Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213408.roa
File: AS213408.roa (raw, json)
Hash identifier: hzI7DVfpgkg1h10l3iP/nyFsZ0+X8d2ZmbDKgWIUdek=
Subject key identifier: B4:5C:56:69:A3:C9:4D:54:4F:07:95:7B:AE:C7:A7:93:9E:D1:03:F1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3B32F3191E1A7A9163E093F7E04BDCC81567AEB5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213408.roa
Signing time: Tue 04 Mar 2025 18:02:52 +0000
ROA not before: Tue 04 Mar 2025 17:57:52 +0000
ROA not after: Tue 03 Mar 2026 18:02:52 +0000
asID: 213408
IP address blocks: 2a0f:85c1:ba2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:32:f3:19:1e:1a:7a:91:63:e0:93:f7:e0:4b:dc:c8:15:67:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:57:52 2025 GMT
Not After : Mar 3 18:02:52 2026 GMT
Subject: CN=B45C5669A3C94D544F07957BAEC7A7939ED103F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:78:1c:5c:85:dd:35:66:4c:1f:ba:50:a0:
74:fe:95:ee:6b:13:aa:d9:44:37:a3:25:13:e3:b4:
2e:ed:a7:c0:14:c0:48:bc:87:10:6c:78:ab:ea:f3:
b0:87:01:cf:de:af:0d:c3:6e:4a:04:d4:2b:31:95:
80:11:9a:0e:19:6b:07:68:31:60:b6:cd:10:45:bc:
10:24:08:7e:9d:57:15:ff:e2:af:61:b9:46:1b:1b:
7e:d9:e9:2e:2a:64:65:62:a4:61:92:f6:54:c7:bf:
99:f5:5d:6e:6f:fa:ec:a8:b3:c6:99:16:02:84:39:
80:4c:7c:63:dc:a2:1f:c5:bc:b0:41:c0:09:6c:d4:
e2:ba:7f:d1:a7:33:26:77:c7:0e:ff:5a:3c:14:81:
ca:85:8f:ad:c6:86:eb:0d:68:d7:fa:0d:2c:dc:dd:
dd:f1:09:e8:42:43:b3:61:b5:0c:60:16:a7:ed:35:
d3:e0:f5:8e:22:0b:9b:c7:89:45:cc:fb:49:26:70:
f1:7a:7c:9f:f0:97:a2:1d:3a:fb:72:b0:b1:4b:37:
2b:f1:c6:e1:cd:ca:25:5a:8f:a2:0e:a0:8e:7e:18:
cb:f2:69:0f:7d:96:14:7b:1e:6f:c3:7a:2c:39:86:
db:3e:e4:d1:69:8c:39:19:90:8e:68:a4:70:59:26:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:56:69:A3:C9:4D:54:4F:07:95:7B:AE:C7:A7:93:9E:D1:03:F1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ba2::/48
Signature Algorithm: sha256WithRSAEncryption
0c:7f:b6:c1:8b:3c:88:d0:61:ae:f2:78:51:a6:24:50:79:97:
44:28:45:f6:74:79:83:26:08:a4:54:28:00:20:bf:c9:82:67:
df:fb:6d:a3:6b:54:df:e2:2e:17:9a:c4:27:2c:c8:d5:01:8b:
70:48:11:a4:5e:0d:c8:df:60:78:dd:b8:9b:dc:00:63:a0:74:
ae:4f:26:e5:c0:0a:e8:99:d7:c8:4a:0a:ce:5c:68:59:ce:7f:
bf:60:2f:4a:5e:3a:c1:72:97:a5:81:a1:f9:05:d4:fd:4d:92:
01:13:4b:03:71:eb:01:21:41:29:b6:16:29:b6:c0:16:b0:b6:
bd:22:6d:38:57:a2:32:76:10:00:80:40:db:ea:92:89:34:05:
54:62:8d:af:ae:07:c2:5c:44:e2:1a:47:03:e8:62:50:fd:f4:
34:a4:1f:9c:d4:f9:3b:d8:15:f1:8f:ea:39:c5:86:59:45:30:
b5:25:82:d3:04:1f:24:fe:fa:54:6e:67:b6:64:e9:e2:4e:c6:
b8:2b:b0:6f:e1:46:06:cc:b7:ae:c1:37:9d:6b:12:60:44:e0:
52:ae:45:e2:51:13:46:a7:df:88:46:49:89:0c:0f:98:82:be:
35:0e:5d:5a:d6:6d:e9:a2:c5:9d:3c:2f:7a:df:b4:0e:13:43:
5d:62:c0:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUOzLzGR4aepFj4JP34EvcyBVnrrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTAzMDQxNzU3NTJaFw0yNjAzMDMxODAyNTJaMDMxMTAvBgNV
BAMTKEI0NUM1NjY5QTNDOTRENTQ0RjA3OTU3QkFFQzdBNzkzOUVEMTAzRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZ3gcXIXdNWZMH7pQoHT+le5r
E6rZRDejJRPjtC7tp8AUwEi8hxBseKvq87CHAc/erw3DbkoE1CsxlYARmg4Zawdo
MWC2zRBFvBAkCH6dVxX/4q9huUYbG37Z6S4qZGVipGGS9lTHv5n1XW5v+uyos8aZ
FgKEOYBMfGPcoh/FvLBBwAls1OK6f9GnMyZ3xw7/WjwUgcqFj63GhusNaNf6DSzc
3d3xCehCQ7NhtQxgFqftNdPg9Y4iC5vHiUXM+0kmcPF6fJ/wl6IdOvtysLFLNyvx
xuHNyiVaj6IOoI5+GMvyaQ99lhR7Hm/Deiw5hts+5NFpjDkZkI5opHBZJjElAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUtFxWaaPJTVRPB5V7rsenk57RA/EwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQuiMA0GCSqGSIb3DQEBCwUAA4IBAQAMf7bBizyI0GGu8nhRpiRQeZdEKEX2dHmD
JgikVCgAIL/Jgmff+22ja1Tf4i4XmsQnLMjVAYtwSBGkXg3I32B43bib3ABjoHSu
TyblwAromdfISgrOXGhZzn+/YC9KXjrBcpelgaH5BdT9TZIBE0sDcesBIUEpthYp
tsAWsLa9Im04V6IydhAAgEDb6pKJNAVUYo2vrgfCXETiGkcD6GJQ/fQ0pB+c1Pk7
2BXxj+o5xYZZRTC1JYLTBB8k/vpUbme2ZOniTsa4K7Bv4UYGzLeuwTedaxJgROBS
rkXiURNGp9+IRkmJDA+Ygr41Dl1a1m3posWdPC9637QOE0NdYsBR
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:45 2025 by rpki-client