Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS49867.roa
File: AS49867.roa (raw, json)
Hash identifier: w+op006Nzeosu8I6DB88ctt0QuhdYrDVGDt5BaxUFTw=
Subject key identifier: C3:D5:1C:43:58:46:4A:61:85:87:11:D9:0E:8F:C4:C5:28:E6:9E:72
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 52214704A95A0FBBD1A8817049668C5B725EC16F
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS49867.roa
Signing time: Mon 30 Jun 2025 14:59:47 +0000
ROA not before: Mon 30 Jun 2025 14:54:47 +0000
ROA not after: Mon 29 Jun 2026 14:59:47 +0000
asID: 49867
IP address blocks: 2a05:dfc3:f400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:21:47:04:a9:5a:0f:bb:d1:a8:81:70:49:66:8c:5b:72:5e:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:47 2025 GMT
Not After : Jun 29 14:59:47 2026 GMT
Subject: CN=C3D51C4358464A61858711D90E8FC4C528E69E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:47:f9:66:eb:af:e8:64:1e:8e:3e:91:ad:
9d:aa:1d:c0:0a:cc:59:57:f8:ae:13:30:be:93:ea:
05:51:a3:81:12:50:c8:5a:fb:7b:4d:6d:cc:45:cd:
45:b1:e1:d3:05:d6:5f:47:e3:49:9e:a7:a4:b6:a5:
c3:b8:1f:22:9d:78:97:bd:24:6c:50:f5:98:3b:c1:
ed:f3:3b:31:b3:3f:c4:02:c0:15:66:ac:d4:2f:ff:
4e:9b:75:71:ba:d7:75:80:e2:45:13:8d:39:8b:98:
dc:ea:4f:6d:ce:18:6f:56:4c:55:8d:3f:d9:9b:3b:
84:78:12:56:66:c3:04:4b:45:c8:2e:28:d6:12:17:
88:aa:75:b9:93:d1:45:ee:a4:c0:29:b2:db:df:32:
6f:cd:de:5c:f5:e3:43:30:ab:46:c3:fc:94:b4:ec:
fa:a9:47:00:9d:1c:b7:1f:80:9e:8b:99:1e:fd:e6:
81:34:8d:51:01:6f:2c:6e:ac:e2:78:66:f6:36:ce:
85:0a:25:c3:e2:28:91:3c:ef:29:54:4a:19:f9:be:
86:64:2f:d1:57:e8:2e:81:31:39:d8:ef:44:5c:76:
3d:93:dd:6c:d4:b2:be:72:ea:e8:e0:5e:b9:62:22:
47:62:1b:92:ce:3f:87:22:c8:81:58:8b:21:e1:bb:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:1C:43:58:46:4A:61:85:87:11:D9:0E:8F:C4:C5:28:E6:9E:72
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS49867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f400::/40
Signature Algorithm: sha256WithRSAEncryption
3a:d7:44:13:a3:16:cb:d7:51:44:b1:49:d8:bb:69:18:b6:90:
46:7b:92:b9:55:df:a8:6c:f8:f9:21:4e:14:91:ea:44:6f:d4:
9b:92:17:b4:86:39:3b:8a:02:2a:a7:19:92:42:e4:4e:1c:fb:
57:7e:55:79:a6:7a:4e:86:05:1d:f6:2a:49:02:87:c0:ab:d8:
9e:4b:9a:bf:b0:c9:2e:f2:79:51:df:b3:f7:ed:de:7e:c9:a8:
6f:32:5e:52:7a:58:f5:79:35:00:8c:ee:3d:36:dd:35:a9:7d:
95:48:1e:42:a3:8c:73:60:a6:3b:2a:da:6c:d8:10:4f:1a:1e:
c5:0c:84:f2:14:c2:8b:43:20:b0:66:e1:99:fa:d8:8d:9a:ba:
52:7f:6e:10:c2:d2:1e:40:bc:bd:a6:e5:00:e2:df:cd:87:82:
e2:af:7b:90:40:c7:b1:c8:59:3c:ec:05:7e:67:7a:93:52:f1:
d5:3a:e8:af:40:de:ae:f2:5f:3a:b5:fd:e6:74:e5:ee:70:27:
e4:a8:67:86:03:46:4d:dd:99:35:04:a2:08:32:25:a0:7f:8b:
31:85:95:a1:bd:12:52:5f:a7:58:42:2d:19:50:e6:ac:03:48:
aa:3f:07:5d:e4:37:21:e3:40:9b:97:5a:74:60:c2:fd:67:93:
06:cb:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:20 2025 by rpki-client