Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: CLbqPkTLQI08bJPl50tITMiuUcTklfGUcCwtHTmjfFo=
Subject key identifier: 51:F4:F6:42:47:FB:2A:94:A0:87:1A:D1:73:00:6C:6F:55:CB:BB:5C
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 05D6286108896E898F62B4825E983A4B4DBC8E27
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS202224.roa
Signing time: Mon 30 Jun 2025 14:59:49 +0000
ROA not before: Mon 30 Jun 2025 14:54:49 +0000
ROA not after: Mon 29 Jun 2026 14:59:49 +0000
asID: 202224
IP address blocks: 2a0a:6044:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d6:28:61:08:89:6e:89:8f:62:b4:82:5e:98:3a:4b:4d:bc:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:49 2025 GMT
Not After : Jun 29 14:59:49 2026 GMT
Subject: CN=51F4F64247FB2A94A0871AD173006C6F55CBBB5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:8a:f7:c9:c0:5a:f3:f3:1e:7c:13:fb:68:
03:f7:a4:56:7f:89:86:29:75:77:2e:31:97:f7:ac:
2c:9d:48:0a:ed:37:f0:25:c9:23:d8:66:7a:52:c0:
ce:71:8b:fe:de:eb:30:59:1c:79:55:a0:46:8b:f8:
4a:86:d7:74:f2:41:d0:16:7a:a8:d3:cc:28:ce:4b:
99:d8:11:22:d6:3c:b0:9e:ce:bd:70:93:7c:9c:e1:
26:67:a8:b5:34:7a:26:4d:0a:54:0f:01:c5:4c:68:
ad:49:eb:54:a3:3a:e2:2e:e6:9e:23:c7:2a:45:81:
0f:8b:13:a0:6b:60:30:cb:ae:6a:49:48:82:3c:ae:
e0:11:d8:68:f5:77:dd:05:08:5a:d1:19:6d:28:c2:
e2:ce:30:0f:29:14:90:62:48:05:60:8c:42:b1:18:
07:c2:1b:7e:b7:8c:6b:65:31:f3:72:bd:35:5f:31:
5c:b1:b9:0e:f0:dd:43:d6:73:6d:07:97:8a:2e:58:
43:51:15:b9:ba:c9:22:f2:91:ff:66:57:4f:dd:cf:
f2:06:a6:54:c4:d6:a7:78:ac:a1:1f:97:25:34:c9:
67:ed:b5:2a:55:88:b5:57:75:f8:7e:4b:b6:9d:8c:
53:ff:22:7b:6e:b9:aa:5f:3f:58:f3:86:a7:bf:8a:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:F6:42:47:FB:2A:94:A0:87:1A:D1:73:00:6C:6F:55:CB:BB:5C
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:37:27:29:3c:67:cc:1b:d6:c2:be:57:3b:19:8f:a8:4b:66:
9f:ea:d9:14:e9:d7:7e:3f:19:ae:95:3a:e5:13:48:0d:36:89:
b1:f0:16:32:df:6b:4a:9a:00:e7:46:ec:6a:61:b4:e2:09:fa:
72:6b:0c:a7:4b:1b:00:e3:0d:e3:52:c3:07:5c:9a:e1:38:37:
b7:70:ce:31:95:6d:3b:12:1d:84:eb:08:d8:b2:77:b5:43:eb:
a4:cf:38:ba:5e:34:f4:90:1a:f4:23:6e:a6:12:26:4e:06:08:
78:cb:85:75:c8:6f:b4:0c:0e:3b:be:22:52:aa:05:c3:93:bb:
6f:45:6c:e8:2f:63:39:8e:41:2b:ed:d2:b0:a9:3d:4b:e2:86:
e7:f7:45:84:a8:3d:6b:b5:61:87:49:20:27:49:c4:20:13:76:
11:38:fd:db:86:a4:08:22:6e:f3:76:b5:51:27:6d:59:81:a3:
90:70:14:8c:09:30:2b:f3:76:17:cc:4a:34:e3:5f:56:bc:92:
ad:88:b1:25:7f:6d:e7:47:8d:44:d5:ae:f9:f6:6e:10:17:fd:
06:4f:15:59:8a:31:58:c6:1e:f4:df:33:ce:5a:d9:c6:93:9b:
cb:aa:b9:7f:14:39:1a:ae:38:ae:12:c5:98:4e:c0:7e:5b:91:
f5:8d:ea:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBdYoYQiJbomPYrSCXpg6S028jicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDlaFw0yNjA2MjkxNDU5NDlaMDMxMTAvBgNV
BAMTKDUxRjRGNjQyNDdGQjJBOTRBMDg3MUFEMTczMDA2QzZGNTVDQkJCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sIr3ycBa8/MefBP7aAP3pFZ/
iYYpdXcuMZf3rCydSArtN/AlySPYZnpSwM5xi/7e6zBZHHlVoEaL+EqG13TyQdAW
eqjTzCjOS5nYESLWPLCezr1wk3yc4SZnqLU0eiZNClQPAcVMaK1J61SjOuIu5p4j
xypFgQ+LE6BrYDDLrmpJSII8ruAR2Gj1d90FCFrRGW0owuLOMA8pFJBiSAVgjEKx
GAfCG363jGtlMfNyvTVfMVyxuQ7w3UPWc20Hl4ouWENRFbm6ySLykf9mV0/dz/IG
plTE1qd4rKEflyU0yWfttSpViLVXdfh+S7adjFP/IntuuapfP1jzhqe/ikFtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUfT2Qkf7KpSghxrRcwBsb1XLu1wwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjAyMjI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg
RHAwDQYJKoZIhvcNAQELBQADggEBAK03Jyk8Z8wb1sK+VzsZj6hLZp/q2RTp134/
Ga6VOuUTSA02ibHwFjLfa0qaAOdG7GphtOIJ+nJrDKdLGwDjDeNSwwdcmuE4N7dw
zjGVbTsSHYTrCNiyd7VD66TPOLpeNPSQGvQjbqYSJk4GCHjLhXXIb7QMDju+IlKq
BcOTu29FbOgvYzmOQSvt0rCpPUvihuf3RYSoPWu1YYdJICdJxCATdhE4/duGpAgi
bvN2tVEnbVmBo5BwFIwJMCvzdhfMSjTjX1a8kq2IsSV/bedHjUTVrvn2bhAX/QZP
FVmKMVjGHvTfM85a2caTm8uquX8UORquOK4SxZhOwH5bkfWN6rs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:28 2025 by rpki-client