Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216052.roa
File: AS216052.roa (raw, json)
Hash identifier: Fs2hEazl4VQT0nPrPDvQVtcN026uyC7J+IqbaRNySx4=
Subject key identifier: BE:57:2A:B4:B9:93:9E:21:A6:89:AC:C4:F8:D2:7A:A1:63:8C:6D:5A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 45CE02CC538BA44075B0DFD16A5EEE776A48D75E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216052.roa
Signing time: Mon 30 Jun 2025 14:59:52 +0000
ROA not before: Mon 30 Jun 2025 14:54:52 +0000
ROA not after: Mon 29 Jun 2026 14:59:52 +0000
asID: 216052
IP address blocks: 2a0a:6044:a900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ce:02:cc:53:8b:a4:40:75:b0:df:d1:6a:5e:ee:77:6a:48:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:52 2025 GMT
Not After : Jun 29 14:59:52 2026 GMT
Subject: CN=BE572AB4B9939E21A689ACC4F8D27AA1638C6D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:1b:4e:c1:95:9d:db:e5:ba:e5:15:3d:61:
f6:60:89:ff:c3:c0:4c:e1:ab:c3:8a:0f:a0:f8:43:
b0:0c:b3:38:4e:f3:19:36:f8:3e:84:e7:fa:c6:ce:
8e:1d:0e:63:4c:46:32:0b:22:ff:03:5e:ba:9f:bf:
94:aa:55:a4:56:d9:6b:66:ae:4f:55:a4:7d:57:1d:
97:bf:05:62:d9:55:c0:51:4b:aa:00:75:39:b2:e9:
0d:60:21:2c:11:15:d9:73:c0:d8:e7:1a:e9:b4:54:
ae:e9:50:ef:d6:a5:64:3e:a2:d1:68:b8:8d:da:8e:
11:29:50:31:92:0a:14:f5:75:25:23:7f:2a:e7:f7:
f7:75:c1:ac:b5:94:89:d4:43:36:e3:31:f9:a1:92:
b2:b1:bf:29:ff:c2:dd:61:ab:0f:71:f9:f7:0c:1e:
4b:1b:81:f4:ce:08:8b:e8:1f:ab:a5:f6:9a:c3:cb:
b0:e1:3b:6f:ad:6f:d3:06:29:78:5c:e5:57:be:40:
bb:d4:68:97:c0:10:5c:f9:96:83:8d:0d:38:d3:a8:
b7:43:68:8f:75:2f:b4:de:06:20:bc:e5:43:91:a0:
c2:e0:ec:13:01:ca:49:bf:a0:63:d6:6f:0c:b5:ed:
ce:63:9c:9a:31:d9:1d:f5:e2:a7:0f:bc:59:ae:71:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:2A:B4:B9:93:9E:21:A6:89:AC:C4:F8:D2:7A:A1:63:8C:6D:5A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a900::/40
Signature Algorithm: sha256WithRSAEncryption
78:d5:3b:62:f4:6a:50:0b:c5:23:ca:19:27:3f:0b:34:76:e5:
34:b5:ff:d4:b2:04:d6:27:3a:d1:8c:c1:a6:f8:34:7d:85:65:
a5:23:23:28:89:3f:b9:5b:5a:f0:6a:ed:cc:d8:89:18:5d:3e:
37:2c:5b:b1:62:ea:70:08:c3:97:8c:ca:fc:a8:3e:c9:4a:ca:
8f:99:a4:3b:02:20:62:c0:83:d5:f4:b0:3b:3b:38:b2:e8:fd:
fe:00:9b:da:d2:92:18:11:de:98:76:c3:84:a6:8e:fe:5f:11:
84:6e:89:e6:bf:bc:a4:75:eb:9f:63:b6:2e:03:1b:da:a5:c9:
7f:9f:4e:80:ef:c0:d8:86:b1:88:a7:16:6c:e1:a9:7f:36:95:
93:a8:63:0f:56:92:00:21:52:90:f3:1c:91:fc:ac:02:16:8b:
94:ee:aa:06:79:14:5a:3b:01:dd:b4:ce:d3:a0:09:4d:a3:be:
7d:ce:4a:89:9a:74:d6:28:81:a4:8e:02:05:75:7c:f3:2f:74:
0f:3b:8f:67:11:a0:db:2d:d7:3b:1c:40:71:c5:e5:c5:a7:bc:
18:82:1b:f0:18:75:f6:de:2e:33:62:70:e3:6e:1b:12:bb:4b:
c1:f3:90:18:af:e3:eb:b5:7c:74:c7:b9:c0:60:1c:9e:c6:1e:
90:06:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:24 2025 by rpki-client