Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa
File: AS214561.roa (raw, json)
Hash identifier: TtVRsQIpE97xnP88uSwubO+VSOC4Tw4GcdhAXD/Gcdk=
Subject key identifier: 8C:07:C4:CF:DA:6A:D4:0E:C9:C5:D8:17:45:06:92:E5:2D:E8:23:8C
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 0497BC45A2AE82479C1D6B7C32687AAED2F57DE2
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa
Signing time: Mon 30 Jun 2025 14:59:46 +0000
ROA not before: Mon 30 Jun 2025 14:54:46 +0000
ROA not after: Mon 29 Jun 2026 14:59:46 +0000
asID: 214561
IP address blocks: 2a05:dfc3:fd60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:97:bc:45:a2:ae:82:47:9c:1d:6b:7c:32:68:7a:ae:d2:f5:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:46 2025 GMT
Not After : Jun 29 14:59:46 2026 GMT
Subject: CN=8C07C4CFDA6AD40EC9C5D817450692E52DE8238C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:3e:91:5d:5c:dd:10:dc:c5:4f:41:24:65:
47:70:4c:cf:0f:a5:e3:c3:fe:88:b3:a4:5d:cd:67:
50:99:64:5c:8f:ab:18:33:05:e7:f7:4d:0b:e7:b6:
4e:a1:72:d0:c6:e3:4c:b9:d2:d2:b0:5e:b7:fb:06:
25:89:e4:99:b0:5e:e5:e3:7e:50:8d:e2:13:f8:4a:
76:8f:7d:45:3b:49:0a:51:dc:39:6a:17:33:d9:49:
4b:97:4d:78:e0:85:f8:f9:0d:4a:eb:9b:e3:8c:17:
fa:1a:47:c7:ad:f9:57:a8:0c:6e:55:7c:c1:e4:0e:
6e:fc:59:67:c7:d8:ff:6c:29:85:7b:08:c2:85:a4:
32:3f:f4:94:9b:87:ca:b1:67:a4:05:ad:9b:af:28:
b1:96:93:0d:11:35:e9:32:93:44:fd:54:ef:84:6c:
da:a4:a6:a6:80:eb:a5:62:bf:5c:45:fd:80:e3:89:
65:0a:60:11:e6:38:d1:f5:bb:e8:4f:b3:03:29:37:
1c:79:0e:dd:55:e5:04:27:71:ba:ee:18:10:52:64:
e1:e0:de:0d:01:b4:64:90:d5:55:b7:a6:f0:ed:4b:
a4:d7:d1:ca:0c:05:b9:8b:67:55:b3:45:d7:6d:52:
88:29:d6:2d:ae:60:3d:5a:96:df:fa:df:98:4c:3f:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:C4:CF:DA:6A:D4:0E:C9:C5:D8:17:45:06:92:E5:2D:E8:23:8C
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd60::/44
Signature Algorithm: sha256WithRSAEncryption
3c:4b:81:cb:ff:19:7c:28:c5:0f:52:a6:3c:92:db:e8:1d:c5:
1d:3f:21:ff:87:66:39:3e:e0:2b:a9:8e:98:2d:4c:83:25:c8:
f5:fa:23:6c:4c:b9:fb:68:ab:b5:32:4a:63:51:48:d6:aa:20:
e2:0a:ba:25:f7:56:2c:f1:b2:a0:67:87:4e:4c:d1:8f:b0:97:
c0:b9:1f:b4:e8:29:df:de:bc:f3:20:a1:cf:d5:66:5f:e2:5c:
e4:90:09:98:f2:26:47:2b:81:20:44:07:19:83:31:37:d2:5a:
74:d9:84:2b:dc:db:2f:28:ca:55:d1:54:8b:61:25:32:0d:8b:
ea:55:cb:c1:2b:24:1b:63:51:c7:6a:b8:ef:ce:f2:c3:70:13:
fe:b7:ff:07:7f:85:6f:da:93:e3:b3:62:eb:2e:a5:7b:5a:8c:
7f:00:b1:73:46:f3:c9:68:48:e8:e6:4f:9f:32:0c:ca:7a:99:
e2:1b:6c:f9:c4:4c:d6:38:0c:8e:bb:86:a3:0a:b9:b3:d4:f7:
85:ab:13:67:09:e3:f8:69:ba:83:79:3e:61:68:9d:a0:5d:db:
76:b6:3a:2b:60:a4:4d:41:7d:a4:b4:07:5b:54:01:e5:31:f3:
e8:cf:8a:7a:de:4c:bb:a5:3f:4a:b7:c7:65:2c:cd:10:6d:95:
ce:0a:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:15 2025 by rpki-client