Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
File: AS213423.roa (raw, json)
Hash identifier: nwNLZHFPkRAhSjG8Qdrg610t7XV+pdvdfYTcr7T4Erc=
Subject key identifier: E2:B9:0D:A8:41:DF:14:27:D4:BE:21:9D:02:92:28:25:65:71:93:A0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 040FF903622266208AFD9C95E2E7A56C1A89E485
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
Signing time: Tue 04 Mar 2025 18:02:28 +0000
ROA not before: Tue 04 Mar 2025 17:57:28 +0000
ROA not after: Tue 03 Mar 2026 18:02:28 +0000
asID: 213423
IP address blocks: 2a0f:85c1:b7b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0f:f9:03:62:22:66:20:8a:fd:9c:95:e2:e7:a5:6c:1a:89:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 17:57:28 2025 GMT
Not After : Mar 3 18:02:28 2026 GMT
Subject: CN=E2B90DA841DF1427D4BE219D02922825657193A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:d9:bc:3a:be:a1:e9:3d:da:11:70:4b:85:
e8:e2:52:bc:a5:69:32:ad:40:03:e6:ed:62:34:64:
70:f5:81:43:60:5a:6c:9c:1f:c6:f1:3b:8c:4b:72:
e1:ec:aa:2b:a1:08:a7:fa:7c:02:d4:68:53:8b:22:
5d:59:6a:18:69:9c:1f:c4:70:4d:42:92:5c:7a:34:
ac:11:b5:3d:df:1b:ca:b8:bd:d4:65:46:85:ef:7f:
6c:3d:a6:a9:10:42:f0:b1:bc:2d:4c:54:9f:b1:9a:
8e:76:8e:61:76:16:58:06:69:76:44:c8:18:f9:65:
c2:a8:d1:be:e3:10:4f:33:26:f8:8d:b2:16:04:77:
6f:a4:67:5b:f9:0e:45:05:80:7c:23:3e:b4:e2:ca:
bd:0f:97:bd:77:2c:10:94:9f:20:f9:5e:ab:66:20:
31:97:3d:8c:d6:a1:c4:6b:26:74:93:55:1f:37:a7:
4e:c4:9a:f0:ac:ac:ff:7c:ae:44:f9:bc:0a:2a:f9:
4d:61:1a:82:f9:4e:89:19:e6:cd:52:c7:7b:35:97:
93:38:10:91:8d:40:4f:7b:f8:56:7b:a6:31:36:cd:
e4:10:79:cd:eb:cb:b1:bd:74:8d:30:87:ca:b1:49:
03:e5:8b:2a:a2:7a:97:bc:55:36:41:dd:b9:40:b7:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B9:0D:A8:41:DF:14:27:D4:BE:21:9D:02:92:28:25:65:71:93:A0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b7b::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7b:e2:cb:b4:ef:76:46:f3:1b:2f:7a:b6:90:e5:93:f2:35:
82:c7:09:9e:9d:0d:b1:c2:4f:7e:34:87:c3:f3:1f:d3:d0:0a:
15:40:d1:e8:96:02:42:1a:91:98:09:f6:47:3d:7a:6d:9c:3d:
b2:70:b5:21:38:bd:28:ef:e2:91:a9:c5:de:d5:8b:07:b7:e7:
86:ce:b1:0e:6c:80:8a:e8:99:0e:bd:5b:dd:1f:dc:fc:9b:1d:
4d:25:8a:6d:73:5b:e2:82:a1:e4:56:bb:ab:37:04:f9:28:21:
0a:cc:d7:65:e3:ac:9e:57:55:82:f3:58:67:87:b1:69:a4:5b:
52:10:90:59:ba:5e:c4:42:2f:dd:af:59:46:1f:d6:4a:aa:f0:
55:a2:66:f5:93:80:b1:3e:b0:7a:f9:f8:4b:d1:1b:56:0c:69:
40:f1:ba:4e:83:d2:20:37:e6:8d:e4:1c:db:97:eb:10:72:1a:
cd:0a:0d:b9:a3:2c:05:82:d0:21:93:e6:25:cf:50:bf:5a:68:
02:c4:a1:92:d0:5a:0c:59:48:04:c9:ea:98:0b:b6:75:8a:ba:
fe:3d:3f:32:80:58:40:8a:64:3a:a0:27:77:2d:45:67:be:e0:
73:1f:af:86:d2:5d:b6:29:8e:19:73:84:76:33:b5:c0:68:e8:
57:53:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:19:55 2025 by rpki-client