Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215150.roa
File: AS215150.roa (raw, json)
Hash identifier: sw5LgMnxMO525hI1MX9LSDmMaZWc8vl4eVVlfuuwhJY=
Subject key identifier: 93:7D:68:39:FF:83:83:BA:8B:C1:E1:5F:99:67:44:B1:2F:71:5C:B5
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 7E1E2F5DFA2C5F04D5AF3E82616A8A2B4FEE375C
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215150.roa
Signing time: Mon 30 Jun 2025 14:59:49 +0000
ROA not before: Mon 30 Jun 2025 14:54:49 +0000
ROA not after: Mon 29 Jun 2026 14:59:49 +0000
asID: 215150
IP address blocks: 2a0a:6044:acc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1e:2f:5d:fa:2c:5f:04:d5:af:3e:82:61:6a:8a:2b:4f:ee:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:49 2025 GMT
Not After : Jun 29 14:59:49 2026 GMT
Subject: CN=937D6839FF8383BA8BC1E15F996744B12F715CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:65:7e:47:28:71:39:1e:9c:ff:ff:bb:dc:
76:05:e1:09:84:60:c1:89:2d:e5:75:2c:db:ec:e6:
50:c6:01:f6:e9:df:90:43:27:90:33:b4:8d:fa:91:
9b:d4:c5:2f:21:4d:ae:42:07:61:e8:78:73:af:13:
1c:a0:e7:0b:89:52:33:37:b7:fd:ac:3b:d6:29:77:
af:96:1e:76:0a:aa:2e:ab:06:2c:38:37:29:2b:45:
87:37:bf:86:2e:2a:72:49:79:7d:24:6b:5c:3c:35:
d8:c2:53:1d:bb:c6:57:ac:19:25:6f:83:9b:ec:d4:
89:78:38:08:cf:03:e3:dd:58:aa:7e:d2:3e:0f:d9:
46:95:04:40:08:a5:69:09:38:61:5f:4e:e0:5f:7f:
8d:c8:72:82:6e:ff:d1:41:46:26:93:d4:36:15:19:
85:93:a4:94:be:07:fe:49:07:4c:64:0c:0d:2b:d2:
f7:c5:10:7e:a1:0f:a3:68:f1:a8:ea:f3:c9:e1:7f:
98:da:bc:4c:dc:52:94:18:22:a9:7a:97:9e:b3:92:
b4:e8:5b:7f:d3:d7:1a:e8:11:34:96:e5:dc:bc:21:
0a:28:b3:4e:b0:56:24:9b:28:8a:63:68:e7:54:0b:
d5:52:4a:9a:56:50:99:39:cb:d4:f5:0c:75:4c:08:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:68:39:FF:83:83:BA:8B:C1:E1:5F:99:67:44:B1:2F:71:5C:B5
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:acc0::/44
Signature Algorithm: sha256WithRSAEncryption
63:3f:92:57:0f:e2:98:2a:6e:a8:e8:69:0c:82:aa:82:cd:a1:
f4:35:9e:cd:a6:19:13:e5:5b:cb:0c:9b:24:2f:b8:66:d7:28:
5e:73:c7:4a:1f:91:c3:8c:35:f4:91:15:7a:82:f1:81:be:d7:
cc:75:da:41:8b:44:33:0c:57:e4:aa:ba:23:ab:b0:0a:1f:8c:
b8:cf:2d:a8:e2:39:31:99:21:65:6b:f7:58:16:60:43:c8:be:
27:dc:dd:f0:10:10:da:1e:30:9d:40:37:45:81:1b:09:38:47:
fd:0a:ec:3e:67:9f:97:5a:53:ee:77:5c:d5:1e:f9:d8:00:4f:
95:c4:1e:55:b5:ac:cb:17:7b:ff:0b:70:51:88:f6:bc:d5:bd:
cd:81:b1:09:9d:78:f4:93:16:7c:35:d0:93:3f:a8:0d:bd:a6:
d9:5e:2c:e3:ee:c1:41:00:3a:29:cd:8e:8e:cc:48:9b:b7:79:
62:89:62:bf:47:c8:c0:51:59:6d:ca:91:77:87:a2:1b:b3:66:
58:cf:bd:2a:f8:ef:2b:37:f8:09:b0:97:c4:74:5f:57:fe:e5:
72:c8:28:43:bf:5d:de:95:6e:1a:66:62:be:6a:b9:8a:e3:44:
f0:3a:8a:62:8a:d9:cf:5e:e7:a8:13:07:06:37:96:45:b0:f7:
47:bd:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:22 2025 by rpki-client