Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214299.roa
File: AS214299.roa (raw, json)
Hash identifier: KBPUcDpgz9Yq0HRSllMy4py48vvdijH0ZKjQQGgMP5M=
Subject key identifier: A5:F3:F6:3E:09:14:D9:4B:1C:30:9F:7D:F0:B1:9F:28:27:72:80:85
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 20DEA8174B2F031BE7B1F6D5F4B21C65B9CEA382
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214299.roa
Signing time: Mon 30 Jun 2025 14:59:41 +0000
ROA not before: Mon 30 Jun 2025 14:54:41 +0000
ROA not after: Mon 29 Jun 2026 14:59:41 +0000
asID: 214299
IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52
2a05:dfc3:fd40::/48 maxlen: 48
2a09:54c7:1000::/36 maxlen: 48
2a09:54c7:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:de:a8:17:4b:2f:03:1b:e7:b1:f6:d5:f4:b2:1c:65:b9:ce:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:41 2025 GMT
Not After : Jun 29 14:59:41 2026 GMT
Subject: CN=A5F3F63E0914D94B1C309F7DF0B19F2827728085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:71:a4:c2:93:60:fe:04:13:a8:f0:fa:63:
8f:61:63:a8:4f:9f:88:a2:da:c9:4f:51:85:01:ae:
8b:46:83:cc:ae:2d:f2:d3:13:ac:10:f4:f9:7f:51:
8f:31:4c:7a:4d:3b:04:e3:49:c3:2b:a4:f6:8d:ca:
dc:0b:d6:bc:78:78:15:37:7b:0f:6c:b7:49:70:23:
63:cf:7b:52:b5:d5:3f:59:b2:11:dd:91:cb:9c:f3:
4e:af:6f:bb:b3:53:09:cd:fb:90:c2:40:84:cf:23:
91:14:e2:dc:dd:da:3a:17:e5:0c:41:da:ee:82:f5:
0d:db:4c:39:4a:27:9e:8e:6f:d4:1a:a3:65:aa:3d:
84:82:9a:cc:a6:57:e6:b3:41:ae:f4:fe:23:b9:b2:
2c:65:80:8c:0a:0c:cc:98:20:17:0a:4f:59:a0:0e:
53:47:cc:36:ea:52:26:dd:58:d0:89:6c:90:21:e0:
2e:be:54:5b:3b:35:53:3f:01:67:f5:40:58:07:07:
ec:16:17:e0:e3:26:1a:67:ae:5e:0e:85:d8:f0:39:
2b:d3:e9:c3:6e:2f:b6:9c:d0:82:75:fc:e0:43:30:
3b:9b:ec:a7:b4:be:1b:38:ce:0f:54:97:45:06:23:
1f:c8:1d:07:26:ea:2c:75:26:9c:89:d5:4f:c7:87:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:F6:3E:09:14:D9:4B:1C:30:9F:7D:F0:B1:9F:28:27:72:80:85
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd40::/44
2a09:54c7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
31:10:28:38:2c:61:79:10:8f:df:cf:d1:77:d8:0b:8e:4b:32:
ec:31:e0:31:1d:3c:e8:61:9a:df:bb:23:dc:b5:76:93:69:e1:
0c:d1:4d:3c:06:e2:34:2d:73:1b:07:d1:71:84:43:8f:c8:e7:
14:4e:34:21:7f:37:a9:82:1f:85:aa:bc:90:84:14:db:25:7a:
60:24:a1:b3:7b:78:2d:ca:f8:93:b2:a7:68:fe:93:13:72:bf:
72:66:c3:9a:61:4f:46:47:bb:26:9c:96:b3:58:36:40:b4:79:
02:e2:73:60:43:a8:5d:6d:c7:df:0b:a8:75:9c:d0:37:36:59:
c2:78:6a:e8:bc:27:8a:9d:b8:1f:92:fb:c7:aa:45:85:24:8b:
0e:94:4a:bb:af:f1:60:21:8f:a3:e3:b9:7f:4c:38:8b:fd:b9:
6d:0f:65:d2:3d:1c:6b:93:9c:42:fb:66:fa:92:ae:8f:9b:17:
82:3e:50:d7:00:f6:5f:91:91:08:51:fd:3b:ce:60:c8:e8:f9:
7c:f8:b1:3d:24:a9:78:78:15:a6:74:b4:1e:94:40:5a:1c:c9:
d8:30:06:f2:42:fd:e1:96:f9:b7:54:21:78:b7:57:7c:fe:67:
f6:8a:54:98:f7:ba:98:08:f7:3a:9b:da:35:86:d7:db:c0:38:
a4:e4:7b:b9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUIN6oF0svAxvnsfbV9LIcZbnOo4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDFaFw0yNjA2MjkxNDU5NDFaMDMxMTAvBgNV
BAMTKEE1RjNGNjNFMDkxNEQ5NEIxQzMwOUY3REYwQjE5RjI4Mjc3MjgwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXXGkwpNg/gQTqPD6Y49hY6hP
n4ii2slPUYUBrotGg8yuLfLTE6wQ9Pl/UY8xTHpNOwTjScMrpPaNytwL1rx4eBU3
ew9st0lwI2PPe1K11T9ZshHdkcuc806vb7uzUwnN+5DCQITPI5EU4tzd2joX5QxB
2u6C9Q3bTDlKJ56Ob9Qao2WqPYSCmsymV+azQa70/iO5sixlgIwKDMyYIBcKT1mg
DlNHzDbqUibdWNCJbJAh4C6+VFs7NVM/AWf1QFgHB+wWF+DjJhpnrl4OhdjwOSvT
6cNuL7ac0IJ1/OBDMDub7Ke0vhs4zg9Ul0UGIx/IHQcm6ix1JpyJ1U/Hh2arAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUpfP2PgkU2UscMJ998LGfKCdygIUwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjE0Mjk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKgXf
w/1AAwYEKglUxxAwDQYJKoZIhvcNAQELBQADggEBADEQKDgsYXkQj9/P0XfYC45L
Muwx4DEdPOhhmt+7I9y1dpNp4QzRTTwG4jQtcxsH0XGEQ4/I5xRONCF/N6mCH4Wq
vJCEFNslemAkobN7eC3K+JOyp2j+kxNyv3Jmw5phT0ZHuyaclrNYNkC0eQLic2BD
qF1tx98LqHWc0Dc2WcJ4aui8J4qduB+S+8eqRYUkiw6USruv8WAhj6PjuX9MOIv9
uW0PZdI9HGuTnEL7ZvqSro+bF4I+UNcA9l+RkQhR/TvOYMjo+Xz4sT0kqXh4FaZ0
tB6UQFocydgwBvJC/eGW+bdUIXi3V3z+Z/aKVJj3upgI9zqb2jWG19vAOKTke7k=
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:12 2025 by rpki-client