Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214040.roa
File: AS214040.roa (raw, json)
Hash identifier: SpBzxbUSz9epmn6+KtsMrOO+X4nodVxNZRBws81Mq2Y=
Subject key identifier: 70:A7:33:74:81:40:5E:0D:66:E5:C4:13:37:CB:9E:E9:EE:6C:06:1A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 184E9B851952F1EB63970B2F285441BC8586D080
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214040.roa
Signing time: Mon 30 Jun 2025 14:59:39 +0000
ROA not before: Mon 30 Jun 2025 14:54:39 +0000
ROA not after: Mon 29 Jun 2026 14:59:39 +0000
asID: 214040
IP address blocks: 2a09:54c6:c000::/36 maxlen: 44
2a09:54c6:e000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4e:9b:85:19:52:f1:eb:63:97:0b:2f:28:54:41:bc:85:86:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:39 2025 GMT
Not After : Jun 29 14:59:39 2026 GMT
Subject: CN=70A7337481405E0D66E5C41337CB9EE9EE6C061A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:a5:f3:d9:ed:0f:12:1b:9b:5d:49:03:df:
9f:24:f5:0a:22:e6:b8:ac:9f:24:15:bb:fb:43:d5:
ed:7a:ed:c4:9c:fe:36:43:82:8a:0d:e0:a2:34:af:
7b:69:94:d3:83:c6:41:e1:05:c3:af:5b:ab:3c:c4:
a9:5f:40:6a:8e:d9:70:3e:a4:1a:a7:80:aa:11:63:
52:6d:e8:fd:f0:63:ea:17:e0:85:92:c9:3e:7e:47:
1a:ae:72:84:3b:2c:6d:ea:20:b8:16:53:96:87:9e:
cc:81:24:2d:48:6f:4e:0b:19:01:2b:21:6e:e8:f3:
32:e4:89:ec:87:3f:81:99:22:bf:89:1c:16:6e:5b:
a7:b1:0e:19:0b:44:a3:1b:37:3c:7a:88:71:9e:89:
0c:db:0e:8a:5c:2d:6f:57:f6:69:08:0e:c3:fd:e3:
de:58:70:6b:06:90:c7:05:05:9f:c0:ae:d5:bd:55:
69:58:10:83:92:68:cb:e8:99:5a:dc:83:bb:15:ad:
13:57:cc:4b:0e:4d:74:72:89:68:f7:87:fe:24:c5:
0e:e5:0b:d2:4c:c5:37:1b:52:51:c1:82:11:b9:f9:
d3:33:88:cf:03:bb:1c:5a:58:a9:dc:8d:98:f6:bd:
38:46:c3:45:a6:a4:47:ff:82:70:bf:95:91:6c:aa:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:33:74:81:40:5E:0D:66:E5:C4:13:37:CB:9E:E9:EE:6C:06:1A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:c000::/36
2a09:54c6:e000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:b5:98:73:86:e1:83:18:c1:20:c1:c7:8f:e0:6c:3b:69:63:
37:7e:3a:2e:fd:b0:6c:60:38:37:df:d7:b1:97:7f:d9:73:2c:
a4:fe:f7:f3:34:f3:d7:44:34:17:e9:ba:50:9a:03:f5:64:0a:
c2:46:25:18:f9:15:b2:7a:fc:1a:d3:2e:88:cf:d4:e8:79:6b:
dd:20:e5:76:13:4d:4e:cf:0f:07:92:aa:2f:01:7c:ba:03:c8:
3a:3c:51:d9:49:c5:26:3d:73:ab:3c:82:33:6b:72:10:aa:97:
b3:c0:fd:6e:6d:d0:61:fb:c6:5e:f3:2f:de:cf:7c:0c:3c:72:
4d:c0:8e:c7:10:de:d8:5f:bf:ff:a8:5a:84:c8:8c:32:13:6b:
28:35:46:67:0f:1c:8f:37:93:c5:8d:79:fa:ba:dd:dc:be:c1:
96:44:47:91:37:0b:e0:d7:9d:05:1a:a5:25:f0:99:35:25:54:
b1:b6:59:1a:8a:d3:27:ee:2b:eb:5e:18:e2:d2:9e:5e:4b:4b:
20:19:a6:55:94:96:3d:70:8d:1c:90:ab:51:87:2f:d9:6e:38:
a4:cd:63:a8:28:bb:02:1c:3a:01:46:e3:26:52:33:bb:46:eb:
5b:1e:81:8f:7d:65:b4:0e:e0:f0:30:0c:2e:52:37:65:6e:5e:
fb:7c:43:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:24 2025 by rpki-client