Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213434.roa
File: AS213434.roa (raw, json)
Hash identifier: hmsHsxWPT2gMuuECmpKJ6tSWLGM6Os8sXbjoo3MVjZk=
Subject key identifier: B1:00:A5:21:31:77:CD:15:01:7D:9D:A3:2B:2A:FC:02:25:C3:F0:C5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 778617D83FCBF2EC59773E5BB7AC2278DC6F72CC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213434.roa
Signing time: Tue 04 Mar 2025 18:53:44 +0000
ROA not before: Tue 04 Mar 2025 18:48:44 +0000
ROA not after: Tue 03 Mar 2026 18:53:44 +0000
asID: 213434
IP address blocks: 2a0f:85c1:b79::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:86:17:d8:3f:cb:f2:ec:59:77:3e:5b:b7:ac:22:78:dc:6f:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 4 18:48:44 2025 GMT
Not After : Mar 3 18:53:44 2026 GMT
Subject: CN=B100A5213177CD15017D9DA32B2AFC0225C3F0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:54:ee:01:8e:36:ec:d4:2d:dd:33:98:f0:
42:ff:76:54:3d:c5:d6:d6:de:d4:72:26:4c:7b:cd:
ec:a1:f0:2b:6e:1b:8f:f6:4c:7a:50:bc:4a:28:95:
aa:f6:bd:54:28:77:e6:d8:b3:6d:5b:98:e7:15:96:
e5:72:f3:d2:43:e7:83:9a:5e:92:10:3a:02:b8:c6:
ad:55:ea:57:73:7b:17:ef:e5:fa:ed:3d:03:cc:a4:
bd:e1:80:f9:15:63:a7:f3:4a:c5:32:ac:6b:e7:8c:
3e:2a:d8:7c:95:49:c4:48:54:14:50:fd:5c:18:91:
d2:a8:1b:bf:37:19:b1:98:af:79:4c:b9:27:66:c6:
44:ee:cd:75:e3:d8:c3:9e:9c:73:a2:2f:74:e6:0b:
6a:e8:9b:b9:28:22:0a:58:f8:e6:80:4e:83:7a:3e:
1c:54:d0:81:8c:20:b1:b7:38:3a:ee:88:53:2b:0f:
6a:fe:43:30:a9:6c:8b:77:81:82:b0:04:fe:de:9b:
02:1d:fd:66:00:3d:74:0e:01:1d:b1:c6:5d:e9:40:
d3:45:cf:65:ed:b3:ef:14:fd:19:bb:44:c9:1d:62:
65:a0:d9:ea:8d:f0:7e:55:fe:33:2e:03:12:a5:34:
78:61:c7:ff:4c:8f:3e:ce:2e:3c:b4:bd:eb:1e:d0:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:A5:21:31:77:CD:15:01:7D:9D:A3:2B:2A:FC:02:25:C3:F0:C5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b79::/48
Signature Algorithm: sha256WithRSAEncryption
71:c6:22:45:a4:ff:77:da:58:82:5e:b4:81:36:b1:b9:6d:2c:
e7:c7:bd:60:c2:2b:d1:4d:5d:92:f6:0f:91:1c:3c:84:7c:8a:
b9:5d:80:9e:6b:25:be:2a:ba:44:9a:0a:b3:5b:88:e9:2c:bf:
7d:22:9d:51:aa:b5:fc:58:1c:17:54:04:16:b4:54:8a:2f:ae:
f2:7b:0b:b2:be:58:34:f1:37:55:07:b7:ca:b1:40:67:af:29:
21:cc:62:4d:03:c0:00:23:ac:4c:6a:ac:20:89:8b:6c:02:7b:
02:d9:cc:49:fe:ff:52:49:30:0e:cf:84:6a:d7:d1:3c:48:cd:
a1:f3:08:71:d7:69:fe:80:f6:99:8f:cd:63:ca:dd:72:78:42:
54:70:29:1e:93:05:3b:c7:22:76:b8:da:cc:de:5e:6d:c5:46:
e2:3b:82:06:01:4e:52:ed:2f:1b:e4:19:15:a3:21:5a:13:cf:
ed:0b:c8:58:4a:8a:9e:53:5b:71:75:31:13:fc:e5:7e:7b:36:
87:58:5b:34:b3:10:71:a0:45:8f:59:e5:2b:dc:0d:31:00:30:
e0:d8:c4:7f:1d:3a:d5:3c:40:ff:09:8b:81:1b:31:0b:3b:7d:
a7:ab:ca:b7:cd:07:62:65:73:cd:c9:6d:46:ac:6f:16:a8:60:
f6:74:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:05 2025 by rpki-client