Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214675.roa
File: AS214675.roa (raw, json)
Hash identifier: 5EkHWPiHKEr7tgvCKQANaEpsrOxf/NGEumHr1OQvXWE=
Subject key identifier: A4:D4:E3:27:D5:B0:CD:30:47:80:01:55:4E:3B:60:CB:F0:03:E1:AD
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4B9D4F4BE43BBDBF70482F244D051296262E9820
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214675.roa
Signing time: Mon 30 Jun 2025 14:59:41 +0000
ROA not before: Mon 30 Jun 2025 14:54:41 +0000
ROA not after: Mon 29 Jun 2026 14:59:41 +0000
asID: 214675
IP address blocks: 2a0a:6044:aca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9d:4f:4b:e4:3b:bd:bf:70:48:2f:24:4d:05:12:96:26:2e:98:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:41 2025 GMT
Not After : Jun 29 14:59:41 2026 GMT
Subject: CN=A4D4E327D5B0CD30478001554E3B60CBF003E1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:14:21:e2:da:35:4a:21:6b:bf:3f:f9:99:
1e:63:8c:c0:6f:fa:6e:dd:42:a4:45:42:e4:b8:77:
b6:57:30:34:27:c0:8d:b6:ae:9a:38:31:86:53:c7:
f5:08:33:f1:a9:8f:dd:ad:ee:b2:d7:6b:bd:c0:2c:
a0:06:c9:9b:18:af:78:5e:fb:9c:ff:62:9d:78:d0:
21:5e:88:1c:66:bd:0d:e3:b6:17:3c:62:70:33:ef:
09:6b:f2:fc:47:a6:06:87:a7:34:ee:7c:fd:8a:a0:
a0:61:a1:43:82:19:10:20:d8:72:b8:96:aa:b4:c6:
74:a4:14:3a:3c:4d:9e:5b:44:fa:68:57:a2:6d:d9:
30:5f:74:24:80:50:3d:e7:e1:ea:46:3a:fb:ab:12:
54:31:50:d0:96:16:bd:4a:ed:26:b4:96:df:ec:0a:
87:87:81:63:f8:db:30:fb:55:75:d1:6c:5b:37:08:
21:c8:3e:96:41:2c:96:2b:9a:ff:3e:16:f7:20:a8:
c2:e8:8f:16:f9:80:9f:33:2a:8a:fe:bf:44:97:c3:
5a:1c:99:76:bb:0e:c8:5c:ec:c3:bf:3c:df:65:bd:
33:76:3e:2b:67:2f:95:aa:63:ac:41:37:e7:b3:0f:
6c:25:c2:4f:87:7d:99:33:99:10:29:54:65:4b:a0:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:E3:27:D5:B0:CD:30:47:80:01:55:4E:3B:60:CB:F0:03:E1:AD
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aca0::/44
Signature Algorithm: sha256WithRSAEncryption
ab:82:d2:c9:26:79:1c:b7:22:a6:93:49:3a:a9:cb:0f:e0:30:
7f:eb:ba:7c:3b:da:90:ab:b5:ea:a2:0a:68:f2:e7:2c:7c:3b:
3b:f0:3c:a7:98:ff:91:5a:df:a3:25:95:de:3c:e9:3e:ae:8a:
96:17:ef:fa:e6:2e:f0:47:3c:a5:0c:44:a9:4f:dc:8a:53:db:
94:d9:b2:3f:e7:a6:7d:90:e8:99:b1:b0:0b:a7:7d:15:38:f7:
7d:1b:af:46:0b:26:a2:44:4e:c7:e3:c8:68:f7:19:a0:8f:b9:
bf:dd:cb:df:df:d6:14:fb:4e:62:d1:3c:fd:53:0d:40:db:47:
fc:58:22:38:c0:54:81:52:84:a7:72:34:65:6d:82:4f:2e:65:
74:0a:8e:6c:98:75:6b:31:54:23:42:9c:fb:f5:e5:8c:a4:1c:
0f:fa:a9:e7:ca:ba:d4:3e:f1:15:6a:17:30:15:5e:38:79:88:
a5:22:bb:7e:00:ee:7c:c4:6e:47:54:bb:b0:d2:b2:5c:88:18:
18:76:93:e7:8f:c0:72:59:9d:e2:86:cf:a8:c9:01:0b:cc:1f:
a5:6a:a4:f3:d0:f5:ca:cd:28:5c:24:59:a8:85:54:cc:e6:bd:
1f:86:a8:1f:6c:39:de:f6:db:4e:cf:bb:3d:13:f8:04:f5:82:
98:b4:b2:55
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUS51PS+Q7vb9wSC8kTQUSliYumCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDFaFw0yNjA2MjkxNDU5NDFaMDMxMTAvBgNV
BAMTKEE0RDRFMzI3RDVCMENEMzA0NzgwMDE1NTRFM0I2MENCRjAwM0UxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoxQh4to1SiFrvz/5mR5jjMBv
+m7dQqRFQuS4d7ZXMDQnwI22rpo4MYZTx/UIM/Gpj92t7rLXa73ALKAGyZsYr3he
+5z/Yp140CFeiBxmvQ3jthc8YnAz7wlr8vxHpgaHpzTufP2KoKBhoUOCGRAg2HK4
lqq0xnSkFDo8TZ5bRPpoV6Jt2TBfdCSAUD3n4epGOvurElQxUNCWFr1K7Sa0lt/s
CoeHgWP42zD7VXXRbFs3CCHIPpZBLJYrmv8+FvcgqMLojxb5gJ8zKor+v0SXw1oc
mXa7Dshc7MO/PN9lvTN2PitnL5WqY6xBN+ezD2wlwk+HfZkzmRApVGVLoCT/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpNTjJ9WwzTBHgAFVTjtgy/AD4a0wHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjE0Njc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgpg
RKygMA0GCSqGSIb3DQEBCwUAA4IBAQCrgtLJJnkctyKmk0k6qcsP4DB/67p8O9qQ
q7Xqogpo8ucsfDs78DynmP+RWt+jJZXePOk+roqWF+/65i7wRzylDESpT9yKU9uU
2bI/56Z9kOiZsbALp30VOPd9G69GCyaiRE7H48ho9xmgj7m/3cvf39YU+05i0Tz9
Uw1A20f8WCI4wFSBUoSncjRlbYJPLmV0Co5smHVrMVQjQpz79eWMpBwP+qnnyrrU
PvEVahcwFV44eYilIrt+AO58xG5HVLuw0rJciBgYdpPnj8ByWZ3ihs+oyQELzB+l
aqTz0PXKzShcJFmohVTM5r0fhqgfbDne9ttOz7s9E/gE9YKYtLJV
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:26 2025 by rpki-client