Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa
File: AS213581.roa (raw, json)
Hash identifier: 1Hq0+KLJhuzhytdHlJmA66XpKsuyjePowbEwJRm+DtQ=
Subject key identifier: EF:82:A2:0C:57:90:E7:36:E2:B8:44:B2:2A:9A:4B:56:5E:46:5A:B1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4A2E52B0CCD95FEC49193FD742C0E6152F301F69
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa
Signing time: Sat 18 Jan 2025 22:08:24 +0000
ROA not before: Sat 18 Jan 2025 22:03:24 +0000
ROA not after: Sat 17 Jan 2026 22:08:24 +0000
asID: 213581
IP address blocks: 2a0f:85c1:b38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2e:52:b0:cc:d9:5f:ec:49:19:3f:d7:42:c0:e6:15:2f:30:1f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 18 22:03:24 2025 GMT
Not After : Jan 17 22:08:24 2026 GMT
Subject: CN=EF82A20C5790E736E2B844B22A9A4B565E465AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:77:e6:4e:2e:c6:e2:2c:49:64:d0:84:b3:
6e:21:0a:c1:cd:2b:95:77:a2:55:d2:65:02:d5:00:
78:25:3b:71:c0:58:8e:c9:37:32:03:9e:c0:72:e9:
e0:03:4b:26:c4:47:99:32:69:f7:31:ed:71:28:00:
5d:9a:9e:42:fc:02:b9:16:2f:9a:0a:41:f6:12:b5:
01:0b:2f:96:8e:b6:8a:41:cc:31:72:95:10:70:8a:
83:d2:05:c4:76:59:f6:e5:8a:93:e2:c9:2b:a1:5f:
0c:4e:3c:6e:65:b8:7c:e2:48:ed:a5:52:55:db:7d:
3f:02:49:e6:dd:ab:3b:d3:d6:32:ac:0c:33:c3:9e:
8e:bb:90:b9:9f:b4:da:92:88:87:18:7a:17:89:d4:
4b:9e:22:c9:17:99:94:0b:de:39:5e:eb:07:10:c3:
6e:8b:1c:52:13:7e:1a:9f:97:23:b5:c5:48:f5:22:
b7:31:d9:b9:1c:ea:47:dc:f2:d9:b5:61:33:8f:d9:
04:7d:67:7e:68:b8:97:a1:dd:3c:f1:89:44:5c:37:
f1:a0:f8:7d:69:2d:59:41:a9:0c:f8:d8:7e:24:27:
60:4e:92:d0:14:ef:59:1f:ea:cd:07:1a:03:89:14:
b2:e9:17:c5:17:bf:b3:68:c8:d1:fd:6b:51:10:00:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:A2:0C:57:90:E7:36:E2:B8:44:B2:2A:9A:4B:56:5E:46:5A:B1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b38::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5f:c4:60:33:de:f3:b6:13:38:4b:d4:44:e1:77:01:48:67:
d0:d1:5d:a8:45:f7:74:55:73:90:2f:6b:b4:c0:f3:f4:41:78:
0d:12:12:61:7e:18:18:23:11:7e:b4:67:82:a3:36:6b:17:0f:
e0:70:57:f6:34:94:15:98:ab:dd:20:b0:b3:5c:2d:89:9b:78:
bf:0a:28:76:18:1c:fc:eb:9f:2c:4f:97:a6:14:14:84:8f:2a:
a5:50:71:c9:31:aa:5f:af:7c:ef:10:f7:8e:b7:d0:2e:07:e4:
3a:78:e2:fc:4d:df:d6:85:61:ca:38:e4:e2:16:c3:85:65:47:
07:ea:c5:5d:4f:34:8a:64:a8:50:10:15:1e:25:b4:aa:7d:9b:
ea:d8:9d:5f:b4:98:c8:0e:12:fa:26:95:84:3b:bf:f1:ab:c7:
f9:1f:76:c6:1e:e5:7b:5f:5e:aa:e9:8f:58:de:fa:c6:d1:bc:
6d:0b:6b:44:64:1e:13:fe:9f:6f:d3:55:a4:02:13:bd:9d:87:
cd:77:75:e8:18:2a:ba:5d:a3:26:90:02:b1:38:5c:99:70:3e:
3b:5b:bd:fe:9b:1c:8c:9b:99:3d:b8:1c:56:42:02:6a:97:4b:
dd:11:cc:f4:ee:76:c6:96:ff:54:a3:86:fb:96:7e:29:59:76:
f4:b8:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:43 2025 by rpki-client