Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: 2gqOQgw/mvf2hLoXaKz3VJeFTMc0OXGRoGbmXf1KtGU=
Subject key identifier: A0:C7:33:AF:8D:D3:A1:18:BA:78:AE:11:F4:E6:63:A5:C9:7B:16:4A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 42D4340D9BB4B6E0C2F490CB56B44C6FDC537ADF
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215039.roa
Signing time: Mon 30 Jun 2025 14:59:41 +0000
ROA not before: Mon 30 Jun 2025 14:54:41 +0000
ROA not after: Mon 29 Jun 2026 14:59:41 +0000
asID: 215039
IP address blocks: 2a0a:6044:ac50::/44 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d4:34:0d:9b:b4:b6:e0:c2:f4:90:cb:56:b4:4c:6f:dc:53:7a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:41 2025 GMT
Not After : Jun 29 14:59:41 2026 GMT
Subject: CN=A0C733AF8DD3A118BA78AE11F4E663A5C97B164A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:2f:33:75:9d:87:9d:27:ce:48:4e:fa:b2:
d9:5d:67:a1:e8:c0:a3:96:29:2e:00:4c:03:1e:3d:
2b:a3:4e:68:e5:7f:c7:41:1d:b8:9c:fd:21:d2:ad:
22:8a:25:1d:b6:c5:4f:22:23:fe:d4:4c:2e:0f:a2:
ec:a7:4f:64:2b:44:0d:f3:56:1e:04:a7:70:1e:5d:
5d:14:e3:70:2f:94:02:84:72:fe:3c:8c:a2:57:04:
90:56:1b:01:68:e5:46:27:dd:e6:73:9e:da:3c:78:
72:35:51:08:81:ef:bd:c2:13:5e:e3:f2:81:38:a6:
00:38:01:4c:71:2d:c2:b6:82:ed:f3:cb:33:c2:5d:
77:30:8f:7a:02:db:6a:5a:b9:f8:ea:11:57:7e:98:
93:d7:8a:1c:9a:08:0c:f4:31:6d:f9:46:d2:eb:7f:
4b:6e:3d:44:67:e8:6d:c8:82:dd:b9:39:90:de:c4:
b8:2d:24:32:60:db:ea:ac:28:22:f8:18:c0:97:c9:
0c:7e:70:10:7c:32:e8:f3:0f:ef:09:34:40:4f:77:
41:e0:ee:4f:d6:3d:ba:8c:5d:e0:9c:83:61:20:c4:
f4:47:2e:79:1a:a0:18:7a:cb:e8:b6:f2:59:98:12:
c8:16:4e:8b:9d:a4:91:b5:7d:02:a7:c6:57:45:9c:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:33:AF:8D:D3:A1:18:BA:78:AE:11:F4:E6:63:A5:C9:7B:16:4A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac50::/44
Signature Algorithm: sha256WithRSAEncryption
07:6f:07:30:35:da:68:43:fe:5a:9d:dc:61:b8:0d:a5:d0:15:
83:1d:6a:84:44:f8:47:b4:3f:10:70:cc:cd:8b:56:94:e6:ff:
b9:9e:78:37:e1:dd:36:d3:a9:70:3b:af:37:85:6f:c2:03:11:
fa:8a:25:1e:60:8e:12:47:2e:1f:f2:64:e1:53:54:34:4b:cf:
16:32:53:06:13:6e:11:06:31:ee:0b:00:f7:08:ff:d7:6b:5f:
5b:2d:dd:a4:41:2e:ca:5b:0e:8e:8d:dd:79:d5:86:06:7c:04:
06:b6:83:7f:e0:fe:17:33:2f:90:1d:a2:2f:f8:c6:7c:61:b7:
c6:72:0c:08:ee:56:82:b8:cc:cd:ef:06:6b:c8:a5:f6:37:c9:
ab:30:fb:4d:90:25:fd:5c:10:5b:46:29:6f:50:92:4d:79:dc:
3d:da:5e:25:3e:8a:f5:9a:8b:95:17:ba:4a:b6:42:48:d0:ca:
57:25:e4:94:22:f5:9b:10:91:fd:0a:87:74:5b:9a:d6:b1:39:
3f:47:40:e8:aa:4d:07:32:26:c0:33:db:73:16:ca:e5:d7:57:
7e:5d:cd:7d:64:4f:b6:68:ca:22:9e:c5:71:fb:12:65:8f:3a:
a4:41:32:8d:a6:53:d2:83:ba:95:77:ef:c0:96:88:25:02:88:
3b:06:5b:d5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQtQ0DZu0tuDC9JDLVrRMb9xTet8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA2MzAxNDU0NDFaFw0yNjA2MjkxNDU5NDFaMDMxMTAvBgNV
BAMTKEEwQzczM0FGOEREM0ExMThCQTc4QUUxMUY0RTY2M0E1Qzk3QjE2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6i8zdZ2HnSfOSE76stldZ6Ho
wKOWKS4ATAMePSujTmjlf8dBHbic/SHSrSKKJR22xU8iI/7UTC4PouynT2QrRA3z
Vh4Ep3AeXV0U43AvlAKEcv48jKJXBJBWGwFo5UYn3eZznto8eHI1UQiB773CE17j
8oE4pgA4AUxxLcK2gu3zyzPCXXcwj3oC22paufjqEVd+mJPXihyaCAz0MW35RtLr
f0tuPURn6G3Igt25OZDexLgtJDJg2+qsKCL4GMCXyQx+cBB8MujzD+8JNEBPd0Hg
7k/WPbqMXeCcg2EgxPRHLnkaoBh6y+i28lmYEsgWToudpJG1fQKnxldFnK+RAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUoMczr43ToRi6eK4R9OZjpcl7FkowHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUt
NDlmOS05YjZjLTljOWYzODk4OTk1ZC8zL0FTMjE1MDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgpg
RKxQMA0GCSqGSIb3DQEBCwUAA4IBAQAHbwcwNdpoQ/5andxhuA2l0BWDHWqERPhH
tD8QcMzNi1aU5v+5nng34d0206lwO683hW/CAxH6iiUeYI4SRy4f8mThU1Q0S88W
MlMGE24RBjHuCwD3CP/Xa19bLd2kQS7KWw6Ojd151YYGfAQGtoN/4P4XMy+QHaIv
+MZ8YbfGcgwI7laCuMzN7wZryKX2N8mrMPtNkCX9XBBbRilvUJJNedw92l4lPor1
mouVF7pKtkJI0MpXJeSUIvWbEJH9Cod0W5rWsTk/R0Doqk0HMibAM9tzFsrl11d+
Xc19ZE+2aMoinsVx+xJljzqkQTKNplPSg7qVd+/AloglAog7BlvV
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:28 2025 by rpki-client