Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214223.roa
File: AS214223.roa (raw, json)
Hash identifier: 57TgV2avDJPy0YERuYMVZk3VSI7aFjNg9FBGigtSBy0=
Subject key identifier: 3E:1B:66:D9:28:E4:47:EB:C1:A9:20:BB:39:17:F4:02:83:E5:84:C6
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 66C7A67B283534B67E4F607A73C63D7E859DD31C
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214223.roa
Signing time: Mon 30 Jun 2025 14:59:43 +0000
ROA not before: Mon 30 Jun 2025 14:54:43 +0000
ROA not after: Mon 29 Jun 2026 14:59:43 +0000
asID: 214223
IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48
2a0a:6044:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c7:a6:7b:28:35:34:b6:7e:4f:60:7a:73:c6:3d:7e:85:9d:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:43 2025 GMT
Not After : Jun 29 14:59:43 2026 GMT
Subject: CN=3E1B66D928E447EBC1A920BB3917F40283E584C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:3a:3b:0b:2e:fc:07:38:c0:d3:97:f8:c5:
ad:fc:81:83:ba:ef:52:cc:d9:e6:f7:e5:07:93:87:
4a:6d:bf:c2:51:3c:76:69:f7:fd:c4:9c:87:f3:01:
f9:8b:1c:d7:cb:a2:cd:56:0a:a5:e4:13:5f:04:07:
90:91:90:e5:2f:d2:59:7a:03:7b:ae:10:94:57:97:
ba:31:69:84:ab:bc:7f:5a:1a:e7:18:36:86:23:43:
5c:d7:35:31:84:98:1b:1f:b7:4c:ae:d0:84:4b:f2:
11:1a:37:d9:82:e6:cd:92:80:1e:e2:f5:9a:12:cd:
d1:63:db:68:b3:61:44:0d:54:05:d2:e1:eb:04:fd:
fa:ff:04:ef:ce:24:8e:f9:71:95:b3:e9:14:73:e5:
4e:91:d4:ab:fe:07:58:05:cd:c1:a8:c9:e6:cf:e2:
6c:4b:5f:ef:c9:54:d1:4d:9a:3b:90:eb:40:d5:d3:
76:9d:bb:fa:de:5b:65:89:17:32:9a:68:d5:0f:e2:
6b:f7:e2:73:57:fb:e4:1c:96:f5:68:95:ce:98:7d:
d5:27:3b:26:1f:16:a6:9d:33:8e:eb:02:25:d1:8e:
74:5f:74:c0:be:f4:92:c9:d9:73:5e:b6:e1:af:63:
1f:a3:4d:81:50:1b:76:cf:08:23:34:df:cb:ce:a7:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:66:D9:28:E4:47:EB:C1:A9:20:BB:39:17:F4:02:83:E5:84:C6
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fa00::/40
2a0a:6044:6400::/40
Signature Algorithm: sha256WithRSAEncryption
7e:74:31:db:15:cd:05:76:1f:05:54:4c:30:74:38:b6:ef:4f:
37:65:bf:4e:33:5d:90:0e:91:59:36:42:9d:ca:f2:ae:b8:03:
bb:f4:d7:f2:ed:da:09:90:59:a0:b8:16:d5:84:5c:40:16:5c:
65:58:87:47:bf:7c:d6:9b:f3:cc:62:bf:dd:88:3b:4a:15:76:
47:16:16:2c:7b:7f:5b:ef:fd:c4:3a:88:b8:6b:85:94:08:25:
c9:d7:fe:74:a6:c3:61:90:26:98:a0:ee:c9:fe:b7:54:dd:f9:
66:d8:ea:bd:26:07:c7:e9:ce:7f:62:9e:a4:78:4d:80:31:33:
81:bb:b4:e0:d2:ac:7f:74:bf:e7:c9:ac:56:9c:2f:05:77:23:
e7:d9:e6:2b:d1:4e:db:66:9e:4a:a9:96:dc:15:32:a8:c0:e8:
6a:18:cd:c7:da:c8:6b:f0:a0:64:e4:b4:ce:4c:b5:65:c2:bd:
1b:e2:7f:bd:d3:ec:ad:8e:f7:6d:4b:c8:8d:68:86:5b:87:b3:
3b:30:fd:cd:9c:d6:90:54:45:13:f3:c3:73:f3:3a:06:59:fb:
a3:86:80:84:3e:2b:71:4e:69:47:43:fe:2e:75:19:07:1f:3d:
ef:a6:ac:0d:f7:9d:5a:ee:94:ed:8d:c1:a3:5d:d2:99:0c:91:
bc:36:ac:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:20 2025 by rpki-client