Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215605.roa
File: AS215605.roa (raw, json)
Hash identifier: cBqUumKCq3fZMzCBW1cXH/yWzdP8PxvU0w9Qi40WMtU=
Subject key identifier: B0:2A:2F:E7:76:85:9F:11:D4:BD:23:6F:7F:9D:24:68:2A:B7:7A:85
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 65844F217D67C5662593D1065C589A052270D859
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215605.roa
Signing time: Mon 30 Jun 2025 14:59:40 +0000
ROA not before: Mon 30 Jun 2025 14:54:40 +0000
ROA not after: Mon 29 Jun 2026 14:59:40 +0000
asID: 215605
IP address blocks: 2a0a:6044:7c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:84:4f:21:7d:67:c5:66:25:93:d1:06:5c:58:9a:05:22:70:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:40 2025 GMT
Not After : Jun 29 14:59:40 2026 GMT
Subject: CN=B02A2FE776859F11D4BD236F7F9D24682AB77A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:2e:cf:c3:3d:4f:9a:1f:dd:94:04:31:96:
87:19:b4:b8:c8:cf:48:db:98:36:7c:d2:55:7c:9a:
cb:44:a4:f8:b0:b2:88:ff:d7:59:fa:da:d8:04:7d:
37:3e:87:c0:80:40:2e:bd:d5:e8:09:03:2d:3d:86:
16:a8:5d:b0:70:d4:d8:30:ea:37:44:db:23:f8:50:
9c:1d:32:d2:fd:5a:a9:6d:6c:77:77:df:19:5e:01:
65:d5:f9:30:e4:e5:2e:c6:37:f8:31:7f:80:06:f8:
67:2d:92:b8:77:2f:c1:c7:41:03:fc:80:08:c8:a7:
60:00:11:c8:e1:ea:a7:95:2c:88:07:e9:8e:2a:f9:
f5:bb:aa:63:13:8d:0f:8b:53:7c:10:33:c7:c0:77:
f8:00:1e:77:c7:d3:ea:49:23:51:4d:35:61:01:25:
ca:f6:5c:83:a1:e5:f2:40:35:08:23:a2:7d:58:13:
68:d0:f1:3e:5f:52:b0:a6:5b:b0:c9:36:4a:be:31:
76:f6:bd:9a:94:2c:a8:ab:ee:fe:02:ca:88:ae:86:
75:7f:04:b4:b0:7e:90:54:3a:3e:4d:78:3b:d5:4b:
55:82:7c:84:25:b7:d3:83:ff:57:fb:57:c1:6e:f3:
dd:ac:6b:b5:de:6f:a8:de:47:53:6b:62:4a:31:86:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:2F:E7:76:85:9F:11:D4:BD:23:6F:7F:9D:24:68:2A:B7:7A:85
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
Signature Algorithm: sha256WithRSAEncryption
04:fb:dd:a1:fc:ed:ce:75:b3:a5:17:36:ca:1a:7a:c4:84:8c:
1f:5a:1c:50:00:de:2d:b4:a4:37:06:0e:fe:9a:d5:4c:1c:cb:
bf:bd:ed:52:96:ba:8f:d2:6e:c9:ea:f3:a0:8f:5b:06:51:73:
1d:c1:48:ec:8f:11:fb:dc:4c:a4:46:82:1f:64:c5:ce:80:c1:
43:de:ea:93:f1:f7:3b:06:ef:24:04:8e:b4:5b:be:36:e7:4c:
df:d1:1a:9e:0c:c8:57:74:cf:f7:2a:0c:47:c0:51:b7:b2:e4:
ba:aa:00:96:5a:e8:2c:2a:ba:c9:88:83:48:6a:e1:bf:f5:bb:
16:b2:1a:9c:41:87:91:19:7c:be:fb:92:b0:63:67:7d:26:85:
72:23:9f:2a:67:81:aa:88:15:a0:09:87:05:0f:89:94:5c:98:
d4:ff:24:fe:37:10:2d:9a:8f:90:54:d4:32:1a:4f:9c:f7:b9:
c4:25:3a:85:16:b9:bd:76:55:3f:99:25:c1:a8:89:60:bf:89:
11:15:0e:6b:76:79:7e:16:54:1e:18:fb:70:e5:a0:fe:fb:83:
53:28:21:5e:c2:b7:2f:3a:f8:f5:3d:9b:c0:8b:b0:29:11:49:
75:f1:c2:f8:2b:c8:ec:74:e8:01:a3:f9:4a:ed:3b:9e:8b:57:
3f:f1:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:18 2025 by rpki-client