Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211338.roa
File: AS211338.roa (raw, json)
Hash identifier: GHRdZ5Wu90J99BH2xyJLNwUy32jke524DZDLjVwepWs=
Subject key identifier: AD:2F:72:62:ED:1F:AC:C5:36:6D:FD:9B:C8:07:06:3C:59:B0:BC:B3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6032DA980A1CA94AF37D95A4C9595D488ECC3602
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211338.roa
Signing time: Wed 26 Mar 2025 21:50:31 +0000
ROA not before: Wed 26 Mar 2025 21:45:31 +0000
ROA not after: Wed 25 Mar 2026 21:50:31 +0000
asID: 211338
IP address blocks: 2a0f:85c1:bf2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:32:da:98:0a:1c:a9:4a:f3:7d:95:a4:c9:59:5d:48:8e:cc:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 26 21:45:31 2025 GMT
Not After : Mar 25 21:50:31 2026 GMT
Subject: CN=AD2F7262ED1FACC5366DFD9BC807063C59B0BCB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:ba:e2:8d:23:61:8b:6d:95:b7:00:a0:e3:
eb:3e:ac:35:54:86:24:5e:0e:1d:1e:ec:c1:08:e8:
b7:68:2b:1d:7d:1f:cb:10:a7:f2:a6:82:0d:1f:e1:
b3:d0:11:a2:44:ff:d0:d1:68:6e:e7:3b:09:69:a8:
e3:ba:78:dd:5d:50:bd:05:4d:10:8d:c3:d0:3b:e7:
8e:ce:dd:6f:00:ad:09:b0:c8:67:d0:22:4f:ac:a0:
7d:50:ab:9b:ee:ee:92:ac:ff:f7:13:cb:fd:4e:e7:
f5:bc:62:6b:a3:be:ab:c2:78:78:2b:51:38:4d:a2:
9b:f8:35:9c:14:b0:1d:07:6d:4e:b6:2d:f2:b3:5b:
58:d1:76:c2:bc:ec:86:88:64:a2:27:d1:27:4f:3a:
11:9a:ca:02:d0:5c:c9:dc:7f:d5:bb:b3:4d:a3:8f:
db:f0:42:cf:13:23:20:71:43:c0:5d:e1:8b:d2:4c:
8c:20:b2:c8:79:87:23:d0:a7:13:6e:55:a6:26:c5:
c1:98:a6:c5:9d:e7:af:38:ce:20:df:b1:79:60:dd:
49:5a:0b:65:22:66:51:78:ed:03:b3:c9:6c:75:b2:
71:40:59:a9:44:68:72:31:76:be:3d:74:4e:4b:72:
90:d6:65:87:e0:a1:00:01:2f:66:91:c3:0e:77:ae:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:72:62:ED:1F:AC:C5:36:6D:FD:9B:C8:07:06:3C:59:B0:BC:B3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bf2::/48
Signature Algorithm: sha256WithRSAEncryption
18:70:3a:4a:6e:35:12:a1:38:12:21:f2:b9:ae:79:12:bc:94:
c7:73:94:17:68:7e:f9:bd:1d:a2:36:91:45:b7:ce:aa:14:d0:
91:2a:6b:d5:af:cd:00:4e:68:be:50:a1:f5:3a:b3:fc:db:b3:
bd:6f:d4:cc:2f:f3:48:11:f9:ff:f5:f7:e0:f6:95:55:a4:0a:
28:b2:c8:de:9f:08:ee:b7:47:d3:09:58:c7:28:4a:c7:23:2b:
4c:b4:ac:6c:30:75:06:cf:9c:30:c2:5c:5c:4d:bb:b9:e4:ab:
f4:2a:73:1d:47:03:c3:93:90:00:56:3f:5f:e0:d9:da:e2:89:
df:ef:82:5c:79:81:22:c0:b7:9c:a5:fd:e5:a1:af:3e:f1:e2:
ed:d9:ff:88:5d:f5:10:f2:6b:b4:5c:07:2b:79:19:c7:70:69:
fc:0b:7c:3d:58:c6:a9:50:90:0a:72:a3:ee:b7:36:83:0e:1c:
c8:48:30:54:78:fa:cc:e0:3f:3e:44:d7:7b:ae:31:69:c3:13:
9e:d9:21:f2:c3:43:3d:b0:ab:5b:4e:1a:69:2d:71:4e:90:48:
04:f4:e3:a8:c6:8f:77:08:ce:a5:c9:0a:f0:7d:eb:2a:38:ba:
ec:64:73:8a:c5:45:44:8f:d6:dd:69:cb:4e:ed:c4:bb:4d:87:
1e:57:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:08 2025 by rpki-client