Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211066.roa
File: AS211066.roa (raw, json)
Hash identifier: aMa5J4XSAPklQKvZ7fYFTEXC67kSyCdgKwvFwlne6tI=
Subject key identifier: 1D:64:7B:F0:74:57:E4:C3:EC:66:09:64:A9:80:23:48:43:28:B9:F1
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6E88769F4D6B888ACCE4CBA7850767ED80DAB619
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211066.roa
Signing time: Mon 30 Jun 2025 14:59:52 +0000
ROA not before: Mon 30 Jun 2025 14:54:52 +0000
ROA not after: Mon 29 Jun 2026 14:59:52 +0000
asID: 211066
IP address blocks: 2a05:dfc3:fc00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:88:76:9f:4d:6b:88:8a:cc:e4:cb:a7:85:07:67:ed:80:da:b6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:52 2025 GMT
Not After : Jun 29 14:59:52 2026 GMT
Subject: CN=1D647BF07457E4C3EC660964A98023484328B9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:04:ae:5e:85:db:ca:ec:d6:9b:6f:92:1d:
cc:e2:69:52:e2:e3:26:7d:b4:99:8b:97:43:e7:25:
41:40:46:29:c1:cd:d3:59:3d:94:e4:a9:64:37:3f:
a5:d7:6c:e2:08:4e:6a:8b:d5:4d:3f:51:84:bc:59:
7a:64:8d:73:30:ad:83:06:7c:db:db:c1:db:e5:70:
e2:eb:45:67:df:c9:27:64:fe:76:a2:1f:f3:f0:4c:
90:3c:a1:7a:8e:44:6c:13:dc:56:0d:4c:54:c6:9a:
b4:6b:cd:fd:78:96:c4:2b:c2:5c:93:2c:0e:70:48:
38:9a:70:37:33:3e:d5:34:a1:a4:8e:ca:a2:a3:63:
c2:83:e5:c9:81:10:64:be:0d:28:af:3e:b2:4a:c3:
8f:9a:5e:ed:1f:1c:5e:05:b9:74:46:27:86:d2:63:
a2:e5:a8:87:67:a5:fa:f0:ef:06:f6:11:58:ba:4f:
e1:31:50:96:73:15:01:c5:65:77:5c:6b:28:98:9e:
13:bb:90:5f:15:bf:ef:06:01:5f:fa:b6:4c:53:cc:
46:37:be:88:90:ba:28:13:e7:60:ed:c7:d2:e0:5f:
67:b4:94:fc:6e:7c:ec:9c:ee:7c:a4:23:9d:61:f6:
47:00:56:32:b9:e8:f9:98:ea:5c:f3:21:4a:71:d7:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:7B:F0:74:57:E4:C3:EC:66:09:64:A9:80:23:48:43:28:B9:F1
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
6d:54:c4:c5:86:77:58:19:a8:ab:a4:69:eb:16:a3:aa:b0:3c:
11:4f:18:eb:f0:ec:9d:d9:c3:cd:5c:ce:b2:b6:f6:93:45:76:
38:85:4b:59:ab:03:b5:c9:2e:68:5c:69:81:15:87:0b:b7:0c:
6e:39:3d:c0:dc:8f:a5:f6:00:3d:a1:1c:ca:77:5a:df:59:a7:
1b:b2:49:3d:80:15:fe:6e:df:b6:9a:ae:e3:72:5a:2f:00:24:
8d:42:0b:1a:d6:e6:1e:5b:c0:b8:05:53:6c:02:dd:96:fe:5a:
95:60:d4:6f:fb:ba:0b:09:16:fd:3f:ff:20:83:b0:7a:6c:fe:
32:03:62:27:dc:53:d1:8e:e3:f4:36:d1:f8:ab:3a:b7:32:a3:
9e:70:58:53:a1:0b:d1:3a:8e:e8:d7:68:f7:9e:f0:7c:03:5b:
21:17:bf:f9:a4:01:8a:1d:19:4c:58:e2:52:94:1d:63:54:6a:
a2:e5:ff:5f:82:60:13:eb:22:1a:73:7a:64:37:a8:ea:45:6a:
51:73:75:7b:8f:64:06:df:cf:21:42:21:8a:11:13:15:72:aa:
72:db:69:66:06:2b:82:48:de:d6:87:5f:4d:6f:35:26:79:a2:
e2:50:a4:34:7a:e1:71:dc:2f:82:b0:29:8b:78:f8:58:7c:d7:
01:b1:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:17 2025 by rpki-client