Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215214.roa
File: AS215214.roa (raw, json)
Hash identifier: D3bKvb9tR6Mopt8h6G9mOiztM6RA3Mh5exPISbwvdao=
Subject key identifier: 3C:03:E3:B8:68:41:73:62:84:19:D4:4D:ED:CC:D3:EE:DE:EF:E5:06
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 14890F7530A4EB32B0A33F53E1DA0730D81CB074
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215214.roa
Signing time: Mon 30 Jun 2025 14:59:50 +0000
ROA not before: Mon 30 Jun 2025 14:54:50 +0000
ROA not after: Mon 29 Jun 2026 14:59:50 +0000
asID: 215214
IP address blocks: 2a09:54c6:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:89:0f:75:30:a4:eb:32:b0:a3:3f:53:e1:da:07:30:d8:1c:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:50 2025 GMT
Not After : Jun 29 14:59:50 2026 GMT
Subject: CN=3C03E3B8684173628419D44DEDCCD3EEDEEFE506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:26:e2:e5:04:ea:c8:d2:32:66:9d:1c:6c:
8b:4d:ec:66:df:f7:3f:74:ef:bf:6b:7e:e0:b0:46:
5e:fb:b1:66:9d:f9:e5:52:72:83:fc:42:56:b4:6e:
60:fa:fa:10:2a:84:a2:56:f5:a8:c9:4f:a6:97:08:
b8:0b:95:2f:61:aa:0c:41:14:50:f2:2f:8d:47:51:
70:da:f5:6b:ae:3a:6a:85:cf:3a:14:52:4b:6d:1a:
f4:76:ea:ae:16:1a:84:40:b4:a1:65:04:23:e3:81:
0b:2d:b0:81:eb:6a:d1:a4:6d:91:2e:31:14:64:6d:
12:f5:0e:20:72:a5:aa:47:d5:81:57:31:6e:d2:60:
27:f4:25:b3:04:20:10:e0:0f:d2:8a:88:5a:46:81:
5f:f3:ea:63:b2:1d:7c:e8:43:e5:2c:d3:be:23:92:
28:8e:56:ac:e9:19:d4:b2:17:7b:0a:19:2b:95:34:
82:43:0e:5d:1f:d3:e7:d6:bf:e4:fc:d6:93:50:97:
f3:90:ab:99:d6:1f:ad:70:59:02:b1:dc:72:86:3a:
65:70:b9:63:f2:b7:11:04:01:02:60:a2:7d:ec:f8:
63:0b:9c:34:86:9a:5a:32:8a:9c:1f:a7:75:7b:9d:
51:a9:48:77:20:89:91:cd:c5:43:e9:b0:b6:61:55:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:E3:B8:68:41:73:62:84:19:D4:4D:ED:CC:D3:EE:DE:EF:E5:06
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:f000::/36
Signature Algorithm: sha256WithRSAEncryption
1f:33:99:d4:d9:d1:2b:0f:ff:98:7a:d9:18:1d:78:f1:b2:14:
07:51:ba:c0:f8:8f:6a:87:03:74:30:70:6d:0d:71:49:23:ac:
78:5a:1b:3d:69:76:d0:da:d7:81:a3:ae:ab:08:ca:a8:df:e4:
f8:db:7e:07:59:20:63:0f:58:ec:58:e9:b9:60:01:54:9f:53:
42:b2:10:50:4d:26:66:82:1c:ae:ad:11:33:f2:52:fb:65:b7:
96:29:92:36:bc:ed:0c:95:96:bd:85:b6:81:1a:9e:01:eb:99:
01:aa:89:7a:8f:8c:27:87:71:17:8d:e1:38:e3:7f:7a:6a:65:
75:de:d1:59:d0:94:6d:17:50:36:a8:b4:6e:ac:07:f8:2a:11:
5c:fa:53:9d:f0:99:3e:9d:7a:e3:c9:8f:c6:a5:7e:2c:af:8c:
1b:2d:10:e0:98:a9:f4:81:03:e3:94:86:e8:f6:73:49:10:44:
42:6d:d4:b3:93:64:41:92:e7:36:c7:83:51:cf:94:dc:89:bf:
86:a5:61:1b:fa:c1:8c:bc:1f:f0:ef:74:86:8a:f5:16:fb:2d:
50:1f:48:cd:ea:9b:53:90:00:48:74:db:5b:c2:25:a3:4c:3f:
e2:fa:b5:5c:1d:94:36:47:22:94:02:2e:82:8e:3a:44:e8:ad:
b3:6c:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:24 2025 by rpki-client