Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214172.roa
File: AS214172.roa (raw, json)
Hash identifier: AHCyeXOJoaIle+Y2WfGCqXOcpdF9WJtQ6XbB+Pbpn60=
Subject key identifier: CA:D9:6C:8E:7B:A7:A2:8C:CC:AC:C3:A9:A1:3D:37:9E:A9:A7:25:16
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 070A52E5B3D5F4C57C35A86605650DBEE84BC040
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214172.roa
Signing time: Mon 30 Jun 2025 14:59:49 +0000
ROA not before: Mon 30 Jun 2025 14:54:49 +0000
ROA not after: Mon 29 Jun 2026 14:59:49 +0000
asID: 214172
IP address blocks: 2a0a:6044:6200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0a:52:e5:b3:d5:f4:c5:7c:35:a8:66:05:65:0d:be:e8:4b:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:49 2025 GMT
Not After : Jun 29 14:59:49 2026 GMT
Subject: CN=CAD96C8E7BA7A28CCCACC3A9A13D379EA9A72516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:0a:8c:a0:46:f7:39:99:cb:13:5c:48:2f:
c4:64:c5:a7:75:ce:08:0d:fc:1a:ea:db:2c:b2:b3:
b6:7e:2e:a1:dd:1c:dc:e2:e8:79:c1:68:62:54:3b:
b7:ae:ce:3c:51:da:e9:f4:30:df:34:6b:3f:4e:27:
87:8f:ca:e7:93:e5:ca:6c:81:4e:be:c8:d6:21:83:
bf:55:36:de:40:aa:be:89:ad:9e:f0:bf:f0:5c:61:
6d:3b:bd:0d:b7:d8:d4:ce:3d:07:b3:59:a1:a3:f7:
7f:16:4b:73:fd:91:5c:60:35:77:77:9c:7a:ab:b0:
9b:a6:d9:7e:ef:2e:84:fd:70:cb:06:26:21:39:63:
ac:c2:eb:73:01:b7:52:19:dc:dd:f5:25:47:0d:c4:
68:1e:63:4e:22:fa:c4:cd:8b:11:ee:05:81:b8:e8:
b7:b0:58:97:51:5b:62:b0:b7:94:e7:d7:19:97:76:
e3:36:9d:cc:f3:28:bf:ed:f0:15:a1:bf:47:bf:70:
00:42:7e:7a:88:46:d0:43:8b:72:a6:21:58:37:87:
ac:8f:d5:64:d9:83:24:5b:62:ba:47:71:3a:ff:d5:
15:29:e1:9b:cd:ef:58:40:40:bf:9a:61:37:5a:30:
c0:86:70:c7:bc:bc:fe:de:b3:34:2a:06:0a:12:13:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:6C:8E:7B:A7:A2:8C:CC:AC:C3:A9:A1:3D:37:9E:A9:A7:25:16
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214172.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6200::/40
Signature Algorithm: sha256WithRSAEncryption
22:91:67:91:0a:e2:b5:2c:bd:07:96:f1:f8:4c:9f:c9:f8:42:
53:14:e5:70:17:f9:db:b2:d7:3c:1e:55:1f:6f:cb:5e:2a:00:
f1:7e:ab:11:92:a2:0a:cd:84:68:67:82:57:df:15:a1:09:8c:
48:2b:45:91:bf:4c:3a:4b:8d:96:c0:6b:10:56:ff:58:bc:5e:
25:f8:5a:fe:3d:fb:45:b5:7a:81:9b:2b:3c:e0:ab:f3:20:9e:
2a:11:12:fc:fb:55:59:49:c5:3b:20:ef:dc:27:71:fd:f6:b8:
ae:f2:c6:d9:02:1e:07:5c:2e:82:57:9a:83:fe:eb:47:5f:2f:
b1:ff:c7:fa:eb:79:60:2c:22:dc:95:00:f3:bc:e7:1c:cd:5b:
d1:f0:e5:ef:57:21:3e:d9:66:4a:e0:88:58:fa:7b:01:69:46:
dc:22:44:d2:0e:95:e9:23:22:12:93:51:a4:ab:3b:d8:4b:70:
b6:32:a7:6e:54:bb:54:87:04:b4:4a:16:58:47:cf:9f:38:39:
8a:25:2a:80:f5:33:d9:ff:18:fb:df:ca:7d:9e:45:7b:27:09:
51:c9:cb:73:d1:78:14:7d:30:17:6a:2c:28:20:47:84:ac:62:
4e:21:6c:56:96:32:82:d7:ee:ff:ac:61:77:5a:b5:70:f8:09:
68:da:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:27 2025 by rpki-client