Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: yVSNzOcIdotzPPb03KFo+GNd4s1XksIlrMsXCaWKcF4=
Subject key identifier: 28:92:FA:55:A4:FD:AF:4F:2D:00:F5:0E:F6:F2:83:53:0A:9E:6F:D5
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 36D83659087766BEA114E62B82F9DD78C1224AC3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS14618.roa
Signing time: Mon 30 Jun 2025 14:59:44 +0000
ROA not before: Mon 30 Jun 2025 14:54:44 +0000
ROA not after: Mon 29 Jun 2026 14:59:44 +0000
asID: 14618
IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44
2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d8:36:59:08:77:66:be:a1:14:e6:2b:82:f9:dd:78:c1:22:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:44 2025 GMT
Not After : Jun 29 14:59:44 2026 GMT
Subject: CN=2892FA55A4FDAF4F2D00F50EF6F283530A9E6FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:96:cb:09:4a:f6:cc:1f:6f:15:38:d1:b7:
83:ba:b9:80:6f:db:ed:56:55:fe:f5:45:b8:41:da:
d2:63:f2:d6:55:b8:f9:1e:b7:dd:35:b6:9b:e1:69:
07:1e:6a:41:d9:84:eb:fc:2e:28:a0:57:44:01:e6:
e3:2d:64:1d:7e:ce:b4:c5:ee:e4:a2:4b:76:20:08:
be:2a:68:5c:72:e2:4b:87:f9:1a:1b:30:d0:ee:cc:
ec:50:03:1d:e2:6c:4f:96:67:d6:1c:81:86:2e:83:
be:14:e0:7f:9f:85:16:21:41:bc:b4:0f:55:3e:3f:
58:bc:26:16:d3:54:92:f5:d6:c0:e9:dc:77:c2:df:
dd:59:4b:4d:00:d1:88:75:79:ab:c5:77:9a:29:12:
28:99:df:36:b2:a6:1f:4c:2b:e8:77:6d:92:d7:2e:
bc:ba:a0:e7:41:5b:28:29:e6:10:1a:eb:d6:c9:f2:
9f:14:ba:9f:19:2f:ac:a3:62:9d:cd:fb:cf:f8:42:
ca:00:4d:aa:a3:c9:ba:92:d0:e3:bf:4d:24:c1:45:
e5:72:a4:62:45:f1:f9:27:27:d6:3d:a8:7d:e9:5e:
5c:1d:af:32:9d:b1:48:8e:57:0a:e1:71:86:f2:41:
4b:34:b5:37:60:51:f3:78:4e:79:e1:46:90:c0:b4:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:FA:55:A4:FD:AF:4F:2D:00:F5:0E:F6:F2:83:53:0A:9E:6F:D5
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f740::/43
Signature Algorithm: sha256WithRSAEncryption
bb:7e:7c:7e:c0:c9:6c:aa:a5:f7:cd:dd:75:ea:91:b8:37:03:
71:fb:23:aa:d9:9a:52:7f:68:34:6f:c2:5a:9c:44:51:c1:f2:
49:0a:73:60:c2:63:64:4f:3f:63:9c:3f:56:06:5b:48:50:6b:
01:33:e4:45:1f:87:d2:74:4b:bf:05:19:c9:9a:6d:44:bd:96:
ac:fb:c4:e8:5d:eb:c3:15:9b:a3:03:b3:6e:1c:25:35:eb:ba:
94:3f:93:6f:5b:11:0b:45:ec:be:6c:fd:e3:f5:62:85:aa:53:
14:35:67:30:79:c8:db:6b:68:de:c8:96:c9:57:83:a0:63:7e:
bf:d1:cc:2a:6c:de:f0:e7:a1:78:c0:c5:73:f3:5d:17:0b:ab:
01:3c:84:14:95:f3:83:48:a2:63:d5:d8:57:ca:be:9e:59:3d:
0f:c1:9d:8e:8a:af:74:43:89:46:c9:ea:03:b6:49:b6:36:89:
9e:54:d7:c5:a0:86:8b:89:70:19:a0:bb:0b:52:67:20:0f:1d:
f7:58:37:e4:7e:de:19:25:f3:25:1a:4a:1c:10:c4:8e:90:64:
ec:52:46:a4:09:87:0e:23:84:03:3d:0c:57:ff:2f:82:bb:e4:
2d:ab:35:19:9e:c5:f6:da:5a:e8:31:a6:98:84:d3:c8:0b:9e:
97:e1:20:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNtg2WQh3Zr6hFOYrgvndeMEiSsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDRaFw0yNjA2MjkxNDU5NDRaMDMxMTAvBgNV
BAMTKDI4OTJGQTU1QTRGREFGNEYyRDAwRjUwRUY2RjI4MzUzMEE5RTZGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglpbLCUr2zB9vFTjRt4O6uYBv
2+1WVf71RbhB2tJj8tZVuPket901tpvhaQceakHZhOv8LiigV0QB5uMtZB1+zrTF
7uSiS3YgCL4qaFxy4kuH+RobMNDuzOxQAx3ibE+WZ9YcgYYug74U4H+fhRYhQby0
D1U+P1i8JhbTVJL11sDp3HfC391ZS00A0Yh1eavFd5opEiiZ3zayph9MK+h3bZLX
Lry6oOdBWygp5hAa69bJ8p8Uup8ZL6yjYp3N+8/4QsoATaqjybqS0OO/TSTBReVy
pGJF8fknJ9Y9qH3pXlwdrzKdsUiOVwrhcYbyQUs0tTdgUfN4TnnhRpDAtGE1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKJL6VaT9r08tAPUO9vKDUwqeb9UwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUqBd/D
90AwDQYJKoZIhvcNAQELBQADggEBALt+fH7AyWyqpffN3XXqkbg3A3H7I6rZmlJ/
aDRvwlqcRFHB8kkKc2DCY2RPP2OcP1YGW0hQawEz5EUfh9J0S78FGcmabUS9lqz7
xOhd68MVm6MDs24cJTXrupQ/k29bEQtF7L5s/eP1YoWqUxQ1ZzB5yNtraN7IlslX
g6Bjfr/RzCps3vDnoXjAxXPzXRcLqwE8hBSV84NIomPV2FfKvp5ZPQ/BnY6Kr3RD
iUbJ6gO2SbY2iZ5U18WghouJcBmguwtSZyAPHfdYN+R+3hkl8yUaShwQxI6QZOxS
RqQJhw4jhAM9DFf/L4K75C2rNRmexfbaWugxppiE08gLnpfhIAw=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:23 2025 by rpki-client