Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: K1TXtLOcteEB1wP6AMIzLxNmN1q94LwRJ43GCnZ2lWc=
Subject key identifier: 81:8C:07:EC:BE:7F:90:CC:91:26:07:E4:E8:B8:76:37:10:BD:BA:6A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 046316EBD2F0FB0695F3863648D445EC36841749
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS48678.roa
Signing time: Mon 30 Jun 2025 14:59:45 +0000
ROA not before: Mon 30 Jun 2025 14:54:45 +0000
ROA not after: Mon 29 Jun 2026 14:59:45 +0000
asID: 48678
IP address blocks: 2a05:dfc3:fd23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:63:16:eb:d2:f0:fb:06:95:f3:86:36:48:d4:45:ec:36:84:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:45 2025 GMT
Not After : Jun 29 14:59:45 2026 GMT
Subject: CN=818C07ECBE7F90CC912607E4E8B8763710BDBA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:96:5b:cd:10:d6:53:94:cf:e6:cb:0a:dc:
09:5c:36:58:20:5f:f3:5d:fa:48:68:e2:1c:24:41:
c2:3b:07:27:6a:40:8a:ad:36:85:95:52:f2:2e:5b:
62:b9:28:c4:ff:52:23:bf:31:e3:0b:84:1c:e1:07:
e8:9a:41:40:a6:5d:1c:ac:08:6d:49:95:a2:15:12:
ca:aa:e0:3f:c6:f5:cb:b2:fe:4c:69:ab:f8:bf:3e:
66:a6:9d:d8:07:e6:50:ee:54:eb:10:9a:da:f8:0b:
c4:de:13:6f:a5:7e:07:13:eb:19:e3:84:87:6e:ec:
8a:ba:12:0c:7c:00:dc:ba:1e:b9:80:11:c0:83:9b:
a1:9b:e0:3e:84:a4:2c:25:e2:98:3c:d0:5c:0d:b5:
26:78:35:9c:e8:59:67:7d:d4:ce:8d:10:28:5c:d5:
25:bf:18:11:f0:57:57:1e:49:59:19:72:4a:83:92:
37:53:ab:0c:b6:ec:2e:fe:a2:30:11:4b:78:08:8d:
a9:be:d3:ea:80:80:57:c0:b4:a6:77:50:6e:8d:7b:
5f:74:22:82:ec:95:4a:1a:51:95:16:86:06:ee:ec:
80:e2:0f:c5:ef:d4:63:0a:dc:25:94:a1:54:62:5b:
2a:b5:86:c2:8c:28:0b:ab:8a:5b:2e:16:48:42:9c:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:07:EC:BE:7F:90:CC:91:26:07:E4:E8:B8:76:37:10:BD:BA:6A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd23::/48
Signature Algorithm: sha256WithRSAEncryption
40:d2:76:30:06:dc:f6:2b:77:09:2f:91:ce:01:2c:92:a0:bf:
42:d4:da:82:02:40:5e:20:d4:7e:a9:ac:0b:8f:fc:66:7e:d7:
8b:30:6a:8c:c7:90:dd:ec:55:9e:cc:9c:ca:04:83:c8:66:5d:
b2:5d:3a:dc:9f:50:f9:89:02:9f:3e:1d:b5:3a:c4:fd:d2:bb:
4f:08:7b:a2:b0:4f:0a:42:1d:c3:48:75:2e:3b:c2:7f:25:d9:
4d:3c:c9:c8:c8:3b:7b:ba:ae:e3:d8:8a:4d:ce:65:1c:d7:d8:
b8:64:bc:ef:e6:17:07:1c:0e:2d:4a:b7:fe:d3:82:04:4e:1b:
b1:3c:3d:a8:39:f7:f3:1b:4e:cd:5e:e9:25:92:6a:b5:36:29:
52:38:fa:7e:6e:ee:f2:3e:8f:a7:5c:84:40:2d:ae:61:15:92:
9c:22:d1:8f:7a:e0:a1:75:17:ef:47:f2:96:d1:90:cc:06:f8:
29:9a:0b:25:30:93:d3:4d:21:f5:37:7f:d7:46:71:7e:47:d4:
07:e9:fd:f7:32:5a:a2:6d:8a:c8:1d:b5:a6:bd:2f:6e:1f:0a:
46:97:c1:8e:3b:72:74:38:74:f0:3d:b4:79:36:a4:95:d6:9a:
6f:f4:5a:51:ba:37:79:fd:32:9f:92:bf:d9:bc:8e:1b:22:5f:
54:f8:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:17 2025 by rpki-client