Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211979.roa
File: AS211979.roa (raw, json)
Hash identifier: g9BFZ1MU+kEAmnIXrWWVHCrE2amXxrn7d2ZkR8X7WN0=
Subject key identifier: 38:B6:65:FA:2B:31:E6:09:54:E2:14:37:50:03:77:45:2E:D1:9F:CF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 256B37CF5AADB81ED39968A54DD1910392B3A32F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211979.roa
Signing time: Fri 21 Mar 2025 05:16:51 +0000
ROA not before: Fri 21 Mar 2025 05:11:51 +0000
ROA not after: Fri 20 Mar 2026 05:16:51 +0000
asID: 211979
IP address blocks: 2a0f:85c1:b4a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6b:37:cf:5a:ad:b8:1e:d3:99:68:a5:4d:d1:91:03:92:b3:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 21 05:11:51 2025 GMT
Not After : Mar 20 05:16:51 2026 GMT
Subject: CN=38B665FA2B31E60954E21437500377452ED19FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:fb:a4:56:5c:bc:17:ab:e2:59:f5:cc:bc:
89:e1:f8:c4:83:ce:68:f4:b5:01:be:c3:80:10:19:
95:84:b8:40:ff:89:e1:42:46:1d:ec:10:d7:dd:a8:
0f:95:b8:10:ae:82:0b:34:3d:99:30:d7:25:06:e1:
75:66:2e:5d:6b:6c:e9:f8:ec:6d:8a:e6:03:b4:69:
e0:0b:dc:9c:5f:94:7a:b3:b7:cf:38:47:ab:e8:0e:
cb:91:c6:2b:e8:13:f1:d1:a1:de:53:80:92:d3:7f:
fa:3f:59:6e:9f:0b:be:f6:68:d3:ca:73:eb:f9:8d:
30:bf:0f:5f:ce:06:46:eb:df:80:aa:0f:f2:f8:db:
d7:b7:72:a5:06:37:78:3c:0d:81:fd:6a:a0:76:da:
b8:52:ea:72:42:21:ce:93:b2:5a:45:90:49:b2:9d:
7f:fb:de:c4:19:c6:12:22:c1:51:d7:7d:d2:1b:ab:
77:d1:88:66:dc:e0:68:d3:6b:5d:77:4d:ec:07:bf:
0a:60:9f:05:8f:27:1f:8d:6d:14:78:fd:4d:be:a3:
88:cf:3c:38:37:c0:87:59:b8:88:45:86:13:bc:2b:
ea:2e:5c:54:b7:45:1f:79:0f:94:17:f6:e5:36:ce:
6e:12:92:4d:e9:ec:f6:d4:d4:21:1a:e6:13:c2:f9:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:65:FA:2B:31:E6:09:54:E2:14:37:50:03:77:45:2E:D1:9F:CF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b4a::/48
Signature Algorithm: sha256WithRSAEncryption
0c:14:1e:2e:11:d2:04:de:87:14:da:a3:7f:2b:f9:3e:08:a1:
c7:cf:a5:cb:0b:27:b2:98:23:fd:0c:bb:15:c9:79:d8:5e:b0:
90:2a:61:e8:5f:e6:d5:e4:31:a3:9a:85:33:48:70:2c:ac:f9:
38:39:98:cb:03:76:1a:25:60:9b:5c:3f:59:c6:db:0b:c5:9f:
3d:04:c2:0d:cc:a1:dd:68:21:2a:93:a6:7a:b0:0f:6f:ab:70:
cd:1a:23:c8:30:51:4f:03:30:ac:80:48:82:b9:98:01:3c:86:
f0:c3:11:78:84:ec:b1:71:56:ce:0a:d3:94:28:60:b4:66:49:
be:cd:7f:13:74:89:d7:f3:83:14:98:fc:1e:8a:fa:6b:c7:c9:
36:bd:17:6e:c2:64:ee:a3:b8:f1:f9:8e:17:4d:02:29:c9:b3:
86:d0:25:45:1f:09:22:97:4c:f0:09:f7:b3:71:fb:b6:5e:e9:
73:5a:76:63:af:4c:e4:7b:e0:8f:5f:3c:c2:68:ce:e5:5c:6e:
80:94:6f:e4:be:a7:11:d2:d3:10:b0:1e:25:16:cc:07:76:6c:
a8:94:fb:cc:01:a2:f8:92:7d:4b:64:db:58:4c:f5:2f:15:6f:
54:72:07:5c:31:6d:44:e7:77:0d:58:49:86:20:7a:53:9d:68:
13:dc:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:33 2025 by rpki-client