Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208913.roa
File: AS208913.roa (raw, json)
Hash identifier: zYYZj6uaaMNXjk4LcglOnFIgT2raAcaBIaKrulgPDFc=
Subject key identifier: 68:C4:34:3B:2E:1C:C0:E1:93:C9:A9:F2:AD:7E:A7:54:EF:C0:4D:48
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6F01DD6A70D04C5D61D306D0110B0AA5BA314E9B
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208913.roa
Signing time: Mon 30 Jun 2025 14:59:42 +0000
ROA not before: Mon 30 Jun 2025 14:54:42 +0000
ROA not after: Mon 29 Jun 2026 14:59:42 +0000
asID: 208913
IP address blocks: 2a05:dfc3:fd30::/44 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:01:dd:6a:70:d0:4c:5d:61:d3:06:d0:11:0b:0a:a5:ba:31:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:42 2025 GMT
Not After : Jun 29 14:59:42 2026 GMT
Subject: CN=68C4343B2E1CC0E193C9A9F2AD7EA754EFC04D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:f4:6b:fe:97:31:11:29:af:73:8d:8d:75:
e9:5a:8e:5b:31:28:59:b0:15:6d:fa:2e:88:39:9b:
9e:b3:94:72:f9:1a:9f:b4:fa:8b:de:78:90:68:83:
f3:af:17:46:b0:cd:ae:f2:a6:0d:54:fa:86:c0:76:
c4:f1:fa:8a:0c:31:03:bd:8d:52:8d:de:35:78:ea:
d8:16:05:cf:06:ac:fb:90:73:1f:f0:7b:fd:76:40:
27:96:2b:93:04:03:41:8c:a0:01:6a:83:3b:23:07:
47:64:71:ff:27:84:0e:a4:0a:2a:e1:f4:c1:cb:9f:
e2:c8:ac:fb:20:b7:f8:06:8a:50:84:ac:84:bc:43:
45:3f:27:44:ca:45:68:98:a3:fe:0f:f3:78:e8:4b:
16:48:ec:8a:d3:e3:40:76:cf:bc:67:82:bf:93:e1:
6e:ae:24:ea:34:9c:16:87:b7:1f:36:1e:6c:82:c9:
75:03:8e:44:db:98:b2:62:c5:d2:a1:b4:fd:69:db:
67:79:35:b0:93:db:bd:59:4e:bb:0f:52:00:3a:67:
6c:d3:04:3d:f0:a0:a5:1c:3d:46:1d:33:80:bd:dd:
a0:0c:50:06:34:43:36:24:8f:0b:33:ce:4e:64:fa:
d3:04:5d:ca:c3:de:7e:0e:87:25:9f:36:45:20:03:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:34:3B:2E:1C:C0:E1:93:C9:A9:F2:AD:7E:A7:54:EF:C0:4D:48
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd30::/44
Signature Algorithm: sha256WithRSAEncryption
03:aa:cf:c7:b7:dd:0a:49:f8:80:1c:6c:57:7a:3f:bb:e8:2e:
14:61:cb:48:24:ea:7d:20:87:70:30:ec:b6:da:06:84:7d:55:
b6:16:48:a4:96:cc:36:17:14:4f:8b:7f:c1:31:ae:41:f8:df:
72:f6:05:d5:66:a3:26:6c:66:e8:a5:78:07:39:e5:2d:b9:4d:
95:d4:ad:bb:f0:9d:43:4f:1b:d1:1d:2b:ee:fa:fb:94:cd:dd:
38:49:4b:dc:32:70:df:d9:2a:d2:93:bb:54:33:56:41:c2:d5:
9a:41:5e:59:45:02:78:4d:81:2a:fb:0e:3d:e4:b8:82:c4:e1:
4c:d1:7a:25:b3:21:d0:ce:fa:5f:34:f0:76:14:54:d6:10:96:
e9:2f:f3:d3:87:36:87:eb:36:49:33:92:23:53:c5:88:ab:2d:
06:44:71:ad:e8:da:1e:2f:91:d7:d7:11:b9:6e:56:07:10:87:
b8:78:72:ce:5d:45:b8:d9:8c:79:ec:ae:6e:2d:6e:cb:fd:de:
43:e5:b1:65:8f:14:80:f1:a4:5c:72:89:88:8e:4b:5b:37:84:
1e:24:c3:f8:cb:43:da:fd:d6:fd:d0:20:be:e6:00:7b:c9:2f:
1f:f8:3d:67:73:fb:96:70:a9:c3:1e:fe:2d:41:ef:e3:90:65:
a1:79:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:28 2025 by rpki-client