Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214016.roa
File: AS214016.roa (raw, json)
Hash identifier: ykri5aWcE6zcXcCTTd2pQ482urp8tjSpTc7b1+qd+Bc=
Subject key identifier: 18:AB:66:3E:75:8D:44:48:42:00:5E:01:7E:4A:7E:8D:1F:03:71:49
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 42B217A0713ADF2CE2B9DB834DC378A2F2C4BAC7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214016.roa
Signing time: Mon 30 Jun 2025 14:59:51 +0000
ROA not before: Mon 30 Jun 2025 14:54:51 +0000
ROA not after: Mon 29 Jun 2026 14:59:51 +0000
asID: 214016
IP address blocks: 2a06:1281:5000::/36 maxlen: 44
2a09:54c6:4000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b2:17:a0:71:3a:df:2c:e2:b9:db:83:4d:c3:78:a2:f2:c4:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:51 2025 GMT
Not After : Jun 29 14:59:51 2026 GMT
Subject: CN=18AB663E758D444842005E017E4A7E8D1F037149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:39:08:cf:80:be:18:27:5a:7c:47:04:99:
78:98:0b:8d:4e:aa:b1:1f:b7:25:f3:1d:cd:bc:1e:
96:96:01:db:86:b8:5a:5a:c1:a6:f4:c5:57:3b:b5:
a5:81:b9:4d:2f:6e:f1:2a:e3:10:f0:6d:24:a7:eb:
44:ff:59:70:a5:e6:44:5b:77:29:a2:f7:2f:af:c9:
31:35:84:bd:ea:df:73:cd:f5:b9:4e:be:24:a4:f0:
4b:71:37:d6:5c:c7:ee:59:3c:a3:ec:a4:2f:a1:44:
0a:78:bf:08:eb:12:c9:ae:34:69:73:75:f8:57:d4:
e8:1a:a5:51:58:78:e8:80:a5:86:c4:80:be:ba:b5:
5f:17:ce:ac:ea:fb:ee:58:05:da:1d:d1:98:83:32:
cc:60:9b:6f:cd:55:ff:95:01:6c:b7:46:2d:ac:b9:
f0:94:f6:07:1a:f8:50:4d:be:c8:2c:fc:1a:07:de:
31:fe:93:5d:f5:15:c0:b0:14:28:ca:e0:33:a7:6b:
b1:47:90:c3:e7:d2:fb:74:2d:33:e0:e1:7f:e6:42:
ee:84:f9:34:19:48:b0:55:ea:63:ea:14:b7:6a:b1:
74:b0:31:19:c2:4b:30:0c:30:e0:64:89:92:6a:a4:
97:5d:d5:6d:7d:b3:ce:c7:62:a5:61:8d:3f:f8:28:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:66:3E:75:8D:44:48:42:00:5E:01:7E:4A:7E:8D:1F:03:71:49
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:5000::/36
2a09:54c6:4000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:13:43:2e:44:8a:5b:c6:23:11:5f:5c:25:bd:52:f9:b2:f1:
09:4f:f2:0d:06:0d:8a:0a:d9:d5:49:d6:ff:2d:a7:5d:4f:7c:
be:96:e7:c7:fc:6d:32:37:b6:35:06:eb:8b:c1:78:dc:69:b0:
0c:0b:6b:e7:85:7b:25:54:1f:a4:b1:84:62:59:1e:22:63:40:
88:69:0b:dc:2e:34:80:ad:78:2d:87:67:ff:8d:80:3f:0e:04:
d8:3c:5c:53:ca:76:26:5d:78:75:13:8e:0d:22:f3:56:34:bb:
aa:5b:1e:da:67:fc:8b:e2:d6:b2:e3:e9:4b:b7:e8:8d:61:40:
6e:af:2e:2c:76:fe:93:b3:81:bd:ea:6b:cc:19:ae:1d:41:88:
18:38:63:a5:44:2a:b4:eb:cb:1e:f6:4b:a8:5c:ca:ce:57:b1:
da:9b:a3:4b:7c:71:1c:a7:ce:2d:44:7b:9a:48:1f:68:68:3a:
76:bd:b6:e6:fa:5b:b5:94:1e:7b:fc:60:65:39:51:8e:3d:7a:
4c:5a:c3:16:47:f5:40:49:6f:e7:3a:80:5b:d2:c0:79:b0:f8:
73:74:55:08:43:26:5c:8e:69:bc:5a:e0:d5:50:68:c8:f5:a1:
58:45:13:86:a4:5f:90:82:b2:b0:9b:39:ec:6f:6c:22:0d:3c:
6a:ed:33:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:17 2025 by rpki-client