
8b:02:44:d3:59:01:4f:ff:a1:c8:7d:23:45:6c:bd:88:34:0f:
b2:ae:ca:d9:34:bd:e9:86:23:9f:48:a7:b6:8b:9f:26:08:b3:
d6:71:de:de:1b:90:a3:31:be:52:2d:d4:5d:06:fe:7a:42:03:
6f:d3:37:0c:f9:2f:ee:8c:b9:98:20:87:ef:7e:54:c0:ba:9c:
5d:27:80:20:07:f4:70:02:11:d2:6d:f7:4a:f7:9f:e6:96:12:
3c:7b:6f:3e:a8:91:29:a0:28:83:44:c0:cf:34:1b:43:11:75:
5d:d1:69:3f:e0:24:15:65:2a:6a:22:80:07:49:c1:7e:52:89:
21:15:78:1e:28:77:de:38:db:8b:45:65:74:d6:cb:b6:45:96:
34:38:80:01:7f:28:ae:75:da:4e:56:59:ae:24:23:f4:7e:1a:
2a:c0:e8:06:8d:10:f2:6a:98:90:0a:11:e9:9f:14:bc:82:87:
d8:31:db:79:dd:e6:10:e6:06:6f:49:10:3f:04:f6:79:96:48:
ed:dc:4a:bb:8f:f5:e8:67:fc:d7:39:0d:57:57:bc:38:41:1f:
fc:43:ff:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXYGwdOH235PyAL2uoKt2JlslGGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDRaFw0yNjA2MjkxNDU5NDRaMDMxMTAvBgNV
BAMTKEQ2OURDQUU5RTA4ODE3RTIwNTFGODI4QjkzQ0M1NzRDMDRDNUQxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBsLUI/iI4vgyTjsQ0aU0yCHW
rIFeGLt0XhgA1OVYjUD9q0V6U/LRgXk3wvBPYwhalWM4t2YHy/byaqhxXwTtXkYn
spAeI8harwxRvyiZSycBglO5ECiRRpOFyejO8ldseq/ofLSN9Gt/+hJR8dTWmhSd
H+YIpOAFmQeQd6MlfyHIoOSnQUGa3hGiSlgKrMtJWSS2/iaEYopbFDG06sbBbtLN
wiha3KLkCePabbz7lYEPpVXHj3wYFixiTeY1xSJtC+apQsh64y4xsrzDdrYlQDVb
apjSikhUaL83NyMoagGJaIDCeLXeWejdYeM6sZ2jhSmbnQvPJQ3iHVw5YoLNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1p3K6eCIF+IFH4KLk8xXTATF0RkwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMTMzNTA0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXf
w/cwDQYJKoZIhvcNAQELBQADggEBAHV9ckv+aSZzC/1ePpn6VNxhXiq8GskMg0mJ
IxrZuaMfCVzmsosCRNNZAU//och9I0VsvYg0D7Kuytk0vemGI59Ip7aLnyYIs9Zx
3t4bkKMxvlIt1F0G/npCA2/TNwz5L+6MuZggh+9+VMC6nF0ngCAH9HACEdJt90r3
n+aWEjx7bz6okSmgKINEwM80G0MRdV3RaT/gJBVlKmoigAdJwX5SiSEVeB4od944
24tFZXTWy7ZFljQ4gAF/KK512k5WWa4kI/R+GirA6AaNEPJqmJAKEemfFLyCh9gx
23nd5hDmBm9JED8E9nmWSO3cSruP9ehn/Nc5DVdXvDhBH/xD/3Q=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:23 2025 by rpki-client