Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa
File: AS200237.roa (raw, json)
Hash identifier: Wp1LfgWCo92sKM1Q4BTNc2SzaVgGGswyvbbURpXz47o=
Subject key identifier: F3:48:2D:2C:49:FC:0A:FF:78:DD:32:49:25:3A:D0:CB:94:10:E9:49
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27DE8BD13A5D732848CE24C87DAE290A28B76E01
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa
Signing time: Tue 11 Feb 2025 03:41:15 +0000
ROA not before: Tue 11 Feb 2025 03:36:15 +0000
ROA not after: Tue 10 Feb 2026 03:41:15 +0000
asID: 200237
IP address blocks: 2a0f:85c1:b90::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:de:8b:d1:3a:5d:73:28:48:ce:24:c8:7d:ae:29:0a:28:b7:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 11 03:36:15 2025 GMT
Not After : Feb 10 03:41:15 2026 GMT
Subject: CN=F3482D2C49FC0AFF78DD3249253AD0CB9410E949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:73:8c:b1:0e:38:4a:d9:64:ba:bc:51:80:
4f:5f:5c:02:ca:ef:34:09:90:f7:3e:5a:a3:d7:36:
63:38:ae:1a:18:c8:bb:ca:47:4a:22:ff:e0:30:ee:
6a:eb:13:d7:c3:05:0f:de:38:7d:7a:25:ee:c8:f3:
e1:18:27:bf:45:7e:df:c0:90:93:71:ac:b6:db:9f:
f0:13:e1:96:0f:29:7e:38:43:99:41:21:f9:bc:31:
7f:23:d6:7f:22:9d:ed:df:f5:0b:b8:78:1f:3e:6d:
95:ec:e9:1d:da:e6:5e:ce:36:2e:af:f1:d3:05:27:
93:9a:79:ef:9a:e2:bb:06:08:cc:b9:66:c8:5f:c5:
0b:7c:e4:c9:d2:b7:71:dc:93:df:47:99:1d:47:2b:
6c:88:3a:a6:c6:36:68:12:88:2b:35:9b:0b:41:bb:
8a:b0:2e:d4:60:b4:fa:bd:c8:7f:f3:e6:a4:5b:14:
a7:34:f9:8c:7c:aa:e6:22:f7:39:c8:29:79:12:b9:
94:86:c1:1d:ed:5b:fc:f2:41:47:79:b5:d0:a3:8c:
f9:c4:48:17:84:bd:c2:88:41:19:b6:b7:97:6c:3d:
aa:01:30:d4:6b:ff:03:42:11:78:f5:19:db:93:a2:
7b:d1:d8:36:c9:b6:e8:c1:de:dd:86:2e:b0:e2:b5:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:2D:2C:49:FC:0A:FF:78:DD:32:49:25:3A:D0:CB:94:10:E9:49
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b90::/44
Signature Algorithm: sha256WithRSAEncryption
2a:55:67:ff:1e:10:5a:33:37:b5:cd:37:45:96:22:db:0c:72:
16:3a:2c:e6:4d:61:97:4a:68:0d:fa:76:f1:75:2a:e2:70:08:
58:00:f7:a8:7c:15:88:11:f2:6a:a5:f9:ff:67:ac:12:b5:a4:
80:aa:1a:91:a7:40:9b:7f:fa:1f:8a:99:59:e2:91:e2:c4:56:
aa:8d:aa:ad:f9:03:50:68:de:94:51:1d:3c:52:d9:21:5c:aa:
c9:a1:8f:04:6b:7b:bb:0a:9e:fc:92:8a:71:4a:26:ff:b8:57:
b9:b4:5a:19:9d:53:fd:ce:0d:c4:84:39:4b:d4:27:e2:62:87:
26:19:d9:9c:39:ae:72:44:3a:b2:7c:b4:48:fe:62:46:08:b4:
a8:dc:ff:9b:5e:77:8b:e7:40:45:89:4c:6f:b3:1d:de:41:06:
1d:62:a1:98:72:9f:c1:ba:18:8f:28:53:92:50:d1:53:87:28:
5d:b0:fd:67:53:cc:fa:ca:db:88:4f:01:7c:6c:d4:42:e1:7a:
2a:d9:7c:64:20:d8:86:e6:ca:ba:b7:b6:73:60:ce:7d:bc:da:
2e:6c:b3:78:32:99:5f:f9:f8:a3:04:5e:0a:4f:74:66:f4:cb:
e9:5d:a5:27:73:39:35:e7:67:4f:3c:47:02:e6:6c:cb:f6:be:
10:46:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:03:10 2025 by rpki-client