Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa
File: AS213743.roa (raw, json)
Hash identifier: 6se4/UQlRjpLsW89LR/QTpl4Tw8yL9rHO5rzL5g0JrI=
Subject key identifier: C9:B6:8F:08:7D:06:AB:BC:98:07:FC:95:05:46:EE:49:CB:BB:2B:18
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0B8ED02ED849969B86664A4F62392392220692E5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa
Signing time: Fri 06 Dec 2024 12:56:57 +0000
ROA not before: Fri 06 Dec 2024 12:51:57 +0000
ROA not after: Fri 05 Dec 2025 12:56:57 +0000
asID: 213743
IP address blocks: 2a0f:85c1:b30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8e:d0:2e:d8:49:96:9b:86:66:4a:4f:62:39:23:92:22:06:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 6 12:51:57 2024 GMT
Not After : Dec 5 12:56:57 2025 GMT
Subject: CN=C9B68F087D06ABBC9807FC950546EE49CBBB2B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:56:9e:8f:e8:ad:0b:a5:e9:68:0e:b2:53:
a8:e6:8f:6c:16:77:88:dd:27:d9:49:67:70:75:c0:
13:e0:6b:4a:64:b7:bf:be:eb:13:72:9d:b6:33:1c:
47:e2:50:0b:46:08:79:30:37:4e:55:d0:74:8a:84:
35:1b:26:6a:a2:39:45:1b:93:dd:14:94:3a:9a:7a:
8d:fc:93:25:03:03:b6:4c:82:d8:66:6e:f8:69:1b:
2d:1d:ab:01:23:65:89:3b:bb:b9:b4:3b:b2:a9:8c:
93:0b:a4:f9:c0:0c:c6:3b:11:44:3a:f4:5f:80:c9:
84:af:44:a0:f9:41:86:52:9b:0f:18:27:a3:47:3a:
9c:ea:9c:d8:d9:52:e8:36:1e:fd:27:6e:22:4c:82:
44:9f:92:a3:f1:a8:42:9a:94:bc:46:70:c5:97:4e:
7b:75:e6:6c:e0:33:9b:de:a2:3c:83:8c:03:4a:88:
7d:4a:28:a3:8b:6f:e9:d3:57:84:0c:d1:88:be:b3:
ec:a6:33:a9:9b:96:b1:8f:4d:9f:06:9e:df:bf:09:
03:32:e6:48:eb:6c:88:42:0b:e2:8e:31:22:f4:bb:
d6:ec:74:3c:5a:e4:6d:0d:d5:24:63:09:70:00:d0:
89:34:fb:77:45:16:75:e8:03:33:1a:63:30:a8:d6:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:8F:08:7D:06:AB:BC:98:07:FC:95:05:46:EE:49:CB:BB:2B:18
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b30::/48
Signature Algorithm: sha256WithRSAEncryption
88:99:59:a0:65:cc:4c:ea:7f:4d:40:f9:c7:7c:6b:4f:ec:00:
33:82:2a:0f:27:a8:df:30:15:bc:e6:f9:d1:12:e6:b0:09:83:
3b:b1:5c:30:4f:83:39:a5:a1:7e:43:7c:69:03:0a:8b:2f:75:
61:4b:b7:88:c0:f0:fe:4f:57:7b:4f:d0:27:3d:ae:ef:f6:fd:
9f:37:9b:32:5b:9d:92:fd:33:31:66:b9:d6:f0:f6:57:5e:85:
c3:16:ea:4c:0a:99:1a:31:b8:7c:94:c5:0c:3b:f7:12:30:0c:
f4:27:74:24:6c:a7:02:ee:b1:d2:fc:ea:0d:03:c2:4f:e7:31:
7b:67:80:08:15:41:aa:4a:7f:a7:74:6c:7e:c5:6e:c3:a7:0b:
cf:42:69:ed:a4:38:d7:96:69:52:54:74:70:3c:bb:25:a8:78:
da:be:06:f3:07:c4:62:48:18:36:84:28:18:6e:41:a5:6b:3d:
df:aa:e6:d6:5e:05:fe:b9:57:4b:9e:00:28:74:3f:d9:2e:00:
98:ee:26:11:44:9e:a9:ba:87:9d:e9:e3:e0:57:59:10:c3:0e:
7a:8c:b2:c7:1f:e3:a9:90:47:f8:13:0f:fc:26:da:27:e8:a3:
c8:94:d6:c5:0b:89:cf:1a:15:a0:16:b1:34:59:10:34:15:4a:
be:17:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:18 2025 by rpki-client