Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa
File: AS213495.roa (raw, json)
Hash identifier: AYvrwSRL8xBv4cWGHIsh6NImb9Eks2g3S+9MIekFXHo=
Subject key identifier: 57:E7:E1:08:7E:76:0C:BA:D3:50:F1:94:54:BB:B8:EA:BF:CA:E4:0C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 253C96DA6F3207DF95EBEF473BCE558FC6326D16
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa
Signing time: Thu 30 Jan 2025 21:01:42 +0000
ROA not before: Thu 30 Jan 2025 20:56:42 +0000
ROA not after: Thu 29 Jan 2026 21:01:42 +0000
asID: 213495
IP address blocks: 2a0f:85c1:b73::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3c:96:da:6f:32:07:df:95:eb:ef:47:3b:ce:55:8f:c6:32:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 30 20:56:42 2025 GMT
Not After : Jan 29 21:01:42 2026 GMT
Subject: CN=57E7E1087E760CBAD350F19454BBB8EABFCAE40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:94:9e:ef:03:f7:4a:06:9b:a6:c9:d0:74:
b3:33:81:06:90:63:c6:2a:4d:6f:4e:56:58:a0:f3:
c5:5b:4e:ac:be:90:ab:c4:8e:e2:d4:00:14:3b:89:
8e:0c:d9:d5:37:1e:fd:7d:1f:30:f4:69:87:ac:3c:
93:65:1e:7e:88:f8:33:97:e6:cd:5e:8a:2a:ea:09:
ff:2f:c5:98:0c:75:76:c5:7e:ea:dc:bc:79:7b:21:
98:04:21:90:20:91:f7:4e:fc:8d:29:e5:5e:a0:58:
96:20:be:5e:e3:2c:63:11:8e:ff:40:bb:af:ba:28:
d7:13:fa:15:db:b3:ef:d9:5e:43:00:e5:b8:02:9a:
45:18:fd:ec:df:0a:0d:f8:15:6a:f6:10:0a:17:0a:
23:9e:bb:ff:bb:f5:1f:78:ef:b0:7d:aa:ee:01:d5:
32:f6:da:3e:93:14:e2:1f:68:e5:97:3a:7c:bf:5b:
19:3d:ee:6b:8a:90:40:e4:56:91:0d:2a:c4:de:d2:
36:4e:17:dd:c3:50:1a:df:b7:b5:cb:9f:2e:99:c5:
96:61:1b:95:65:f7:68:97:13:8e:34:a3:3f:69:b3:
4c:dd:0b:d0:f6:23:bd:ce:50:15:c7:93:ef:93:4b:
cd:89:3b:6c:1f:db:74:35:0c:f8:29:e9:ec:f4:ba:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:E1:08:7E:76:0C:BA:D3:50:F1:94:54:BB:B8:EA:BF:CA:E4:0C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b73::/48
Signature Algorithm: sha256WithRSAEncryption
67:bc:84:f9:74:c1:ae:e3:9e:6d:04:99:42:41:1a:10:7f:ab:
81:68:e9:2a:e6:1e:0a:9f:ed:41:26:b5:21:e6:cf:7e:d9:01:
bf:d6:e3:1a:f6:7f:f3:6f:e7:36:85:8b:62:c7:4e:c5:8b:af:
30:b0:14:0f:8d:b1:14:d6:60:4f:e0:8f:a2:6b:ee:57:e1:fd:
05:9a:a3:47:4e:e7:e8:91:11:35:73:51:be:72:57:1d:46:58:
57:ca:0d:e5:2e:ff:6f:63:cf:10:4e:99:66:f2:b5:e8:f3:d8:
4e:a8:ea:7d:6a:d3:be:a9:d0:0f:75:c9:cb:b6:d6:a6:d5:d3:
e4:67:d3:80:ab:4a:48:30:c0:03:85:a9:67:c1:71:a7:72:7e:
c9:fa:98:72:c5:05:3f:54:30:a9:82:9e:b2:35:5d:0b:67:64:
ec:bb:65:44:2c:50:ff:86:51:0c:4d:62:c5:b8:15:a0:78:95:
3f:b4:5f:8f:2f:39:2e:ff:bc:4f:60:fb:25:7b:bb:25:52:bf:
ce:b0:52:01:3c:f0:f5:a1:37:dc:5d:94:d6:0e:06:3d:2b:34:
bc:8d:a3:e5:e1:d1:6c:e0:5e:c8:d7:1f:f3:c3:08:8d:fc:2e:
60:44:db:c8:6e:ab:0b:e4:ec:bd:73:aa:62:e3:e4:2a:38:6e:
ac:8f:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:01 2025 by rpki-client