Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215820.roa
File: AS215820.roa (raw, json)
Hash identifier: jVciGOlzw4zFt24OG2T8jI/OpSb3pn4vZFGI0CwT4Jc=
Subject key identifier: 13:17:58:18:8F:02:10:A9:D8:33:6C:67:02:8B:51:A0:4A:78:2E:89
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4126AE9FB4698A2558B92FFAEABAA8335B0907CD
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215820.roa
Signing time: Mon 30 Jun 2025 14:59:49 +0000
ROA not before: Mon 30 Jun 2025 14:54:49 +0000
ROA not after: Mon 29 Jun 2026 14:59:49 +0000
asID: 215820
IP address blocks: 2a06:1281:6000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:26:ae:9f:b4:69:8a:25:58:b9:2f:fa:ea:ba:a8:33:5b:09:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:49 2025 GMT
Not After : Jun 29 14:59:49 2026 GMT
Subject: CN=131758188F0210A9D8336C67028B51A04A782E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:26:86:16:db:22:12:54:3c:9a:02:38:01:
dd:57:cb:0f:10:26:ae:d3:fd:dd:d2:21:82:44:fb:
c7:1e:5a:2d:13:34:93:83:58:3e:9c:50:a7:f9:c7:
ea:88:db:f9:03:a1:c7:8a:8e:8f:97:31:fa:c7:6f:
d5:ee:0b:91:fd:b8:c2:51:36:9a:bd:1b:e5:96:fc:
61:e7:36:23:54:38:04:b1:02:cd:e1:cb:97:18:a8:
ed:4c:36:de:1b:55:36:6c:58:f1:9b:76:22:99:32:
ee:31:3f:f0:cd:b5:4e:58:e2:0e:0f:9d:8f:9a:7e:
fc:32:7d:ae:89:bf:ba:31:2e:e4:88:4d:01:b2:6c:
7f:49:ca:bd:0a:e1:1f:2b:e9:64:45:3e:bb:08:62:
34:6c:61:74:50:ca:8c:77:5a:ea:36:4b:96:53:9a:
30:49:55:40:de:c9:7a:a9:69:b9:7c:04:6c:d4:65:
b1:b1:04:7b:69:23:e9:b9:e4:a8:03:8d:df:9a:b7:
9c:15:94:bf:84:9b:0f:84:9f:70:74:83:cf:7c:b1:
fb:1b:5f:ab:d0:00:41:b7:50:2a:5b:ab:4a:61:94:
55:e6:96:71:54:23:96:e6:14:a9:d4:65:8f:db:00:
62:8d:df:11:dc:42:3d:12:fe:11:a1:a1:9a:40:73:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:58:18:8F:02:10:A9:D8:33:6C:67:02:8B:51:A0:4A:78:2E:89
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS215820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:6000::/36
Signature Algorithm: sha256WithRSAEncryption
06:f9:72:03:f3:c3:97:f2:9f:7a:d7:33:5e:94:97:f5:69:a2:
a7:50:43:99:32:44:b5:9b:fc:04:e4:0f:dc:fa:aa:81:61:cb:
39:b4:6d:e0:97:8a:32:13:3f:6c:b7:30:30:57:3e:6b:23:1f:
ac:8a:5a:52:d5:4c:98:d6:30:ed:9a:2e:04:97:ae:87:5a:a9:
fa:d4:15:83:24:4f:12:4d:fa:94:42:78:4d:fc:dd:62:fc:c7:
52:3b:4a:0f:b9:12:89:d4:ec:be:68:c8:56:a7:a6:6f:2e:94:
b7:b3:dc:80:58:4b:6a:ff:7b:4a:7c:c3:4c:d5:2b:42:5c:f7:
20:29:3a:3e:37:df:a9:0f:90:2c:eb:fa:d7:c5:7f:53:51:66:
20:f8:16:1b:0e:12:a5:58:60:63:3a:fb:5f:d7:d6:84:e1:fb:
85:23:f8:11:9f:8c:47:3d:b4:79:28:4e:2b:f8:91:e4:88:62:
dd:ea:99:df:67:24:55:c5:77:9a:3a:ca:25:d6:a0:e9:a4:63:
5e:7b:bf:bb:59:9b:c9:d6:86:57:61:41:67:c5:29:c7:89:10:
5f:ea:4e:ec:2c:cc:e8:a1:96:f1:26:c4:f6:66:ce:14:af:a1:
51:cc:f7:82:f4:76:c8:59:1b:3e:43:5a:5c:c5:4b:0c:2d:ff:
ab:c7:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:26 2025 by rpki-client