Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199241.roa
File: AS199241.roa (raw, json)
Hash identifier: xsIhxY561gbYyDMNLPUYjU3pQDVADYTSHzp6Sy7UMs0=
Subject key identifier: 1C:11:E5:A4:2E:46:6D:51:69:FE:08:54:D6:FB:2F:DA:65:DE:C9:C1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5C602B5389EA5E9F3CFC60F55CD3255D202E14FF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199241.roa
Signing time: Tue 04 Mar 2025 18:03:33 +0000
ROA not before: Tue 04 Mar 2025 17:58:33 +0000
ROA not after: Tue 03 Mar 2026 18:03:33 +0000
asID: 199241
IP address blocks: 2a0f:85c1:b71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:60:2b:53:89:ea:5e:9f:3c:fc:60:f5:5c:d3:25:5d:20:2e:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:58:33 2025 GMT
Not After : Mar 3 18:03:33 2026 GMT
Subject: CN=1C11E5A42E466D5169FE0854D6FB2FDA65DEC9C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:5c:66:c8:5d:f2:bd:58:be:92:b9:a6:d9:
0b:fd:0c:fd:92:fa:ca:7c:2b:56:24:19:d7:fb:0b:
f2:93:1f:f3:8d:5f:82:fa:d2:2e:d2:54:0e:a2:c3:
50:fb:a3:74:11:d0:95:ce:99:8d:a5:bc:44:94:cc:
b9:43:53:2e:69:7b:c9:f2:80:2a:bb:02:ef:27:f5:
0c:c9:ec:75:2f:42:60:cb:e0:7e:cc:c2:c8:23:a6:
4d:c5:54:a3:0f:1c:e4:ef:9f:69:58:f4:89:75:2c:
d2:1a:a8:0f:b0:52:7e:6f:fd:c5:76:79:9d:10:df:
7f:a8:3c:93:e5:9e:55:c3:a1:c9:db:23:b0:e8:e5:
04:6d:51:7c:99:fa:41:71:5b:9a:a0:f1:33:89:65:
47:b9:13:b0:78:90:43:99:b3:d5:f1:01:c9:b0:3e:
32:99:3e:c4:bd:35:f5:1c:04:01:7d:9c:38:d2:bb:
d4:0b:d4:9b:3f:d9:02:16:11:c1:ab:03:c1:6f:d4:
09:05:2b:41:24:4a:75:9f:eb:82:bd:55:ad:41:0f:
a0:25:df:cb:db:da:6e:97:da:28:00:bf:ce:0a:ee:
d7:fd:11:b3:7d:dd:81:3b:32:4a:23:43:57:db:c5:
18:8b:9e:86:60:e4:c4:55:52:52:c7:3d:45:4a:66:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:E5:A4:2E:46:6D:51:69:FE:08:54:D6:FB:2F:DA:65:DE:C9:C1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS199241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b71::/48
Signature Algorithm: sha256WithRSAEncryption
44:0a:20:2d:f5:4b:13:a1:df:ef:72:b2:d2:f2:71:47:5a:0d:
b2:d2:6c:6a:0b:3c:72:16:00:7d:d4:61:cf:75:dc:e6:e5:4a:
44:98:be:f9:e4:1e:91:9a:2c:27:cf:3c:e3:45:d1:e2:e1:86:
0f:32:a3:c6:fe:e1:67:6f:ac:9e:78:a5:dd:28:1b:cb:b4:c1:
bb:81:68:97:e8:f5:2d:4b:4a:8b:d3:5b:74:15:2b:fd:38:38:
3a:e8:96:e0:b6:5b:dc:c8:ca:29:3e:86:22:13:65:21:d9:62:
8b:6e:15:1a:61:48:b6:1e:f6:e7:9d:5a:e7:69:5c:59:37:3a:
7d:a2:bc:16:2c:ee:79:6c:81:9d:4a:f9:3e:28:a7:3d:09:68:
f8:34:00:d8:19:c5:5d:f7:cc:ef:06:24:f8:ea:c3:d5:62:83:
41:60:7a:05:34:f5:50:3a:58:0b:a6:d5:55:94:35:26:82:2b:
f3:c9:45:fb:4a:3e:15:f0:ef:52:93:dd:c0:7a:43:93:a2:88:
8c:21:36:c1:70:15:3d:2f:92:9b:f6:83:8f:83:00:0d:60:8d:
d2:9b:46:e5:dc:71:ec:06:f2:6e:f9:26:05:b5:56:92:93:b4:
d7:d6:aa:da:ca:87:93:58:e6:9e:a9:1e:af:ff:23:b6:d3:07:
bd:a9:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:45 2025 by rpki-client