Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216260.roa
File: AS216260.roa (raw, json)
Hash identifier: BuqHbAfOkzokCAf9yX4FZOO8NppI0N/4CV8d4Ixtj54=
Subject key identifier: FB:98:CF:4D:85:07:02:BB:2F:0B:B1:00:7A:EE:B1:F9:32:15:40:4B
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 2582590E7C7595D876262912C645997411E9C812
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216260.roa
Signing time: Mon 30 Jun 2025 14:59:48 +0000
ROA not before: Mon 30 Jun 2025 14:54:48 +0000
ROA not after: Mon 29 Jun 2026 14:59:48 +0000
asID: 216260
IP address blocks: 2a09:54c7:3000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:82:59:0e:7c:75:95:d8:76:26:29:12:c6:45:99:74:11:e9:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:48 2025 GMT
Not After : Jun 29 14:59:48 2026 GMT
Subject: CN=FB98CF4D850702BB2F0BB1007AEEB1F93215404B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:3e:08:ad:a2:a3:9a:a7:86:96:1b:4d:ec:
65:5c:20:a7:8c:35:c4:ef:ac:d7:44:8c:28:dc:9b:
8d:aa:fd:fb:67:ed:f6:28:b9:0f:e9:03:11:c2:74:
88:7f:dc:eb:7b:f5:3f:29:13:c0:d8:8d:84:31:3c:
54:e2:d8:94:f5:fe:75:29:e7:f8:05:d6:0f:6d:e9:
e1:0a:88:c0:00:b7:99:4a:1f:be:49:5c:e3:c6:ba:
fe:72:1a:67:89:59:a1:28:cd:f5:da:51:83:21:3e:
03:1c:30:a2:b9:89:66:f6:9a:62:e3:88:f7:98:d4:
2a:f8:27:c4:27:22:01:bc:82:20:a6:eb:34:c8:64:
d6:ec:47:b4:24:29:cb:af:18:f0:cd:4f:25:59:90:
1e:6f:f5:7a:e2:c6:d9:b4:9c:4c:14:7c:05:12:69:
3c:28:c5:6d:4b:a8:d5:c7:ec:4f:ca:09:51:24:0f:
cc:69:03:a4:7e:92:71:6d:3c:f8:f0:d2:05:be:0c:
7e:7f:cf:79:bf:c2:df:5f:17:a6:b3:62:d6:2e:1e:
da:c8:15:50:10:e4:36:15:84:34:e5:11:19:9b:90:
f5:9e:ca:97:e7:0d:c4:2c:31:53:db:c3:b4:23:7f:
99:45:e5:a9:cb:cc:d7:ed:78:c3:c1:1d:cf:ee:04:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:CF:4D:85:07:02:BB:2F:0B:B1:00:7A:EE:B1:F9:32:15:40:4B
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS216260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:25:ba:18:10:c8:50:4a:27:27:4f:43:eb:41:0a:4b:ac:73:
96:72:e7:e6:f7:8c:d6:ee:74:f0:c2:3b:ab:02:40:19:dc:c7:
52:0f:02:90:22:79:be:04:ed:0c:4d:71:7a:10:28:40:01:69:
34:1c:dd:3f:9c:14:88:5c:46:68:7d:66:1f:76:3c:47:94:d7:
fa:26:6a:87:6b:6a:fe:cd:64:71:0c:71:da:5c:28:9a:5a:c1:
21:68:75:ad:d0:66:e0:98:5a:f9:3f:9f:c7:34:ee:01:0d:e1:
89:51:99:ee:3d:ae:79:87:31:d9:18:5e:0c:0e:8c:94:25:c3:
f9:23:5a:d0:16:b4:93:df:30:af:a4:20:15:6a:2a:e0:1b:20:
e8:83:ec:15:f3:d3:ff:02:b1:c4:ea:af:80:65:68:c8:03:f6:
29:ef:32:79:4e:3d:7f:de:38:68:b4:0a:59:35:19:f7:5b:9f:
38:24:df:ed:b2:e7:66:0d:39:bd:38:52:4e:dc:0d:99:16:ad:
5f:45:de:1a:f0:d0:8f:1b:4b:be:52:b3:a1:e2:d8:57:a3:99:
a9:0d:17:88:58:8a:c9:69:d8:c0:e1:0e:16:e5:6a:8b:1f:b6:
33:32:f7:e9:57:c3:c0:6e:cc:0e:56:a0:0a:fd:18:04:3c:0d:
d6:71:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:34 2025 by rpki-client