Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211851.roa
File: AS211851.roa (raw, json)
Hash identifier: tyR9T/WZ6nAc4RImVrZs5epKhW7I78rNz5BogWcTwFg=
Subject key identifier: F5:24:BD:4A:A1:FB:AD:0F:7D:27:54:7A:0B:1D:32:6B:F0:FF:99:C7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 59ED8C5EC597C3DA4C0FA2859233713FB95DBE45
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211851.roa
Signing time: Mon 10 Mar 2025 22:22:08 +0000
ROA not before: Mon 10 Mar 2025 22:17:08 +0000
ROA not after: Mon 09 Mar 2026 22:22:08 +0000
asID: 211851
IP address blocks: 2a0f:85c1:bb6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ed:8c:5e:c5:97:c3:da:4c:0f:a2:85:92:33:71:3f:b9:5d:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 10 22:17:08 2025 GMT
Not After : Mar 9 22:22:08 2026 GMT
Subject: CN=F524BD4AA1FBAD0F7D27547A0B1D326BF0FF99C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:a8:d2:8b:02:d6:b4:4a:37:a3:b5:9b:dc:
e5:6f:34:72:8a:f9:a6:4f:ce:3c:0c:f8:7f:14:ff:
58:81:2c:7c:02:70:a0:27:b7:3b:31:78:cc:31:2d:
70:4e:67:36:5e:16:03:16:e1:6d:8a:a6:a2:64:cc:
42:a2:c3:04:59:3f:3b:2a:94:38:39:26:b4:c9:08:
1e:70:45:c8:68:79:41:8c:03:9a:53:e0:cb:cf:4d:
55:00:ae:1a:60:f6:89:71:f5:d0:ea:2c:c0:99:2e:
af:ea:9b:cd:b5:3e:7c:57:10:eb:15:e5:be:95:a8:
ca:c7:70:66:43:92:38:24:74:d7:1c:0f:9b:f6:a8:
91:dd:00:fc:84:25:92:0d:5d:46:35:11:88:c7:01:
73:54:a2:0b:ac:22:95:90:f5:7b:d4:08:9c:18:62:
04:60:3f:a7:5d:4f:26:0f:0b:6b:fe:e3:11:62:13:
ed:22:10:03:05:20:db:b5:56:3a:38:22:fb:f3:27:
1c:9c:cf:bc:e0:de:bc:71:92:f8:5b:9e:c1:b2:d9:
5d:31:b7:ba:5d:28:4f:fa:45:ce:9d:8f:db:b6:c4:
74:61:60:e3:8d:3c:be:af:b0:31:f3:90:98:42:93:
2e:02:45:30:b9:eb:ed:37:e6:52:3d:f8:8c:73:72:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:BD:4A:A1:FB:AD:0F:7D:27:54:7A:0B:1D:32:6B:F0:FF:99:C7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bb6::/48
Signature Algorithm: sha256WithRSAEncryption
4f:28:58:6d:02:eb:37:e7:d7:2f:e4:37:b1:eb:57:c4:21:18:
34:7f:1e:22:d7:3e:8b:d6:db:fa:29:12:af:74:f4:c6:f2:f3:
7b:e6:1b:46:fd:d2:26:ce:be:3c:9c:ea:87:c0:d9:b7:39:f3:
d2:17:aa:80:3a:f2:17:25:12:ae:eb:94:72:6a:f7:0e:d8:14:
cd:f6:cc:d5:2c:04:6b:5b:18:09:ef:58:ef:fb:85:f6:c3:fc:
da:19:bb:d1:48:1a:85:18:ab:65:fa:48:41:14:a2:70:95:1b:
8f:84:ea:3c:fe:1e:6b:fb:d0:ec:d2:77:83:65:f2:c3:12:a1:
a3:b7:ad:74:94:40:b6:fb:f5:08:b3:ce:f5:41:28:ed:85:1b:
d4:47:95:38:84:e3:44:f1:b6:d6:f6:27:f1:b9:8d:55:ea:82:
cf:41:d0:1c:43:9b:9e:7e:00:2a:26:2a:e0:e5:f8:fe:b9:26:
9d:08:c5:a8:a4:e0:a7:2b:bd:ee:70:a2:a8:9d:d2:d7:b9:73:
29:37:65:68:b9:94:8a:a4:4e:14:df:1b:8d:04:8e:af:c9:60:
c5:4b:60:2e:df:1b:db:bb:69:9d:6c:23:32:36:cb:bd:db:fa:
cd:cf:7c:86:84:87:5a:09:37:43:4e:fb:52:90:ac:5e:2a:ad:
ee:28:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:19 2025 by rpki-client