Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214660.roa
File: AS214660.roa (raw, json)
Hash identifier: uKPQXDNq8tJZ1EeFAh+5jLFlX2+Gm7SGrMhd8L4ASuY=
Subject key identifier: 89:F8:14:40:74:5B:74:66:5F:9F:56:54:44:40:B1:57:8B:2F:FF:F6
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 65E4BE72ED911CC8296761B1D0C1CE2E1CE434E3
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214660.roa
Signing time: Mon 30 Jun 2025 14:59:51 +0000
ROA not before: Mon 30 Jun 2025 14:54:51 +0000
ROA not after: Mon 29 Jun 2026 14:59:51 +0000
asID: 214660
IP address blocks: 2a0a:6044:6600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e4:be:72:ed:91:1c:c8:29:67:61:b1:d0:c1:ce:2e:1c:e4:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:51 2025 GMT
Not After : Jun 29 14:59:51 2026 GMT
Subject: CN=89F81440745B74665F9F56544440B1578B2FFFF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:c3:06:50:67:90:1f:71:1b:bd:2f:5f:59:
84:f5:23:2b:3b:5e:20:61:b9:00:a1:25:9c:c3:bd:
db:cb:4b:db:7c:c1:29:c7:ef:35:0c:08:ac:e9:2a:
4b:ff:eb:29:1c:43:50:0b:f0:46:66:dd:7b:f2:48:
b1:15:18:0b:d5:bc:82:31:80:84:05:b3:ff:63:84:
39:e7:08:cf:54:1a:e3:06:32:b1:85:7e:52:44:d3:
ba:4c:d6:c6:6d:52:e8:a1:b8:04:b2:9a:71:53:62:
81:9c:33:d8:1c:d8:c8:27:66:ee:7d:42:f3:84:1f:
5a:a9:68:2e:62:27:ed:c2:43:0a:e9:be:2a:97:56:
8b:50:79:c5:08:44:9a:4d:2b:99:86:87:f2:de:2f:
88:2d:27:06:65:73:cc:75:38:5d:1d:df:6e:3d:70:
6f:f6:6c:73:dc:40:01:89:8d:a3:1d:f3:7c:0d:bc:
a7:fa:6b:26:04:3c:fc:ff:5f:91:28:e5:f1:a7:b3:
ee:44:0e:5b:30:39:55:f8:69:85:88:2d:e3:74:8b:
0a:7f:60:61:9c:11:54:5b:54:6b:79:39:03:c7:15:
95:0f:8c:0b:4b:b5:fc:8d:84:27:66:40:ce:e8:4b:
7f:4c:14:bc:ed:8d:da:d0:a6:0a:06:d4:98:f0:ac:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:14:40:74:5B:74:66:5F:9F:56:54:44:40:B1:57:8B:2F:FF:F6
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6600::/40
Signature Algorithm: sha256WithRSAEncryption
6b:8c:3f:28:3f:15:40:18:62:27:64:8e:a5:9b:8b:0e:76:8f:
78:a8:9e:f6:ae:7a:bd:57:d8:f4:48:98:7a:5d:b9:70:8c:27:
d8:15:22:6b:dc:a6:71:df:70:24:6f:cc:3f:9c:aa:92:5a:b7:
56:7a:8b:ea:db:4f:2e:d1:d9:57:23:d4:64:3a:66:85:0f:d5:
6c:ab:b8:ad:cd:a3:cc:b9:1e:36:46:01:d6:01:23:77:90:35:
c3:46:80:57:8e:4e:d5:2f:30:04:d9:1b:f6:62:29:6b:61:64:
35:11:a6:2c:4c:52:bb:ca:4a:7f:28:81:0c:51:6a:29:1d:e4:
de:c1:54:3b:9e:29:e0:c0:95:60:40:7c:79:16:33:e7:27:de:
27:f8:88:90:cd:56:c4:a2:6e:6f:2d:d4:9d:3b:0a:90:7a:6d:
ba:c3:23:0e:98:90:91:bf:5a:b3:96:77:63:61:e3:c8:d4:64:
f2:c8:a5:0a:9d:ca:40:e8:b5:dd:38:23:af:34:be:6e:54:fc:
7e:b6:ed:90:23:20:84:fd:3d:3f:de:b5:5c:6a:74:2d:69:d3:
de:f4:77:7f:aa:ae:57:48:83:89:02:1a:2c:98:dc:7f:af:a0:
df:22:45:7b:9b:2d:32:26:87:60:33:3f:31:c6:60:31:78:65:
86:28:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:25 2025 by rpki-client