Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
File: AS213865.roa (raw, json)
Hash identifier: pDTjIlF0q1R1Gl5wxaXob/Z5xdhzyZO1VjgzfT+NWxQ=
Subject key identifier: 48:D2:C4:E9:1B:7F:05:D7:71:AF:59:AA:74:24:F6:6A:AA:09:5C:AA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5BEF17B505EC629D5F025363D64EBF20E5EC9A75
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
Signing time: Tue 26 Nov 2024 22:07:02 +0000
ROA not before: Tue 26 Nov 2024 22:02:02 +0000
ROA not after: Tue 25 Nov 2025 22:07:02 +0000
asID: 213865
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:17:b5:05:ec:62:9d:5f:02:53:63:d6:4e:bf:20:e5:ec:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 26 22:02:02 2024 GMT
Not After : Nov 25 22:07:02 2025 GMT
Subject: CN=48D2C4E91B7F05D771AF59AA7424F66AAA095CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:7b:35:d6:b8:c5:cc:0d:e1:c1:5d:b3:40:
0b:52:43:07:3b:7b:7d:6a:4a:77:9e:58:da:5a:e6:
90:c4:da:5c:e9:33:d5:d7:3e:86:69:3a:13:90:09:
56:e7:8a:4f:32:5d:75:9c:67:9f:21:b0:0a:30:71:
ed:6c:3d:1d:3d:2d:ef:bf:42:57:54:d8:19:51:35:
ff:18:71:af:11:2a:21:31:55:a8:0b:b7:ab:39:11:
82:20:98:f4:f6:a7:18:68:5a:8e:25:7b:07:36:cd:
cf:62:f8:1a:a9:7d:6a:5b:e0:11:83:b7:82:c0:66:
99:0c:a1:c9:df:1f:c8:b2:e4:d2:dd:7c:5f:64:c6:
93:0e:e8:db:5f:28:e2:2d:4f:95:9e:ce:02:9f:e3:
93:2b:9a:9d:d4:40:29:aa:fa:46:8a:ae:32:b2:ef:
e1:88:e6:46:89:0f:dc:ca:6b:08:b1:6a:b4:dd:13:
5e:c5:f5:09:5c:ce:90:89:cf:94:58:80:24:e3:9f:
57:ee:93:ef:e2:ad:1c:9e:df:ac:64:af:f9:7a:e9:
7c:56:50:7a:65:a0:c5:d9:c9:88:8c:a2:83:89:f3:
7b:37:66:42:be:9a:cf:77:cf:c8:31:c2:bd:f9:df:
f7:11:da:f2:42:4e:c9:c3:fe:3a:01:c8:56:10:f6:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D2:C4:E9:1B:7F:05:D7:71:AF:59:AA:74:24:F6:6A:AA:09:5C:AA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3d:a2:88:ec:8b:9b:cf:f1:99:cc:89:bb:75:db:32:54:65:
1b:b8:a7:4c:bc:79:da:a8:b2:31:7c:aa:09:a2:26:65:d0:5d:
ef:d5:ef:48:2a:2c:20:82:66:42:3a:a9:f6:df:31:01:e0:6c:
de:9e:ae:79:8c:a8:82:9e:85:ed:3c:b7:75:41:06:3d:13:da:
75:7c:eb:6f:69:ff:af:f3:80:f0:03:1b:3c:31:36:be:37:f5:
99:23:fa:5b:ba:d8:0e:f8:8e:a3:82:ea:3f:34:16:a0:34:a5:
b8:28:af:b2:1f:71:41:2d:48:b4:e0:d8:a0:76:5a:e6:23:8c:
cf:b8:12:2b:3d:9c:49:56:07:09:c1:cf:33:e7:31:f0:7a:50:
97:e5:d5:8a:6c:14:d2:56:56:5b:6f:28:ca:67:26:d6:58:88:
75:55:52:06:38:8d:4f:a7:ec:29:c6:ab:58:ff:af:6b:df:24:
a5:09:bc:78:88:59:c0:f2:5a:b3:93:97:ab:6d:12:a9:b3:27:
10:e1:3b:fc:c2:a1:b7:db:ec:bb:b9:4c:54:fb:da:2b:59:8e:
26:2a:97:65:95:2c:f3:15:2d:cb:c3:65:d8:b3:c2:a6:46:b6:
a5:58:45:a1:0d:c9:f0:46:fe:98:54:89:e0:62:7d:3a:06:c4:
4c:f5:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:12 2025 by rpki-client