Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214323.roa
File: AS214323.roa (raw, json)
Hash identifier: Byv8gfuKUt/FUpjZgEqR3bXkZEK346H57DiUiP4LHr8=
Subject key identifier: 32:E7:44:53:56:AA:3D:05:33:32:3F:A6:6A:9C:1C:4C:5F:8D:EE:6D
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0F3BF24F16D2277FCC1E5D0322DB49FBA44BDB53
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214323.roa
Signing time: Mon 30 Jun 2025 14:59:51 +0000
ROA not before: Mon 30 Jun 2025 14:54:51 +0000
ROA not after: Mon 29 Jun 2026 14:59:51 +0000
asID: 214323
IP address blocks: 2a0a:6044:7900::/48 maxlen: 48
2a0a:6044:7901::/48 maxlen: 48
2a0a:6044:7902::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3b:f2:4f:16:d2:27:7f:cc:1e:5d:03:22:db:49:fb:a4:4b:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:51 2025 GMT
Not After : Jun 29 14:59:51 2026 GMT
Subject: CN=32E7445356AA3D0533323FA66A9C1C4C5F8DEE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:b4:bb:92:c5:0c:ca:d9:93:2f:5f:e2:44:
b9:ed:2a:ba:35:30:71:73:ce:34:35:51:0e:47:73:
5c:b4:e3:a1:54:12:fd:1b:c3:24:6d:20:0e:97:44:
97:83:25:63:12:eb:af:99:45:d7:85:b8:0c:de:6e:
43:37:71:08:0b:ca:38:b0:8d:ba:b3:4f:d3:81:d7:
5c:35:59:53:40:27:5a:d2:60:b7:36:7f:99:11:d7:
6f:01:62:5d:5a:c8:e2:bd:ac:8b:d4:96:a0:a3:cd:
d9:0d:ed:71:b9:c6:cb:a7:4a:2c:64:ed:29:05:c9:
78:2d:65:29:e6:3d:58:b4:05:09:ef:5b:44:fe:17:
8f:6f:f3:14:47:6c:4f:c0:27:47:0e:5a:2b:d0:61:
aa:1d:36:9c:52:25:44:d4:e2:9c:39:ee:a2:da:65:
0f:c4:7f:ce:15:af:4e:e2:0b:10:b2:8d:a8:68:6d:
82:d3:d5:42:65:ce:43:21:cc:5f:dc:7f:0e:9b:94:
7f:59:b1:30:4a:0d:10:2b:7e:9d:a7:84:6c:1e:40:
25:09:31:2f:1d:69:11:15:70:f2:fc:39:ae:ae:53:
50:19:14:37:17:fa:9b:52:35:f4:50:92:63:01:01:
a6:75:bf:89:94:c0:d6:c1:66:d3:5b:3b:53:ae:36:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:44:53:56:AA:3D:05:33:32:3F:A6:6A:9C:1C:4C:5F:8D:EE:6D
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7900::-2a0a:6044:7902:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:7d:1a:4d:22:70:56:6b:07:1a:ee:5b:f8:3a:de:43:89:6d:
a5:5f:18:ec:0d:01:2d:0f:2b:10:bc:5a:40:d7:97:47:b9:2d:
78:11:b3:25:7c:e3:14:20:51:1a:b1:d9:48:6e:bd:04:87:15:
58:1a:0d:7e:a3:bf:75:02:c4:f3:b2:fc:9f:bc:d8:c3:9f:7c:
e8:7d:04:a5:0c:f7:41:d6:39:ab:07:82:de:90:92:23:d3:e3:
10:d9:c8:10:4a:4b:33:17:c7:32:47:e7:b9:b2:ed:f9:33:62:
c8:9b:47:1e:99:b4:f5:fd:c5:90:17:f5:0e:8e:ad:cd:c7:b5:
6b:ab:e1:8f:41:eb:19:c0:aa:ef:6f:02:f1:85:90:db:3c:82:
1c:af:ee:80:f6:32:27:bb:62:86:26:bc:97:93:d4:a7:75:a6:
34:86:92:6c:4f:29:7c:7e:f3:37:01:0b:55:fd:06:9e:27:68:
0d:9e:af:38:0f:9f:cf:e2:a9:93:cc:22:7c:0c:e8:84:be:d4:
a7:d9:a7:30:15:bd:75:83:62:0c:df:a4:d5:c1:23:94:34:f0:
0f:aa:0a:c1:14:22:a7:16:48:9b:1c:bf:18:29:fe:51:57:b6:
24:cc:a8:43:b0:af:ae:46:92:b8:c7:12:bb:18:d7:71:7e:e0:
59:8a:37:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:26 2025 by rpki-client