Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213733.roa
File: AS213733.roa (raw, json)
Hash identifier: NhHolLHuPCh3ogzPeTv/fMZmtcTmSirEM+v7pR0GZIQ=
Subject key identifier: 68:ED:B7:B5:96:22:F0:98:5E:CD:26:31:FC:37:16:1A:A6:86:B2:48
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 498303EEF902D763710071465943F9691A0944E3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213733.roa
Signing time: Tue 11 Feb 2025 03:42:51 +0000
ROA not before: Tue 11 Feb 2025 03:37:51 +0000
ROA not after: Tue 10 Feb 2026 03:42:51 +0000
asID: 213733
IP address blocks: 2a0f:85c1:b43::/48 maxlen: 48
2a0f:85c1:b50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:83:03:ee:f9:02:d7:63:71:00:71:46:59:43:f9:69:1a:09:44:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 11 03:37:51 2025 GMT
Not After : Feb 10 03:42:51 2026 GMT
Subject: CN=68EDB7B59622F0985ECD2631FC37161AA686B248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:fc:bc:34:c3:45:8e:0e:a9:91:bf:26:96:
6e:7c:f5:e0:9f:02:7c:38:5e:44:f9:9e:ed:86:a3:
67:f9:f0:76:a2:05:14:81:db:17:3f:0d:ed:ea:7a:
fa:54:b8:32:38:66:48:ef:a3:bf:31:8b:85:f3:77:
d8:cc:57:44:dc:09:d2:da:ac:dc:ca:99:e7:a3:6c:
37:6d:71:d7:2d:39:95:63:5a:6e:7f:a7:14:93:bb:
23:bc:67:a7:0a:62:50:33:c4:c9:16:22:06:59:35:
ac:7d:df:9b:6e:fb:b1:e6:81:1d:31:ba:e5:10:6f:
bc:82:b0:49:5f:37:bd:c8:7e:64:29:af:e8:fa:87:
59:b4:e7:d5:0c:8a:f4:45:24:d1:9b:34:95:c9:f6:
6e:a8:ea:85:83:70:f8:76:01:7a:44:6c:fa:45:f6:
90:a4:de:e0:df:94:03:9c:2a:a4:8c:fd:26:47:13:
85:bf:3c:27:d5:d3:2a:3a:ff:de:c7:b1:07:cb:d6:
f1:6e:97:ed:6b:62:9d:f8:24:39:49:f5:95:97:aa:
6c:cf:7e:a1:d6:d5:46:3c:30:46:fa:8e:6d:be:c7:
e5:1d:b0:7a:a4:d7:28:6b:58:f5:bc:1b:4c:c1:74:
73:4a:5f:bb:f3:96:59:fe:ea:59:e1:97:ad:e1:9a:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:B7:B5:96:22:F0:98:5E:CD:26:31:FC:37:16:1A:A6:86:B2:48
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b43::/48
2a0f:85c1:b50::/44
Signature Algorithm: sha256WithRSAEncryption
29:b4:bb:10:4a:7e:17:8b:35:56:50:c2:81:76:b4:d3:76:bd:
56:f4:51:1b:8c:28:20:06:6b:5b:3b:e7:73:03:6b:6b:23:07:
e5:d9:cb:9e:9e:02:3e:24:f4:03:a0:e5:07:1a:92:19:f5:21:
ab:af:e3:88:81:d8:6d:a5:8b:53:12:18:4b:cd:d2:e8:66:3d:
2a:a9:29:93:2c:4c:6d:88:c6:23:6f:a3:bd:38:11:11:c4:1b:
1d:d9:19:0c:33:a3:3e:61:1c:1a:35:18:5a:64:28:b5:2e:7c:
54:fc:55:ca:7b:4a:61:a2:aa:3b:86:49:e9:3c:a2:80:a5:70:
f8:f1:1f:c9:3d:c5:67:a0:ef:af:0e:61:cf:a2:95:ed:3f:24:
e3:9b:2f:0f:75:0c:00:2b:14:4a:4b:9b:45:ca:98:a0:cf:c9:
ca:34:6e:26:6b:d3:e2:22:19:78:65:9c:2a:9f:03:70:55:b8:
b8:30:d1:12:e8:6b:07:4f:ab:93:98:cd:52:63:bf:f7:a6:bb:
5c:c1:63:82:05:b6:5a:fa:7c:bc:8e:0b:cf:4b:82:22:a3:b9:
a0:d5:5f:70:56:26:c4:4e:cf:28:ce:20:49:8e:6e:cc:f0:ea:
23:35:86:4a:c9:05:37:ad:c8:8a:bf:82:4c:3a:5b:44:21:85:
34:57:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:53 2025 by rpki-client