Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS205398.roa
File: AS205398.roa (raw, json)
Hash identifier: vCLvfIeKSjUzXUZQBQslyi0ktczaPEXjiu4TWtUXkfI=
Subject key identifier: 7E:A6:25:A8:2D:73:81:87:77:75:54:A5:12:04:9E:74:DD:B2:80:AB
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6A57F712A3924DB16BCDD65B33042B6F4F77572C
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS205398.roa
Signing time: Mon 30 Jun 2025 14:59:44 +0000
ROA not before: Mon 30 Jun 2025 14:54:44 +0000
ROA not after: Mon 29 Jun 2026 14:59:44 +0000
asID: 205398
IP address blocks: 2a0a:6044:ad00::/40 maxlen: 48
2a0a:6044:ae00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:57:f7:12:a3:92:4d:b1:6b:cd:d6:5b:33:04:2b:6f:4f:77:57:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:44 2025 GMT
Not After : Jun 29 14:59:44 2026 GMT
Subject: CN=7EA625A82D738187777554A512049E74DDB280AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:a8:3c:13:98:c1:81:fd:40:9b:ff:66:18:
47:32:f9:64:23:e3:52:b8:6c:20:1d:7c:86:ee:dc:
06:3e:54:73:53:8f:32:3f:16:ae:81:b5:27:f2:08:
b1:93:72:f2:62:cc:91:34:1f:4f:b0:a8:13:bb:04:
53:f0:89:31:b9:ae:e1:00:19:9d:27:c1:bd:5f:b3:
a8:7d:e5:00:07:68:21:e9:2f:04:4a:05:ea:7c:11:
71:6f:be:0f:aa:c0:54:33:16:f2:07:8a:a3:4c:5c:
cd:cf:0f:cb:7b:81:d3:5a:38:38:27:3a:7e:44:95:
82:34:a3:2e:2b:86:bc:a9:b5:d3:80:10:09:30:72:
2f:a1:24:cf:b1:75:90:5c:4d:50:99:7b:82:a1:b4:
03:f7:db:f1:b5:e5:01:c1:24:b1:8a:b4:da:c2:d8:
4b:d2:05:bd:d2:a4:37:fa:04:7f:1e:13:d0:b7:60:
64:f8:52:63:89:59:55:88:fb:03:bd:51:e5:ed:31:
76:57:bf:05:84:e2:a4:a0:b5:69:9b:fc:c9:d6:63:
56:e5:96:f1:26:c0:f6:97:12:9a:68:26:37:4a:be:
f9:50:93:32:ba:56:e3:01:9f:33:0e:45:b0:83:1d:
fa:5d:71:a9:1d:4a:74:c6:f6:a1:54:73:7f:0f:37:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:25:A8:2D:73:81:87:77:75:54:A5:12:04:9E:74:DD:B2:80:AB
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS205398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ad00::-2a0a:6044:aeff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:9b:6d:07:95:b4:1b:52:ad:1c:83:d6:58:f0:79:c1:f3:15:
a5:57:63:92:4b:23:94:3b:cf:43:ed:da:e7:e0:1b:ca:a3:50:
5a:76:1e:3a:3f:71:8a:19:4d:08:79:0b:21:c0:76:3e:92:64:
43:3e:bf:fa:b5:78:83:fb:2f:5d:47:c4:6a:ae:12:21:5b:77:
cb:e8:c9:69:f4:bb:47:51:d7:64:81:c1:4a:2b:c4:b9:b0:fe:
08:8c:49:06:2c:56:50:3d:16:d2:e7:f0:e3:1d:08:6e:aa:03:
1b:2a:b4:aa:9e:f8:82:fa:26:fa:e1:c7:ea:e1:56:6a:14:7c:
78:ac:c1:66:2d:49:04:3f:19:b5:ef:99:41:c8:a8:06:56:1c:
11:41:d1:ab:66:fc:11:57:71:32:a8:94:e2:05:cb:f8:82:32:
43:14:f6:9c:76:41:59:3f:2b:22:a0:f6:4f:9a:60:1d:00:94:
47:23:8b:38:c4:35:24:51:10:41:57:ac:6e:6e:b8:68:dc:80:
fc:7d:4e:10:18:e0:03:5f:a4:f4:b2:94:e9:a4:61:7d:5f:c2:
c1:ba:bd:be:32:b5:8c:71:fa:14:84:68:66:65:26:7a:f6:e5:
aa:83:5c:61:7d:7b:16:73:88:71:9f:0e:0d:f9:ae:84:a1:3e:
03:fa:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:33 2025 by rpki-client