Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209693.roa
File: AS209693.roa (raw, json)
Hash identifier: fbM2X+MXwgWYZU7aa1vQXAuLIntGx0IvmkqhIZk7j2A=
Subject key identifier: FD:CB:EC:91:FB:71:F3:0A:D2:F0:0F:4F:6A:73:A8:A2:CC:FD:95:5B
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2528D4BEC843FAA96DD530C5B8828304D22303CD
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209693.roa
Signing time: Mon 30 Jun 2025 14:59:48 +0000
ROA not before: Mon 30 Jun 2025 14:54:48 +0000
ROA not after: Mon 29 Jun 2026 14:59:48 +0000
asID: 209693
IP address blocks: 2a09:54c6:5000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:28:d4:be:c8:43:fa:a9:6d:d5:30:c5:b8:82:83:04:d2:23:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:48 2025 GMT
Not After : Jun 29 14:59:48 2026 GMT
Subject: CN=FDCBEC91FB71F30AD2F00F4F6A73A8A2CCFD955B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:91:34:b3:35:bb:60:b3:9e:63:68:74:57:
22:0e:4a:c5:e5:70:b9:38:f2:61:3a:39:6b:a3:e0:
72:a5:8f:3a:1c:2c:26:89:e3:61:fa:c6:b9:9d:62:
4a:56:09:a4:21:55:b8:d9:9f:16:ab:75:64:72:20:
f9:2b:65:9e:ae:13:f0:0e:96:cd:c5:78:e1:c2:8b:
94:5d:c8:4d:33:fc:01:13:f6:02:e3:5f:4d:03:dd:
f0:f7:da:1b:41:7d:c2:fc:81:42:27:b1:fd:96:a6:
38:17:89:22:c1:a2:9e:c0:0e:4a:9b:7b:df:b3:cf:
2c:15:3c:9a:6b:60:23:00:0a:34:d5:b5:2e:a1:12:
8e:7f:c0:70:59:17:d5:81:2c:9d:01:f3:9e:24:3e:
c7:1b:6e:94:e7:c3:d7:30:7c:95:8a:d8:8e:0a:d9:
d2:41:ae:e5:a9:07:83:87:53:d6:09:26:ec:fa:a0:
6f:2e:23:c7:0e:40:f4:37:7f:ef:28:a1:a3:67:22:
f4:13:b9:6c:c2:67:3e:d4:7b:00:38:92:80:44:6b:
d9:ec:ab:09:8a:cd:3a:2c:64:8d:27:7c:94:69:fb:
e6:d2:85:8a:84:ad:94:d0:f9:2a:5f:f4:0d:88:f9:
71:40:72:da:bb:61:48:ab:40:75:e9:98:bd:b1:a5:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CB:EC:91:FB:71:F3:0A:D2:F0:0F:4F:6A:73:A8:A2:CC:FD:95:5B
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS209693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:5000::/36
Signature Algorithm: sha256WithRSAEncryption
76:a2:8c:ce:e5:aa:f4:17:70:19:1e:c8:13:be:d5:ad:eb:7f:
3a:3e:39:1d:5a:d6:d4:28:68:a3:1d:94:a3:de:9f:34:06:33:
01:b0:2e:a2:7b:3b:e4:a5:64:4e:8a:6f:44:6d:67:e4:ca:50:
3a:ec:cc:24:4d:9b:50:fe:96:27:16:01:cc:a3:74:ff:60:37:
ec:b0:7f:31:95:7b:c4:f5:9f:5e:23:6e:06:4c:37:df:c3:b3:
27:74:38:0b:ce:4f:b7:74:ad:cc:03:e0:85:83:ad:00:9a:9a:
55:87:40:12:6e:89:02:61:7d:ca:7f:6c:58:3a:f2:db:14:ed:
57:ef:74:3b:38:16:8d:81:86:97:bf:cb:1f:5c:49:6c:23:4b:
e4:1e:42:07:e2:e0:5b:ef:55:9e:56:fe:4c:e2:78:07:0c:a6:
a3:2e:57:e5:33:b1:ad:66:0c:59:b8:da:25:98:66:10:6a:6a:
be:ae:c7:1d:6a:54:c7:72:71:0a:20:67:93:49:72:d7:d9:47:
e9:5a:84:fd:ec:39:54:bb:d6:89:ed:8e:b0:7c:3f:40:6b:b4:
37:88:86:f3:d9:ad:0e:3f:47:40:ef:a8:19:d6:da:84:4c:37:
9d:ac:41:b1:25:fb:87:23:97:9c:8b:82:e6:fe:33:30:50:99:
b4:4f:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:22 2025 by rpki-client