Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214731.roa
File: AS214731.roa (raw, json)
Hash identifier: gIebOs6MUgDhJCYWKNWK3JkZaPK0nWoSuosAiV+T4iM=
Subject key identifier: BD:1D:DD:F3:88:81:59:02:C9:49:26:4A:B0:DA:BC:81:B9:81:1F:F4
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 027E7D9FC80021FED451E00202B31D6D5FF0B357
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214731.roa
Signing time: Mon 30 Jun 2025 14:59:47 +0000
ROA not before: Mon 30 Jun 2025 14:54:47 +0000
ROA not after: Mon 29 Jun 2026 14:59:47 +0000
asID: 214731
IP address blocks: 2a06:1281:4000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7e:7d:9f:c8:00:21:fe:d4:51:e0:02:02:b3:1d:6d:5f:f0:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:47 2025 GMT
Not After : Jun 29 14:59:47 2026 GMT
Subject: CN=BD1DDDF388815902C949264AB0DABC81B9811FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:00:fc:dd:e1:92:28:d4:33:46:67:3e:51:
e7:9e:1e:df:72:98:92:30:72:22:ef:77:b8:6e:a6:
5f:b5:e5:fa:c2:53:1c:fc:0f:60:2c:fc:25:f5:f9:
bd:15:94:be:b0:73:7a:f0:11:d6:e5:d6:f9:c8:9d:
98:3c:9e:74:c5:7f:69:c0:26:ce:ef:ee:3f:04:54:
22:11:a4:7b:3b:7f:42:c2:d0:04:c3:fc:cc:72:33:
48:33:87:45:a1:f4:f0:87:1e:a1:1d:66:30:b1:cf:
d7:7b:c0:2f:71:e5:08:6c:af:6e:f5:0d:fb:b8:19:
c0:40:8b:fb:1d:e2:1a:61:f5:32:0f:a3:70:4e:11:
ba:af:92:0b:d5:95:a2:5c:05:20:cd:33:dc:ba:19:
4a:97:ae:1d:43:3e:f5:cf:2c:76:1c:25:52:af:fe:
35:31:b9:81:2e:f8:37:cd:13:49:1a:1f:31:a4:dc:
21:0c:d8:6b:63:37:8d:7e:6d:fc:33:2a:0c:b2:03:
e5:d1:be:ab:25:39:15:df:d7:86:d1:1d:73:c9:03:
56:ac:dd:13:f2:ec:04:2d:5b:1b:04:64:e1:12:7d:
6f:93:9e:47:29:01:5e:1a:68:d8:e0:d0:02:5e:4b:
f2:02:44:9c:2e:4d:d1:b4:92:c3:f6:d3:ba:bd:a3:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:DD:F3:88:81:59:02:C9:49:26:4A:B0:DA:BC:81:B9:81:1F:F4
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS214731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:4000::/36
Signature Algorithm: sha256WithRSAEncryption
41:a4:b9:14:59:80:47:11:03:01:16:a5:0a:14:8e:81:47:5f:
db:f7:e2:5b:cf:ee:e5:bd:2b:12:75:36:19:85:6e:d7:00:0f:
e3:91:02:01:90:10:62:8a:b8:3e:db:3c:e8:51:dc:e8:45:49:
aa:d2:68:07:1b:2d:56:77:cf:8f:08:f3:ac:f1:f3:43:88:34:
9f:11:4d:32:e6:fa:ed:7d:0e:0b:26:26:49:78:13:59:15:42:
91:3f:18:28:05:b3:f7:36:9c:65:ff:0b:fb:79:9a:2f:9f:c2:
10:87:0f:a0:ac:3e:34:66:73:5b:64:99:8a:2c:42:5a:55:07:
a9:df:ad:c8:97:32:5d:53:a1:23:ed:04:30:29:c2:04:7c:57:
fe:fa:17:05:73:42:fb:8b:9b:99:cc:4d:fe:16:52:01:8a:0f:
41:d4:a7:a1:5c:e1:27:e6:d7:3e:04:5b:ab:7e:9f:43:e1:8a:
6c:5a:0d:63:a9:96:8e:c2:f3:52:a2:44:ee:3f:9a:1f:25:01:
c2:45:78:bf:13:2d:fe:17:f1:bd:af:a7:ed:d0:24:33:72:46:
f6:ee:71:a1:49:40:e5:59:bd:96:15:26:7d:e2:99:74:56:ec:
bc:32:13:da:d0:c7:45:c3:59:a9:74:50:57:2d:80:95:58:4e:
73:7e:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:19 2025 by rpki-client