Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
File: AS213864.roa (raw, json)
Hash identifier: X+o88l1rA8FAkgdNa3Mfs0O8ZE3uxRbDVNSaJfSPj08=
Subject key identifier: E0:1E:57:35:EA:0F:95:9B:33:9B:DF:B0:FA:23:DE:E1:09:CB:D6:C1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27099953FF260FB0C38CA7416F8E2BB6A8B2A9E3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
Signing time: Tue 26 Nov 2024 02:49:34 +0000
ROA not before: Tue 26 Nov 2024 02:44:34 +0000
ROA not after: Tue 25 Nov 2025 02:49:34 +0000
asID: 213864
IP address blocks: 2a0f:85c1:8f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:09:99:53:ff:26:0f:b0:c3:8c:a7:41:6f:8e:2b:b6:a8:b2:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 26 02:44:34 2024 GMT
Not After : Nov 25 02:49:34 2025 GMT
Subject: CN=E01E5735EA0F959B339BDFB0FA23DEE109CBD6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:71:83:9c:df:0b:04:f6:cc:73:c1:ab:59:
b0:4f:8c:66:a0:6c:ec:af:6b:df:03:02:bc:4f:af:
e4:81:e1:e8:8c:ab:db:f4:b6:c7:6b:4d:83:94:ff:
8c:22:af:6d:2c:48:3f:10:23:fa:ec:6e:1f:ba:70:
6d:cf:6c:38:42:a7:b8:cf:2f:e3:01:c3:b0:ce:55:
70:d8:55:40:4a:0e:39:14:66:27:7d:8f:8c:5a:f4:
a5:54:85:67:01:62:e4:80:7a:21:0a:83:80:3a:f9:
ef:63:b7:9e:ff:4b:2f:21:77:c1:f9:a9:b1:db:33:
1e:3d:05:47:b9:62:a4:56:e5:1e:77:4e:cd:2c:99:
78:64:44:c5:51:b2:7a:a5:fc:a6:39:d8:eb:a1:ee:
28:4e:7f:dd:17:63:42:b9:36:fe:3a:60:69:d3:7f:
e5:77:1b:f8:72:df:8a:ad:7f:17:b6:b5:0d:aa:a2:
e7:93:86:8a:23:2b:1d:ad:47:9e:c1:85:7a:51:d7:
3f:d5:9c:be:d6:35:c1:bb:58:12:1b:92:b1:d6:23:
20:72:ad:8d:94:35:13:24:06:5e:3e:b7:f8:3f:36:
7e:54:d3:b3:43:e5:2b:de:be:9d:a7:7b:8d:93:ec:
ca:29:8f:3c:55:32:82:0c:bf:e7:f0:8d:2d:27:0b:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:57:35:EA:0F:95:9B:33:9B:DF:B0:FA:23:DE:E1:09:CB:D6:C1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f0::/48
Signature Algorithm: sha256WithRSAEncryption
54:06:b1:ad:7e:1b:45:12:de:43:56:43:7c:be:89:79:c7:67:
6e:41:38:9c:58:db:0a:28:5e:12:32:9f:2e:cb:31:c5:28:84:
fd:0c:8e:b8:a6:86:13:e2:60:4f:f6:9d:e2:52:73:ba:40:a7:
4a:7f:e5:e5:dc:c1:3d:88:09:f9:0c:48:5a:3e:c4:95:f3:14:
00:63:ba:46:3c:34:09:5f:6c:6c:90:47:ee:d5:44:9a:68:f3:
f4:39:f1:79:72:65:d3:b6:2f:23:b3:ca:db:7c:1f:78:6f:b9:
e1:cb:87:b2:5f:3b:38:dc:bb:ca:34:14:3c:1a:3d:24:e7:ea:
33:26:bf:de:b7:87:37:0a:c2:1f:c0:ef:d1:3f:01:9b:24:15:
93:3a:b8:75:68:5d:9c:90:18:fb:e7:43:3d:11:27:20:cc:88:
75:d8:0e:c8:f0:c5:fe:45:4a:24:1c:98:15:b7:a5:dd:ba:f4:
6b:fd:6d:15:83:7a:81:82:e3:ae:a6:4c:d9:84:c1:3e:61:93:
20:7c:ed:83:96:98:35:38:9f:56:a5:e2:c2:b0:cc:4e:8f:97:
79:2e:f1:b1:19:2e:df:86:92:ba:4f:fd:0a:41:d0:b7:30:a1:
57:42:f1:e5:51:e0:7a:6e:9c:74:91:f5:3b:fc:53:17:4f:8e:
a7:76:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:34 2025 by rpki-client