Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212969.roa
File: AS212969.roa (raw, json)
Hash identifier: gKS1XgdFNcPTWUsWhG04Bgy3lYK2YYK4m0NtsWhRvdE=
Subject key identifier: 65:25:DB:67:56:39:F1:7D:EC:47:5C:52:1B:07:E5:02:4C:90:CD:7B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7DFC52EE853DFCB9DD91756EA38EFF6119C1C594
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212969.roa
Signing time: Tue 04 Mar 2025 18:02:43 +0000
ROA not before: Tue 04 Mar 2025 17:57:43 +0000
ROA not after: Tue 03 Mar 2026 18:02:43 +0000
asID: 212969
IP address blocks: 2a0f:85c1:ba8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fc:52:ee:85:3d:fc:b9:dd:91:75:6e:a3:8e:ff:61:19:c1:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:57:43 2025 GMT
Not After : Mar 3 18:02:43 2026 GMT
Subject: CN=6525DB675639F17DEC475C521B07E5024C90CD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:41:60:6d:57:ca:9a:ed:f3:62:e8:8b:43:
46:f2:ab:88:dc:3a:b8:96:1e:26:2d:cf:3a:10:cf:
92:e1:30:74:e2:f5:53:fe:c2:16:5a:34:ab:b9:e0:
2d:0e:7d:ff:35:dc:c5:09:81:18:39:42:8e:0b:ec:
b8:c9:e7:cb:38:1d:bd:5d:d0:fd:82:31:15:3f:55:
81:dc:0a:86:d7:ce:b0:9c:7b:d3:1c:8c:93:98:f8:
d3:d4:1a:c2:f7:b6:9a:1f:7c:01:94:1a:60:cf:bb:
ee:77:86:62:34:5c:5b:51:e4:bb:59:2f:4e:75:ca:
de:45:b8:39:52:16:55:76:7b:e7:e4:63:c9:28:57:
1d:23:41:6e:fa:62:00:83:60:cf:93:51:ed:a4:01:
7e:5e:30:61:e6:28:db:98:0a:a3:95:c9:77:71:c2:
4f:e5:66:d0:0c:0e:85:4d:e0:f8:26:f4:73:63:13:
6f:c9:a3:75:76:33:d7:04:b3:fa:12:9a:24:52:9d:
e1:2e:d9:82:8b:d3:df:8d:39:b8:d2:d3:81:aa:e0:
db:18:ba:9c:3a:bf:11:9c:0d:d9:ab:e1:49:08:09:
26:82:80:03:6f:8c:7c:bd:d6:67:df:3b:1c:a6:89:
0f:25:0a:77:f8:20:dc:c2:92:26:8e:30:41:d9:91:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:DB:67:56:39:F1:7D:EC:47:5C:52:1B:07:E5:02:4C:90:CD:7B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ba8::/48
Signature Algorithm: sha256WithRSAEncryption
46:2e:83:a8:76:c4:74:9d:45:8f:8c:7f:9b:30:90:69:af:0f:
17:c6:b3:ad:37:bd:64:e7:5e:12:04:08:7b:af:c1:c9:90:f3:
d5:79:12:57:4c:5f:f4:ec:7d:b5:d5:c1:e5:72:d5:8c:0d:55:
64:20:bb:45:6e:7c:69:1e:c9:3f:2a:64:81:db:a9:5e:01:b2:
f9:1b:a7:90:ab:7e:0f:b5:12:4d:a7:47:44:77:d7:40:f5:ba:
0f:db:b2:f6:68:f6:e6:50:90:f3:7f:42:46:b5:0a:89:93:9b:
ad:9a:84:63:ee:1d:bb:67:e3:c3:77:74:e2:39:ea:a1:68:d2:
f5:c5:f6:63:fa:e4:e9:09:00:1d:f3:ab:fc:3e:16:22:80:6c:
9b:ad:c1:cd:f3:58:74:d5:e0:3a:6f:c7:e1:20:a5:c1:c7:d9:
a4:d7:6b:4b:e2:ac:08:47:a5:d9:e7:c4:ff:f7:6e:ed:2e:00:
04:c8:a9:bf:0a:44:53:50:69:b4:aa:8a:f1:8b:4d:0d:dd:93:
b6:10:c4:89:12:2b:5a:f8:32:65:cf:2b:93:1b:72:96:f3:18:
8d:97:6a:84:0c:3d:94:7c:eb:d6:ad:52:98:fb:63:69:3f:96:
db:4e:32:c9:9f:67:1f:1c:63:36:27:ab:7d:46:43:fb:17:93:
bd:3c:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:04 2025 by rpki-client