Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS47509.roa
File: AS47509.roa (raw, json)
Hash identifier: 4jdHaFzwGY2HGkWN1TliSSbimiak924UTPrABZqwkyc=
Subject key identifier: F1:24:AF:87:5E:0A:AC:D8:37:0E:A7:03:3B:CB:7B:09:06:8E:E8:6D
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6E6BAB059445D2A2007DA81A78DC3FE8F42CC374
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS47509.roa
Signing time: Mon 30 Jun 2025 14:59:45 +0000
ROA not before: Mon 30 Jun 2025 14:54:45 +0000
ROA not after: Mon 29 Jun 2026 14:59:45 +0000
asID: 47509
IP address blocks: 2a0a:6044:b100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6b:ab:05:94:45:d2:a2:00:7d:a8:1a:78:dc:3f:e8:f4:2c:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:45 2025 GMT
Not After : Jun 29 14:59:45 2026 GMT
Subject: CN=F124AF875E0AACD8370EA7033BCB7B09068EE86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:2a:12:69:3f:f1:6d:b0:93:24:1d:58:5a:
8d:5b:67:9a:e5:6b:35:62:55:18:15:24:17:96:2d:
7b:67:dd:05:c5:b0:c4:ad:d2:ef:28:f3:82:73:e5:
b9:31:75:cf:fd:a7:86:7b:8a:95:cc:19:fe:e3:5a:
66:64:c5:bc:4b:d5:38:85:b4:10:69:cc:09:1d:db:
bb:05:38:31:bc:f9:f2:82:30:37:16:e7:a4:d2:83:
b6:63:15:ce:f4:2c:ff:8b:c9:f9:a1:11:64:c9:15:
e5:c5:33:1d:1c:59:95:7f:54:43:c1:86:7d:11:b2:
09:71:23:fa:19:c1:75:39:22:bb:bb:84:b1:24:7e:
52:ad:aa:51:03:7d:a6:6c:ce:47:7a:13:c2:b4:9b:
37:b6:9a:88:54:5f:3e:32:b9:d0:ff:0a:fb:ae:e6:
2b:8e:54:eb:a5:8f:55:0a:9f:e8:16:79:f4:bc:90:
fc:b1:91:b9:79:fd:a6:c1:8f:01:d5:9c:c7:ea:b0:
35:08:5e:1d:9c:00:62:22:7a:ce:9d:dd:55:32:ec:
50:cf:67:c6:72:9b:ac:7a:f4:37:a4:03:28:11:5a:
3e:02:14:09:e3:95:8d:60:1e:f6:3c:8f:20:77:4a:
38:98:de:75:10:e6:b7:d0:c3:e4:f4:46:41:25:46:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:AF:87:5E:0A:AC:D8:37:0E:A7:03:3B:CB:7B:09:06:8E:E8:6D
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS47509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b100::/40
Signature Algorithm: sha256WithRSAEncryption
8e:93:50:1f:ea:82:42:1b:23:f0:0c:b6:b9:f0:24:ea:1d:e4:
82:bf:5b:4f:65:5b:15:d6:a8:cf:a2:48:92:5d:b8:be:11:1b:
51:df:08:69:52:5a:1d:8d:2b:a8:e3:4d:fb:19:ab:ab:96:f7:
c1:b5:34:88:b2:4e:b5:f6:4e:f2:75:05:f7:33:99:d3:50:a1:
c6:ac:10:7e:09:57:2e:cf:1b:84:79:94:92:66:7c:0d:7c:14:
ec:f6:e6:c2:ba:ec:8d:29:bd:0f:8b:77:db:27:40:6a:87:85:
24:b8:3a:25:10:cb:9d:72:9f:c0:eb:80:d8:95:5e:11:76:9f:
e4:7a:50:b5:29:a1:9f:a3:ac:de:42:a0:ee:a9:46:3a:81:ab:
a1:3e:ca:db:55:52:87:d8:e6:61:54:fe:75:69:85:42:60:6f:
85:2f:6d:58:f2:40:fd:ba:60:dc:8f:02:74:f3:3c:f4:9f:ad:
80:73:98:cc:de:f8:c9:fd:08:90:d1:6b:5c:12:73:ca:fb:9f:
70:e3:f3:c4:49:4c:e2:f4:7b:10:f0:d4:3b:d1:ce:65:fe:fc:
1f:02:f3:a1:5b:d2:1d:c9:01:02:16:56:c8:2f:c2:33:88:3e:
a5:f4:35:2c:1e:1e:ed:08:0b:ba:d4:06:83:fe:15:75:8f:c9:
d6:de:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:21 2025 by rpki-client