Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS57483.roa
File: AS57483.roa (raw, json)
Hash identifier: ycDcSCT4QfczNbcmhHFBTT3SO5hG9rea8HTce5/rfIE=
Subject key identifier: FE:5F:3A:06:1D:C8:D7:9C:98:50:2E:27:C2:13:09:FE:C4:48:C5:0D
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 651AF359E1138DEFF2EA1352C29AF2B70F9EFFF1
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS57483.roa
Signing time: Mon 30 Jun 2025 14:59:43 +0000
ROA not before: Mon 30 Jun 2025 14:54:43 +0000
ROA not after: Mon 29 Jun 2026 14:59:43 +0000
asID: 57483
IP address blocks: 2a0a:6044:7100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1a:f3:59:e1:13:8d:ef:f2:ea:13:52:c2:9a:f2:b7:0f:9e:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:43 2025 GMT
Not After : Jun 29 14:59:43 2026 GMT
Subject: CN=FE5F3A061DC8D79C98502E27C21309FEC448C50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:88:d9:47:06:cc:16:c6:8c:0e:63:ee:3b:
c7:74:8e:77:1c:b9:a1:27:4f:dc:d4:0c:ae:ae:f8:
53:ad:56:85:92:99:62:5f:d2:e2:c5:9d:7e:ef:69:
7c:66:ba:f7:cd:3d:d9:f2:dc:4e:31:24:da:77:e5:
90:45:9d:ff:21:5d:df:f9:a7:13:df:7f:74:8c:51:
c3:3a:6a:22:43:7a:7c:0a:c0:2c:60:5d:39:64:ae:
cd:88:6d:07:d7:f9:ae:47:4f:4d:c0:cb:8a:5b:e8:
70:f1:cc:07:08:6f:22:7c:3f:07:3f:e4:26:15:14:
c8:93:d3:66:2c:85:16:7a:f0:4e:b8:c9:a2:09:6f:
be:75:84:e7:28:cb:71:90:7a:fe:98:97:d3:e1:65:
0e:c7:5e:91:37:6b:01:d7:3a:cd:27:8d:0a:79:f1:
0b:45:14:88:22:56:94:49:18:16:23:be:71:d8:ca:
3b:15:d2:2b:8b:b0:6d:af:db:cd:87:25:54:90:c7:
9b:78:f7:f8:dd:78:c1:fe:a8:52:73:2b:85:49:04:
aa:37:ca:d2:20:a9:21:92:03:76:54:f8:28:1f:23:
5a:9c:da:6a:8d:fa:4a:5e:2f:ef:18:16:cc:3e:24:
b9:d1:6d:dc:04:62:e9:1f:db:a5:5e:fa:5b:bd:38:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5F:3A:06:1D:C8:D7:9C:98:50:2E:27:C2:13:09:FE:C4:48:C5:0D
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS57483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7100::/40
Signature Algorithm: sha256WithRSAEncryption
ab:df:27:28:b6:d3:3d:a7:99:e5:10:48:e7:0c:df:29:d8:b8:
af:7a:e4:15:38:d1:a7:90:eb:83:58:f6:ac:68:f0:05:04:ea:
64:a2:35:5d:b7:5a:64:46:1d:3d:a8:21:0c:4d:57:88:5e:a5:
53:3f:e5:8c:a2:09:09:32:2b:72:fd:5a:cc:81:a3:b3:de:99:
8b:9a:e5:90:10:6e:aa:81:70:d3:10:d2:93:31:e4:c2:15:08:
c5:08:d3:5e:2d:d3:86:50:a6:dd:c3:7e:ae:45:83:d3:c4:ad:
9d:a6:b1:77:0b:aa:99:40:a7:44:be:d9:e7:43:a3:29:42:d2:
2e:3d:f6:b3:48:81:0b:60:ab:b5:44:75:e2:d4:72:39:33:30:
2e:05:e4:83:76:99:e3:7b:8d:ed:5f:ae:14:06:4c:33:82:2e:
8a:5f:13:d7:de:d9:c6:bf:3b:68:f6:0c:2f:a4:c2:95:c2:d9:
e3:e0:c3:c6:af:10:6f:4f:1a:d3:8d:b7:f5:fd:2a:38:29:81:
81:ad:f4:98:41:78:e4:4f:36:f2:58:95:83:23:c1:65:a6:44:
ae:7c:16:c0:a5:f6:a7:c5:51:9d:3f:c8:7b:58:d1:79:fe:e5:
b6:dc:83:8c:dd:03:09:0c:fd:6e:fc:09:f9:32:75:02:fc:9b:
cb:67:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:14 2025 by rpki-client