Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa
File: AS213580.roa (raw, json)
Hash identifier: c7MWG2N1QFNKQW7Ftm2wQK/p5J6W6SZp+RyG/CVQw60=
Subject key identifier: 5D:7B:B5:06:42:B1:F5:BB:B1:D8:17:E0:6E:E8:F3:B4:A8:99:42:1E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5C43981F093F64DB1F995D1E5EC0729EEB515949
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa
Signing time: Sat 18 Jan 2025 22:07:53 +0000
ROA not before: Sat 18 Jan 2025 22:02:53 +0000
ROA not after: Sat 17 Jan 2026 22:07:53 +0000
asID: 213580
IP address blocks: 2a0f:85c1:b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:43:98:1f:09:3f:64:db:1f:99:5d:1e:5e:c0:72:9e:eb:51:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 18 22:02:53 2025 GMT
Not After : Jan 17 22:07:53 2026 GMT
Subject: CN=5D7BB50642B1F5BBB1D817E06EE8F3B4A899421E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:d0:29:41:e5:f9:c9:d1:c5:43:2e:b0:58:
2d:15:72:6a:96:09:00:66:d2:6a:0c:ce:a5:46:44:
26:65:db:60:9b:61:f9:6e:0d:b8:fe:84:a2:cf:54:
9b:51:c3:f4:80:bd:0e:87:67:82:3d:d3:f5:4d:4c:
12:6b:b7:48:81:73:73:de:15:b0:31:10:08:5b:f3:
f9:09:bb:6e:d1:fd:f7:fc:2c:1d:86:c9:ca:55:ec:
a5:3d:7f:45:13:86:51:64:b9:30:7f:cc:40:3e:d8:
54:41:75:fa:b7:a7:bc:1d:c2:dd:71:53:e1:5b:92:
60:da:b8:f1:9f:ea:ee:14:f4:f6:7d:62:86:f1:3b:
0c:a5:88:70:3c:e6:aa:3b:b5:ce:3f:82:f5:e9:83:
28:24:c2:9f:81:b5:11:f1:e3:79:5f:e0:b2:d3:2a:
bc:45:5c:10:dc:4f:1d:2b:8e:89:6f:35:49:c0:bc:
2b:67:9b:86:29:c3:f8:eb:ae:7f:94:5a:cb:98:f7:
a9:bc:7b:a0:ca:b6:bb:d7:18:a9:99:9c:85:1b:ff:
21:87:77:22:d2:74:9e:e1:95:a8:8c:da:13:11:81:
ae:32:99:c6:88:3a:f0:66:af:0f:5f:13:56:9d:9d:
ec:f0:d5:7f:36:4e:14:fe:26:e6:6b:05:a6:72:e5:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:B5:06:42:B1:F5:BB:B1:D8:17:E0:6E:E8:F3:B4:A8:99:42:1E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b40::/48
Signature Algorithm: sha256WithRSAEncryption
be:1b:60:7d:a9:8e:44:f4:47:f8:8e:8a:42:53:21:da:b1:41:
e4:27:e9:bb:c4:c9:e8:a2:0e:9f:17:48:5c:49:e7:e9:bb:a6:
de:29:2f:b9:f5:75:14:44:3b:a3:e6:6e:78:99:db:b9:51:0d:
57:24:8a:ed:22:96:17:a1:6d:ab:75:13:5f:ad:04:96:c7:b9:
f5:72:2f:d2:9b:ce:f4:92:9d:1d:59:25:32:d9:01:de:f3:f9:
19:61:71:7b:76:90:0e:e4:d2:a7:50:26:e6:57:5e:8a:f5:c4:
e8:79:61:57:14:20:97:13:0c:1e:48:fe:82:47:10:c3:37:5c:
2c:0a:09:27:1e:01:40:62:6b:83:a7:5a:4f:97:92:a9:ca:2c:
ba:3e:0c:c5:2c:f9:91:36:56:ee:94:7a:c8:7a:95:a8:5b:2c:
8a:85:a1:4d:f1:73:c5:21:fa:2d:89:0f:42:77:9c:08:91:b4:
05:ef:ba:40:4d:db:0c:6f:86:be:50:7e:61:19:d3:ef:78:de:
56:77:0e:52:4a:35:af:29:58:28:9d:8f:2c:1e:7c:38:82:1d:
78:4b:4a:03:f9:a2:5a:62:4e:9e:ae:b0:c6:a9:bc:6b:97:b8:
00:27:66:4c:2a:2f:34:57:b2:a5:6f:60:07:07:57:79:00:68:
72:33:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:13 2025 by rpki-client