Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa
File: AS204676.roa (raw, json)
Hash identifier: Ne3GZt6mqhk9mV50rAY2R/x9chAv3sn0hx5FDkOlmNA=
Subject key identifier: CF:AB:5C:32:DD:C3:E4:16:1B:A6:69:EA:CC:6C:3E:6A:11:5F:D6:89
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 285B95148C346B563D2C6408973B6EB26B3F9A4D
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa
Signing time: Mon 30 Jun 2025 14:59:42 +0000
ROA not before: Mon 30 Jun 2025 14:54:42 +0000
ROA not after: Mon 29 Jun 2026 14:59:42 +0000
asID: 204676
IP address blocks: 2a09:54c6:8000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5b:95:14:8c:34:6b:56:3d:2c:64:08:97:3b:6e:b2:6b:3f:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:42 2025 GMT
Not After : Jun 29 14:59:42 2026 GMT
Subject: CN=CFAB5C32DDC3E4161BA669EACC6C3E6A115FD689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:4f:ad:84:d0:fc:cf:a8:ad:1f:97:2d:01:
31:0c:cf:a3:07:20:ab:51:db:cd:d8:16:63:90:55:
44:7a:05:54:15:bb:c4:04:4c:95:a3:65:93:b3:5d:
bb:bb:f9:17:d1:aa:33:86:df:7e:e2:ee:5b:10:1c:
5d:75:5e:68:e6:9d:b3:02:a9:ef:04:31:da:04:06:
e8:fb:c5:2f:20:8c:b8:20:4b:9a:71:e7:39:b0:f8:
10:98:11:58:cd:9a:04:40:a2:76:b2:23:b5:d2:c4:
a2:1d:ae:35:74:e9:c9:24:c8:6a:1b:20:67:70:24:
b6:5e:b2:67:ef:ea:a1:8d:5f:28:0b:36:53:8e:30:
c2:6f:38:d8:9e:e0:d4:9f:59:c3:fb:89:ee:4b:0a:
e1:e0:d0:1e:f4:de:a6:b7:97:a7:62:0f:97:a3:82:
46:db:ec:0d:42:78:e8:52:48:df:ba:3c:87:5a:4c:
b6:f3:fe:26:d7:c0:9d:c9:7d:f1:e4:69:cf:42:b6:
82:23:85:d3:2b:91:98:58:71:5f:65:a9:80:bc:e4:
e2:e5:d6:4d:ed:5a:93:a2:d2:10:32:15:a5:d4:92:
fd:7f:6f:5c:19:15:2a:47:46:ab:73:9c:8b:0c:2c:
1f:02:8e:f8:33:71:e8:0d:da:a6:21:79:49:05:0e:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:5C:32:DD:C3:E4:16:1B:A6:69:EA:CC:6C:3E:6A:11:5F:D6:89
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS204676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:8000::/36
Signature Algorithm: sha256WithRSAEncryption
72:8d:9e:2a:85:42:22:27:80:63:fb:81:fb:a5:0d:46:db:dd:
04:79:e0:03:e1:b8:6c:e7:76:33:2d:6c:c5:29:86:dd:55:1b:
4f:a5:2b:65:a1:d7:e9:01:c0:e0:f4:39:8c:d9:ff:54:b3:bb:
8a:23:c3:a8:90:fc:f5:22:1a:fe:05:f4:20:6d:c2:99:b0:b6:
54:9c:64:d9:2a:e8:cf:ee:5c:fc:a4:24:e9:93:7c:cc:87:af:
49:77:cf:16:e3:f5:a2:7d:27:17:92:45:e3:05:45:e1:c4:ae:
bc:bf:64:ea:b3:61:6c:01:39:85:68:c4:a7:ea:ef:9f:66:66:
4d:f1:fe:ba:6a:27:6f:72:c2:44:29:9b:01:b3:ec:c3:a3:7f:
29:31:f5:9f:33:07:1f:b9:a2:ab:b1:fa:e5:aa:de:f8:24:fd:
f3:16:91:aa:a8:ac:1f:cd:01:a1:d0:3b:b7:c7:26:2e:21:55:
c6:bb:83:2f:96:ab:ad:f8:73:96:65:1c:5c:da:5b:43:ea:f9:
91:d3:04:c7:7e:a9:57:bb:d9:42:49:5c:40:ff:f5:a7:f4:65:
ea:74:69:0b:38:c9:61:00:98:6c:65:09:11:5b:bf:4c:9c:6a:
09:09:4a:25:8d:45:89:4c:97:68:7f:0f:37:de:e4:d7:73:ac:
28:ee:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:13 2025 by rpki-client