Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213415.roa
File: AS213415.roa (raw, json)
Hash identifier: EFRseNCCgkmjASlQU6h7rLufvPbsxNV27Zt6Q4qZLGk=
Subject key identifier: E8:CA:A4:8F:2F:82:8F:83:E6:7A:49:4D:43:54:7D:96:EB:5D:F9:AF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 522EC4714E1BA8B04275C3EBEBA64E19BD374673
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213415.roa
Signing time: Mon 17 Feb 2025 20:15:41 +0000
ROA not before: Mon 17 Feb 2025 20:10:41 +0000
ROA not after: Mon 16 Feb 2026 20:15:41 +0000
asID: 213415
IP address blocks: 2a0f:85c1:b7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2e:c4:71:4e:1b:a8:b0:42:75:c3:eb:eb:a6:4e:19:bd:37:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 17 20:10:41 2025 GMT
Not After : Feb 16 20:15:41 2026 GMT
Subject: CN=E8CAA48F2F828F83E67A494D43547D96EB5DF9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:58:1f:c3:90:96:5d:49:55:c8:b2:c0:8f:
84:9d:3a:5c:97:21:bc:3b:3e:ee:9a:bf:b6:71:6c:
2e:65:00:7e:2c:3a:7e:8a:d8:ed:c9:6e:f6:de:fc:
ad:c6:2a:34:9a:2f:f3:49:d7:21:e2:7e:14:55:10:
e6:46:5d:d0:9c:df:ac:04:7d:02:57:08:bb:7a:de:
ea:ff:7f:22:57:25:66:12:81:30:42:0a:b7:4f:13:
df:01:a0:7d:e6:cd:61:31:af:2d:bd:bb:bd:cc:4c:
08:4a:8e:03:b5:85:ad:f2:95:30:1b:be:b1:99:71:
1e:ff:b5:ef:a1:44:3e:67:8a:fd:20:ce:c5:0c:2b:
50:bc:77:08:8f:96:84:5f:fd:a9:59:ce:23:7f:42:
b0:21:9c:cb:19:c2:bd:70:29:6f:ca:c1:9f:d8:27:
23:46:f3:a0:a7:26:25:2f:83:5d:e6:79:92:4b:5e:
7b:76:8b:40:ae:82:cb:4b:e0:3d:67:3a:4c:a9:7d:
37:36:96:ca:25:73:5c:b2:9d:e8:45:a2:7a:19:6d:
84:cc:19:a7:53:bb:86:06:b0:8c:02:46:ea:2a:a4:
4d:a6:7e:11:a3:f0:16:3e:96:78:82:67:00:83:39:
58:c4:1d:22:5b:cb:95:c0:78:53:53:ea:f8:85:0f:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:A4:8F:2F:82:8F:83:E6:7A:49:4D:43:54:7D:96:EB:5D:F9:AF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b7d::/48
Signature Algorithm: sha256WithRSAEncryption
19:02:9b:61:22:8f:a4:25:98:f0:6f:59:5e:24:41:22:f1:23:
34:54:5e:16:9c:30:c2:d7:ad:d0:ca:b8:42:79:bb:ea:3f:4b:
09:a6:82:8e:b0:74:11:7a:67:a1:30:69:09:1d:52:c6:fc:06:
ef:e7:ff:6d:91:e0:c1:d0:77:92:9a:dc:29:1f:9e:3c:dc:fd:
e4:3c:a8:4a:bc:b6:7d:6d:0b:e8:2a:f7:b5:76:9f:dd:fb:d5:
ca:56:c0:aa:68:42:21:63:38:68:2c:0b:fd:4a:dc:7e:dd:e9:
13:c0:fe:6c:f9:bf:a5:60:a2:0f:92:60:53:77:23:d7:b4:bd:
c1:ce:12:3d:4f:49:3c:c5:c8:fe:a6:fe:c6:72:3c:8f:51:b3:
72:a1:2c:5b:35:a8:a3:38:5c:ad:76:10:21:8d:45:70:d3:cf:
a4:a2:46:77:9e:6c:a0:fb:1a:0c:9b:db:3a:17:ae:5e:5a:4c:
f0:ac:b3:c4:6f:b9:e5:61:82:f0:8e:f8:8e:b8:7c:97:e8:92:
9d:4a:77:41:cb:ea:a3:7d:59:e8:fb:3e:8e:28:e3:fd:eb:e0:
5c:45:ee:70:ce:35:9a:59:fd:87:79:f5:b9:8a:f3:41:53:e8:
99:9a:44:11:d8:ec:dc:94:d0:97:4e:8b:35:3e:e0:16:b7:cd:
89:7a:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:19 2025 by rpki-client