Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213641.roa
File: AS213641.roa (raw, json)
Hash identifier: uRQHazQpUqjcbzgc3z5MsDKeZJlZoISQ1z7JAYZS0zw=
Subject key identifier: 25:AD:9F:47:20:6F:27:F2:9A:8E:5F:E5:D9:52:CE:EC:68:91:01:DA
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6883787E2E1E34ED710C428AE005BD4D7F554C94
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213641.roa
Signing time: Mon 30 Jun 2025 14:59:40 +0000
ROA not before: Mon 30 Jun 2025 14:54:40 +0000
ROA not after: Mon 29 Jun 2026 14:59:40 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48
2a05:dfc3:fd50::/48 maxlen: 48
2a05:dfc3:fd51::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:83:78:7e:2e:1e:34:ed:71:0c:42:8a:e0:05:bd:4d:7f:55:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:40 2025 GMT
Not After : Jun 29 14:59:40 2026 GMT
Subject: CN=25AD9F47206F27F29A8E5FE5D952CEEC689101DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:62:c9:b0:4a:d5:a5:c2:7b:5e:d3:74:f4:
e1:b4:31:1e:58:47:85:a7:bb:ba:e3:32:8c:e1:2e:
49:6b:7e:08:d9:1c:1e:86:b1:c8:8a:59:dd:e5:31:
50:f1:71:af:fa:69:0a:ed:29:c2:7d:16:9f:c8:99:
6c:33:35:95:e2:a8:f1:24:92:2a:57:50:92:00:2e:
e1:7a:b4:2e:cb:a3:88:c8:43:64:10:c7:22:23:ef:
77:8d:35:61:9e:70:55:f8:79:54:fe:79:27:70:2f:
2c:bf:cc:bf:ab:92:dc:3b:fc:98:07:f4:84:ef:bf:
fa:fd:97:a1:85:0b:5a:63:ac:ce:fc:4b:28:e6:76:
20:51:7a:ab:5a:af:dc:fa:f6:c1:15:69:f1:4a:20:
5f:78:88:64:c4:3a:ca:c5:64:10:cd:49:e4:9d:83:
58:4f:08:35:34:25:c5:0d:99:9d:98:1c:05:5d:3a:
77:93:de:38:d1:54:49:e3:c8:da:44:bb:81:cd:ae:
d9:1c:8d:73:6c:13:90:9f:ea:cb:7a:f4:88:b5:a1:
16:21:b9:bb:56:13:f4:f5:19:f0:97:94:7b:fe:4e:
55:f5:c3:47:6f:2b:05:f2:6f:e3:a0:63:dd:af:6c:
af:a3:2c:00:92:65:1c:27:91:77:e4:90:89:95:51:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:9F:47:20:6F:27:F2:9A:8E:5F:E5:D9:52:CE:EC:68:91:01:DA
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS213641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd50::/44
Signature Algorithm: sha256WithRSAEncryption
7b:56:d8:b6:9a:c7:e3:82:d8:47:09:a5:24:24:cc:b9:70:3b:
7d:9f:9f:15:2d:29:a8:80:31:fb:89:fb:b7:1a:9e:af:ec:71:
9e:8c:25:d7:d7:54:60:26:6c:88:9e:61:ca:96:cc:1d:93:a6:
bf:4a:2a:81:12:b7:38:a7:6d:c1:14:23:4a:f5:c3:6c:fd:fa:
02:7f:d9:a5:b8:dc:cf:4a:07:4f:ce:97:15:3c:68:73:81:0a:
b9:d0:50:3a:b9:ce:e3:c6:2d:71:c7:f9:36:7d:66:b7:97:d5:
a4:2d:e8:e1:48:b2:f6:14:ae:d1:9e:22:21:2c:dd:af:9e:db:
ad:af:f0:2b:ab:c7:fe:3e:c8:06:33:9f:15:c9:9a:31:f3:da:
89:29:b2:1a:51:42:1e:43:45:ea:1e:80:e6:4b:6b:56:35:40:
76:ba:2d:57:3a:8d:1e:75:8b:8c:7f:4e:27:d9:74:db:41:58:
2c:72:8a:d6:87:67:1b:90:66:9f:d3:07:29:13:e1:67:5e:a8:
c4:d8:46:2e:a6:ec:d6:d0:4e:1d:65:3e:34:22:69:a5:f9:17:
3d:7b:ff:63:47:9a:07:ab:b6:f4:9c:aa:d8:78:e3:be:d5:f9:
1a:ce:78:98:d2:62:87:c4:e6:e7:8b:98:0c:d2:d3:56:45:07:
fa:19:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:15 2025 by rpki-client