Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213767.roa
File: AS213767.roa (raw, json)
Hash identifier: SBEzP2AAIvnLXicKW5iCN3+ezua8sOetf/MxTmEsQA8=
Subject key identifier: E5:03:10:34:01:2E:5C:42:FC:19:95:E9:A7:E1:AC:14:5F:32:37:B4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 28F8ACF930C1C2D72E8A6AD83B69BDC0BC2A3E85
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213767.roa
Signing time: Thu 27 Mar 2025 04:03:40 +0000
ROA not before: Thu 27 Mar 2025 03:58:40 +0000
ROA not after: Thu 26 Mar 2026 04:03:40 +0000
asID: 213767
IP address blocks: 2a0f:85c1:8f5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f8:ac:f9:30:c1:c2:d7:2e:8a:6a:d8:3b:69:bd:c0:bc:2a:3e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 27 03:58:40 2025 GMT
Not After : Mar 26 04:03:40 2026 GMT
Subject: CN=E5031034012E5C42FC1995E9A7E1AC145F3237B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:4d:de:87:71:ba:5c:ea:6d:de:52:10:41:
88:ab:93:12:20:e8:3c:a4:71:43:2f:73:18:48:89:
59:d0:70:39:fa:08:b1:f2:a7:58:61:7d:dd:5d:15:
36:d5:84:6a:dc:de:3c:a0:e8:96:5c:78:4f:53:24:
fc:f9:2a:bf:33:1b:c0:34:ca:a1:f6:df:34:5c:6b:
1d:d9:14:26:49:39:a8:c5:a5:a3:b8:ff:ab:47:e1:
74:13:ca:ce:89:45:b6:97:cc:13:fc:ae:8c:33:85:
d3:d5:7d:2c:6b:4c:d4:99:3b:35:a8:ec:5f:ae:b7:
17:9f:c7:57:f4:a3:ef:04:ed:29:f7:91:fe:d4:3a:
a7:2b:c7:3b:64:51:68:9c:51:23:79:ad:1f:02:44:
ad:28:bc:89:6a:1d:3b:51:e6:40:53:dc:17:2e:01:
a3:c2:ef:96:d7:52:88:03:34:5f:c7:0b:d4:47:46:
94:78:96:0f:22:93:e5:d5:a9:b8:d9:4d:da:e3:d3:
23:c4:14:81:13:fd:22:12:85:8f:87:4d:5f:81:92:
8f:00:71:57:ee:91:99:05:2d:9e:01:6d:28:ed:db:
3b:ca:59:e3:69:ac:2a:3e:72:df:02:cd:0d:eb:df:
eb:7a:7a:55:d7:ad:aa:2b:ce:63:de:bf:5a:c0:a8:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:10:34:01:2E:5C:42:FC:19:95:E9:A7:E1:AC:14:5F:32:37:B4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f5::/48
Signature Algorithm: sha256WithRSAEncryption
7c:35:ce:6f:f7:fa:6a:e0:bf:92:7e:b5:42:fd:0b:54:a2:e3:
37:48:ba:bc:50:15:31:f6:1d:df:80:03:17:42:2d:81:20:3a:
f9:fe:4b:f9:27:66:d3:06:fa:f7:78:6b:78:90:38:9c:46:d2:
3b:1d:09:4d:07:af:1c:75:75:b8:79:59:fc:4d:f3:71:f6:e1:
e8:25:70:82:ae:77:82:88:fe:e2:14:45:fd:4e:97:1a:8c:ae:
ed:e2:3d:8d:f1:db:0e:0d:e7:02:c3:1b:39:17:60:aa:b9:92:
93:84:a5:cb:1b:6c:f7:1c:00:a1:ec:43:d3:55:0e:9b:dc:e0:
00:41:b6:0e:65:73:26:ef:e0:b2:39:08:4e:e7:7d:53:54:ff:
bd:17:61:8e:54:9f:ea:4d:b7:5e:62:d1:c6:0d:44:49:98:dd:
52:14:fe:88:00:2e:fa:11:e6:39:82:b6:e4:e6:d0:82:05:42:
88:1e:a5:1a:66:12:59:16:37:58:9d:f9:a2:29:cd:17:37:6e:
35:42:87:4b:55:9a:ab:56:83:7c:ee:2f:a0:07:64:29:62:27:
4d:30:39:ef:71:9e:9d:73:dd:f2:89:bb:68:37:d6:04:33:51:
ba:ca:2e:33:e1:b2:78:d5:f0:08:72:ae:b9:42:89:e4:c3:f7:
42:c8:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:46 2025 by rpki-client