Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211780.roa
File: AS211780.roa (raw, json)
Hash identifier: H0wY9q9/KgDjoAmR8kSYicbS6lDfKMpeoGF3iWYE1Jo=
Subject key identifier: 24:DC:EE:30:FB:EF:0C:83:3E:E9:01:FE:B5:47:95:71:20:DD:34:43
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 153E9AC79F08BF2DD1DFA9D154B1A207AEC4C5D5
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211780.roa
Signing time: Mon 30 Jun 2025 14:59:42 +0000
ROA not before: Mon 30 Jun 2025 14:54:42 +0000
ROA not after: Mon 29 Jun 2026 14:59:42 +0000
asID: 211780
IP address blocks: 2a05:dfc3:fd20::/44 maxlen: 52
2a05:dfc3:fd20::/48 maxlen: 48
2a05:dfc3:fd24::/48 maxlen: 48
2a0f:6280:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3e:9a:c7:9f:08:bf:2d:d1:df:a9:d1:54:b1:a2:07:ae:c4:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:42 2025 GMT
Not After : Jun 29 14:59:42 2026 GMT
Subject: CN=24DCEE30FBEF0C833EE901FEB547957120DD3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:d8:7e:8a:60:cf:da:db:fb:e1:06:20:75:
a5:12:46:19:de:ef:99:fd:10:0a:ab:30:b2:7a:30:
66:6c:41:4a:a5:61:02:f3:28:32:be:ea:01:31:8e:
0a:74:f9:44:4f:9e:8e:c4:ee:7b:c3:50:18:a3:8c:
a2:4e:8b:d9:89:a3:65:5c:e0:3b:95:7f:b4:11:c6:
99:c4:ed:c8:d2:5e:66:08:71:33:df:7e:ce:fa:99:
40:6d:b8:2e:73:71:c2:6f:fb:bc:b8:fc:4e:e6:0d:
30:89:41:cb:26:79:ee:d9:ee:cb:2f:79:93:a1:d5:
9f:9e:5d:ef:07:d2:bd:9b:b2:63:63:81:f0:87:49:
b0:b0:40:88:66:d4:83:18:0f:7b:e0:95:ba:5f:3a:
15:fa:be:be:36:13:ba:7d:69:8a:11:be:4d:5c:a0:
16:76:fa:a7:ff:de:0b:8d:54:ff:4f:da:90:09:5e:
d2:d2:77:5b:8d:ee:72:88:1d:fc:d6:a0:d8:a2:48:
38:be:6e:20:4c:b2:f9:a1:9a:4b:07:93:dd:27:4c:
87:79:85:1a:95:ad:7c:67:cb:0d:b0:59:11:ab:b6:
70:08:02:51:50:5c:2e:70:44:ec:e3:4c:e1:af:77:
f9:f7:a8:df:10:f5:be:53:f8:06:d1:a0:f6:94:88:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:EE:30:FB:EF:0C:83:3E:E9:01:FE:B5:47:95:71:20:DD:34:43
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS211780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd20::/44
2a0f:6280:1000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:e1:d4:53:45:ed:cb:90:cc:36:e7:a8:64:0b:92:19:f9:2d:
d4:df:4f:fc:e4:4b:cd:26:ac:0a:21:5d:e0:8e:01:ba:a3:e3:
d4:01:0c:b4:6e:29:40:cd:16:d1:72:05:1a:5a:62:5f:85:e7:
4d:45:22:2d:43:ed:e8:c1:40:d8:1a:81:20:5d:c8:d2:2b:81:
81:9a:bb:ed:11:63:18:fc:e2:8f:1d:57:a4:0f:df:ae:48:e7:
32:15:b1:d0:2c:01:9c:fc:f7:29:86:36:2f:95:19:5d:e1:fd:
2d:d9:64:44:2a:b2:be:e1:bd:97:86:b5:37:f3:11:4e:f6:9c:
a1:be:49:23:94:8a:9e:1f:30:15:15:53:b4:4c:bd:91:96:ea:
ea:12:77:95:d8:c3:16:80:5c:95:6a:c5:fd:2c:3f:93:87:e1:
83:06:9a:e2:1e:b8:17:2c:fd:55:65:ea:f7:c2:35:59:a0:81:
66:23:06:ca:9b:a4:63:ef:8a:c8:e7:79:36:2d:12:3a:c4:e7:
e0:bc:dc:54:03:fc:0f:f1:31:c7:fd:2f:af:61:97:a4:8d:00:
0a:b3:76:68:30:1d:ca:11:3a:8c:92:e5:fc:f7:0e:a6:53:ff:
f7:9b:1d:7b:00:aa:ab:bb:37:86:5b:f4:be:2a:7f:84:78:45:
d0:e8:bd:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:20 2025 by rpki-client