Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS207083.roa
File: AS207083.roa (raw, json)
Hash identifier: wRufVhpQLY56lLPujED/wky8BGK/H4GhDpzq15x1pZI=
Subject key identifier: A8:18:E9:D8:45:BD:FF:5C:30:FB:CA:5A:5E:D4:AF:AF:30:ED:0E:6F
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0310DDB2CD84BF38B05029F5003F030364B331DF
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS207083.roa
Signing time: Mon 30 Jun 2025 14:59:50 +0000
ROA not before: Mon 30 Jun 2025 14:54:50 +0000
ROA not after: Mon 29 Jun 2026 14:59:50 +0000
asID: 207083
IP address blocks: 2a09:54c6:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:10:dd:b2:cd:84:bf:38:b0:50:29:f5:00:3f:03:03:64:b3:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:50 2025 GMT
Not After : Jun 29 14:59:50 2026 GMT
Subject: CN=A818E9D845BDFF5C30FBCA5A5ED4AFAF30ED0E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:d2:25:0c:d4:2c:98:70:a2:23:81:b2:a2:
8c:6d:a2:07:bb:46:e1:8b:7e:15:90:4b:45:64:90:
6e:fb:c1:6d:fc:09:b3:f6:87:81:87:02:59:3a:85:
c2:74:1e:4f:fd:86:b9:6c:61:a2:62:b5:df:5e:b0:
2d:ee:44:fa:ce:c0:fe:a9:49:87:b0:29:73:25:11:
1a:df:bd:15:06:70:38:a3:fd:62:5f:37:e7:f9:04:
77:71:13:af:73:0e:0b:8c:10:74:bf:d7:00:48:8f:
9c:f1:dd:a7:d8:3f:2f:67:f8:6e:49:85:88:53:9f:
9b:f0:5f:d6:a7:db:a8:91:59:8d:ef:57:ae:ce:9a:
ca:ba:53:06:86:8b:bb:1a:ad:c5:d4:bc:f0:48:1a:
8b:af:9a:a4:11:cd:23:91:3b:86:ce:ab:f0:9a:bf:
01:ae:8a:f7:fd:4a:85:68:cd:3b:af:f7:88:62:6f:
aa:8d:00:4c:26:fd:d9:52:53:b0:5c:d2:c1:25:66:
a0:1a:8d:a9:88:57:c3:03:ba:e9:22:0a:5d:91:dc:
05:38:52:61:d9:30:64:4a:51:c6:ff:f3:ee:39:cc:
3a:5c:f6:54:66:61:ca:3a:5e:4f:1e:0f:b2:34:20:
92:f6:16:d6:a2:1c:79:49:24:38:0b:4a:df:ce:d6:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:E9:D8:45:BD:FF:5C:30:FB:CA:5A:5E:D4:AF:AF:30:ED:0E:6F
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS207083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/48
Signature Algorithm: sha256WithRSAEncryption
0c:22:cf:f6:80:94:77:70:b1:94:77:fd:0a:f8:40:31:61:60:
37:16:48:94:06:b4:ff:3c:ae:0f:a4:4d:e2:5e:76:b0:fd:0a:
14:fc:77:fd:89:27:d4:a4:7a:6c:21:e9:bf:8e:6f:7f:ff:86:
e4:76:94:a6:e2:89:c3:30:f7:e5:f3:35:31:0c:c5:fd:23:63:
dd:68:b0:30:35:7b:e9:99:2b:9c:ad:0e:10:b9:18:f8:cb:18:
20:70:9e:c6:a5:65:de:f2:0d:cf:5e:9a:64:4e:d8:1a:7a:56:
a4:58:7b:ac:27:d1:2a:89:0b:b8:0e:e3:30:ba:c3:62:3b:07:
2b:88:3f:d8:24:9c:34:f6:7b:bc:f3:0d:40:c7:57:93:d7:1f:
5e:e6:e2:bd:0d:44:6e:7d:98:66:0e:ab:62:32:a1:57:d2:45:
32:69:7b:62:c0:66:8e:c2:44:83:44:e6:09:cc:fb:6c:d0:24:
b7:d6:20:e1:55:88:cc:2e:0d:10:df:08:90:97:49:dc:26:2c:
23:a5:eb:a3:7d:98:89:19:65:6a:46:70:49:cb:1c:6d:49:34:
4d:34:58:5a:1e:a4:5a:30:59:c5:76:09:57:04:25:1d:c7:f0:
a3:9e:2d:38:38:bf:8d:eb:ae:4b:50:4d:27:3b:33:ce:16:98:
ff:07:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:27 2025 by rpki-client