Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212085.roa
File: AS212085.roa (raw, json)
Hash identifier: nVTl89xmmo5JsIJ8V2dlBNnujb0WRQ5PBLTXgp9NplE=
Subject key identifier: F7:80:EF:4C:F8:82:A6:20:E5:D0:23:00:15:19:EE:DB:B5:FC:27:22
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0B3C2965EDECC434001C4BCFCE124A95B9FF2A04
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212085.roa
Signing time: Mon 30 Jun 2025 14:59:39 +0000
ROA not before: Mon 30 Jun 2025 14:54:39 +0000
ROA not after: Mon 29 Jun 2026 14:59:39 +0000
asID: 212085
IP address blocks: 2a0a:6044:ab00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3c:29:65:ed:ec:c4:34:00:1c:4b:cf:ce:12:4a:95:b9:ff:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:39 2025 GMT
Not After : Jun 29 14:59:39 2026 GMT
Subject: CN=F780EF4CF882A620E5D023001519EEDBB5FC2722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:01:bb:ec:f6:3a:26:f2:1b:d9:14:d9:93:
ce:c4:5c:5d:61:02:19:74:67:ac:21:1c:ef:72:6a:
cf:56:40:14:59:40:9d:41:67:d7:72:74:4d:8f:bf:
9f:99:ad:d5:16:c6:bc:22:b5:3a:2b:de:c7:f4:18:
47:25:46:e8:8a:47:29:58:47:13:f1:39:88:42:4b:
7b:ce:bd:b5:44:71:2e:79:6b:8d:80:79:17:bd:0a:
8e:a0:7a:3f:ab:e8:92:b7:b5:0f:e9:5f:ce:02:dc:
65:ac:f8:27:5a:61:74:67:e2:ad:e5:c4:96:cb:4a:
a5:51:00:b9:1e:ee:64:03:a3:9e:90:d3:35:50:31:
9f:ca:aa:2f:ce:b6:bb:00:7e:da:fd:6e:24:b9:c4:
cd:2d:5f:aa:83:90:43:18:6c:17:aa:b6:c4:df:25:
88:d0:0f:82:ca:3d:72:a3:7c:a4:fa:d5:19:86:9d:
86:cf:75:8c:9a:01:5e:04:22:eb:c0:b9:0c:8c:5b:
d9:3a:15:b0:59:37:cf:15:65:cf:87:10:31:14:4c:
72:90:33:34:49:86:1d:ea:c5:e7:ac:93:85:e6:a4:
de:50:09:0c:a5:7e:62:6d:99:bd:e0:f3:a9:ea:c9:
73:72:8d:38:7c:4d:78:1d:1c:76:35:9d:8d:49:d0:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:EF:4C:F8:82:A6:20:E5:D0:23:00:15:19:EE:DB:B5:FC:27:22
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS212085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ab00::/40
Signature Algorithm: sha256WithRSAEncryption
0f:ef:2d:98:03:79:22:93:05:dd:e8:d2:2c:d0:2b:f5:ae:61:
83:40:16:fe:f2:16:c9:36:39:7a:e2:f4:09:4b:0a:83:7f:a6:
59:ae:6f:e3:d2:86:79:82:c6:8a:a6:91:01:ac:50:3f:58:b0:
3e:a5:2e:8a:9c:2c:c6:02:32:d6:cc:40:c4:09:3b:94:aa:3b:
ef:fa:e2:5a:3c:bf:c9:29:d6:94:a5:00:6b:4b:5d:12:34:c3:
50:c8:84:8b:61:01:e1:ee:98:65:6a:b6:76:b8:09:a0:13:d3:
6f:76:32:bd:42:d1:90:11:96:3c:90:4e:30:fd:da:1d:87:43:
4a:0f:62:0e:1e:21:38:35:ef:de:65:1c:ec:b2:a1:05:1f:bb:
2e:df:ec:98:b9:45:ab:5b:d6:2e:19:cf:3a:5c:65:82:1c:3a:
42:5f:1d:82:5f:46:20:89:a7:a5:9f:54:88:3d:92:9a:43:fc:
73:a1:46:b2:6d:bd:e6:e1:41:2f:69:a4:9a:11:fa:03:95:b6:
da:e4:b6:d6:3f:a8:30:fd:18:85:64:26:d6:6a:21:d8:be:fc:
d1:85:47:bb:66:f0:91:ea:be:23:42:d5:21:50:23:23:d2:b6:
e0:d2:0a:ff:d2:10:7d:e4:26:a1:0e:80:8f:1f:4b:ce:bf:9a:
c6:76:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:21 2025 by rpki-client