Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197450.roa
File: AS197450.roa (raw, json)
Hash identifier: wwwROIygaixwFOhqhs6PloTUtaKBCBJAwVkvcFrcD70=
Subject key identifier: A8:EF:B1:04:34:61:15:77:35:3B:58:D6:55:97:5D:CB:97:CC:2E:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 481C8B6E7D02BEA888FDF221931C5DD8E926D99E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197450.roa
Signing time: Mon 10 Mar 2025 22:21:21 +0000
ROA not before: Mon 10 Mar 2025 22:16:21 +0000
ROA not after: Mon 09 Mar 2026 22:21:21 +0000
asID: 197450
IP address blocks: 2a0f:85c1:8f3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1c:8b:6e:7d:02:be:a8:88:fd:f2:21:93:1c:5d:d8:e9:26:d9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 10 22:16:21 2025 GMT
Not After : Mar 9 22:21:21 2026 GMT
Subject: CN=A8EFB10434611577353B58D655975DCB97CC2E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:67:8e:97:14:d5:31:0b:f9:64:58:19:e0:
4b:00:e2:16:cd:f7:7a:c1:01:4e:a7:55:6f:9c:a4:
77:64:67:50:57:a6:44:32:84:ec:cb:c6:0f:b9:94:
03:14:96:21:88:7f:7e:52:24:67:c4:82:89:e6:b4:
32:b0:03:f5:f6:16:84:87:50:8b:36:08:dd:86:1a:
ad:24:1b:62:01:2a:94:13:2e:05:86:9d:b7:47:a8:
f3:49:0e:41:96:69:ce:25:88:92:d5:9f:2e:79:ec:
c9:ee:4c:16:0e:3c:fd:c8:b5:16:92:cb:c2:ba:ce:
2f:a2:81:9b:42:7e:11:70:fc:fc:35:09:00:f4:a9:
c8:2d:5f:0c:c8:61:5c:31:97:3f:22:96:c3:19:ce:
8c:34:95:39:e2:aa:f0:1f:c7:c5:48:fa:8a:a0:99:
ec:e3:81:16:60:72:75:00:1b:a1:6c:a1:c8:48:44:
4b:09:b4:1c:a0:6e:19:a5:3e:90:a9:87:90:cd:75:
25:dd:bd:54:d8:5a:dd:04:88:cc:e5:c4:80:ad:43:
d2:7d:9c:0b:18:e7:8c:9a:92:63:1d:48:c2:18:03:
65:2f:42:c9:c6:71:98:6a:2f:b4:11:78:5a:6b:2b:
97:d5:74:3e:9b:57:c6:0a:9e:68:af:d6:5e:17:ac:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:B1:04:34:61:15:77:35:3B:58:D6:55:97:5D:CB:97:CC:2E:1C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f3::/48
Signature Algorithm: sha256WithRSAEncryption
7f:30:94:a6:d3:d6:06:5c:5c:53:22:17:95:50:10:96:cb:3f:
99:09:2f:66:d1:0a:9f:a0:b5:2c:01:34:f4:4c:57:12:af:e9:
75:ba:66:52:0e:3f:d7:23:f9:7c:34:5b:f5:12:be:d4:05:9f:
37:99:6f:28:ab:7c:c8:a3:0e:bc:6f:f4:48:c7:b7:6c:e3:6f:
26:bd:f8:31:98:25:dd:fa:6f:f4:73:3c:bc:1b:29:83:aa:2c:
cb:21:29:94:6f:ff:11:68:ee:1a:bb:14:cb:8b:e2:d8:bb:57:
ec:56:31:4c:3d:77:d5:d1:cb:c9:b6:45:a3:f2:ea:f6:98:43:
20:d0:ed:68:b4:7e:83:79:8a:da:26:44:b3:ee:be:4b:80:e9:
36:1f:ec:85:96:5c:a6:19:25:93:a8:3a:a1:6f:ff:8e:35:46:
b2:3f:9f:e1:ab:26:6e:f1:24:6d:b3:97:39:dc:19:c7:38:ea:
33:bd:eb:ea:c5:27:6a:bb:44:6c:f1:46:a3:2e:c3:a0:3c:69:
c2:7b:03:d3:9c:d0:60:bd:0b:56:2d:b5:bc:59:cb:8d:53:aa:
13:ac:c2:45:dc:d2:9c:76:86:b1:55:0f:6d:be:ed:ae:72:ab:
71:e2:f4:1b:58:e5:de:1d:d0:68:2f:19:47:e5:d3:94:fc:e2:
d9:0e:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:47 2025 by rpki-client