Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213422.roa
File: AS213422.roa (raw, json)
Hash identifier: wu8IisZqoaWgWS6LboP3kzulU+4EasexZe76QrH9br4=
Subject key identifier: F4:4B:4D:D4:17:DE:A5:D7:3D:68:92:39:A0:8B:FF:FB:ED:10:9B:87
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 442C3DE21D8BB6C000895AE0831068BE2ACAAA14
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213422.roa
Signing time: Sat 15 Feb 2025 15:28:41 +0000
ROA not before: Sat 15 Feb 2025 15:23:41 +0000
ROA not after: Sat 14 Feb 2026 15:28:41 +0000
asID: 213422
IP address blocks: 2a0f:85c1:b7a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2c:3d:e2:1d:8b:b6:c0:00:89:5a:e0:83:10:68:be:2a:ca:aa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 15 15:23:41 2025 GMT
Not After : Feb 14 15:28:41 2026 GMT
Subject: CN=F44B4DD417DEA5D73D689239A08BFFFBED109B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:90:29:c2:10:9a:05:ab:79:f1:fd:1f:df:
92:36:3a:ff:56:5f:82:65:e4:24:2e:3d:ba:17:90:
b6:54:b4:dd:39:07:15:27:f7:e9:bb:23:97:fb:cf:
3d:ad:37:b4:01:05:80:b6:e5:fc:02:67:d0:b3:20:
4b:58:02:9f:90:c8:fb:f4:2b:5b:8c:65:54:18:50:
5d:6d:25:19:8f:70:f1:20:23:57:76:f3:2f:92:c2:
e5:61:d9:be:df:f5:bc:12:1f:c6:85:62:e9:77:e6:
15:0f:37:d6:6d:39:ee:73:52:0c:65:5a:a2:c7:88:
6f:6f:75:91:89:73:de:85:e0:93:69:ed:9c:78:90:
82:5c:df:e3:4a:e7:c3:b9:16:60:62:65:a3:7b:e2:
a9:11:bd:ed:aa:c0:f6:fe:d7:40:ca:8b:d3:89:38:
ff:af:3e:2c:ff:eb:4f:6e:64:1e:a7:ff:ce:11:89:
6a:2d:b1:56:bc:cf:ce:2d:60:26:34:b4:fe:63:48:
a9:f2:87:12:bb:d4:55:5a:38:39:df:ae:4f:b3:b6:
19:d2:48:1d:13:4b:0d:9b:a1:ba:c9:10:1b:63:b1:
59:32:c6:76:88:cc:44:4a:72:53:35:2c:78:80:8e:
ea:10:6f:9d:88:5d:76:17:a6:5c:f7:e2:a0:93:9b:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:4D:D4:17:DE:A5:D7:3D:68:92:39:A0:8B:FF:FB:ED:10:9B:87
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213422.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b7a::/48
Signature Algorithm: sha256WithRSAEncryption
18:dc:98:54:cc:21:ad:29:9c:c9:ed:47:41:25:c6:c2:76:a6:
c4:af:d1:48:dd:48:27:5f:56:a4:90:5b:a9:43:08:bc:8c:a8:
27:1f:13:34:87:20:01:a4:1e:4e:88:2b:57:40:9f:87:cf:f5:
7f:9b:0e:22:9f:dd:db:36:1e:d7:60:c5:2f:79:8c:b7:04:af:
a5:f1:30:72:2c:5e:6d:50:57:f4:1f:19:b8:a2:75:6e:39:a2:
53:75:e6:42:06:70:2d:8d:2e:ed:14:af:bb:dc:46:54:c7:f7:
12:ed:10:e8:5d:82:da:4b:e4:a1:f8:d3:4f:71:f2:48:0e:10:
7c:2b:7e:4b:f9:5a:65:ca:c8:53:48:bf:56:45:96:16:7b:f6:
39:5d:36:05:b2:74:95:7b:5a:61:43:c3:0c:6d:53:d5:af:ae:
4a:5b:ef:e3:d2:df:99:a4:a5:9a:27:f1:96:e5:ff:51:39:c1:
b4:ff:ae:97:c8:49:d4:93:7d:33:49:43:97:d9:8d:14:f7:59:
08:66:7e:3f:c7:0a:d2:b5:7d:88:06:38:79:58:65:67:65:9a:
ac:b2:52:b4:7c:b1:2a:b2:68:14:cb:74:66:80:b4:ba:71:40:
64:73:80:d3:02:7c:12:e9:2a:dd:d4:0c:8c:24:0d:39:a2:5a:
25:c7:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:23 2025 by rpki-client