Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
File: AS214016.roa (raw, json)
Hash identifier: aYMNC02uEq5cc2ST6u1f6djT4jtkuwc7By8SlERU42Y=
Subject key identifier: 5D:FA:14:F7:BA:2B:A6:AA:41:21:03:E2:7D:87:F4:04:D4:56:9D:85
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 444AE34ACD7CCF341679AF08E1562C3992C6E439
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
Signing time: Wed 11 Dec 2024 03:06:36 +0000
ROA not before: Wed 11 Dec 2024 03:01:36 +0000
ROA not after: Wed 10 Dec 2025 03:06:36 +0000
asID: 214016
IP address blocks: 2a0f:85c1:8be::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4a:e3:4a:cd:7c:cf:34:16:79:af:08:e1:56:2c:39:92:c6:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 11 03:01:36 2024 GMT
Not After : Dec 10 03:06:36 2025 GMT
Subject: CN=5DFA14F7BA2BA6AA412103E27D87F404D4569D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:02:85:73:f3:85:1e:d7:12:d6:71:b7:54:
c1:df:eb:f2:28:e0:90:5b:51:63:1b:4c:26:ea:cc:
0d:a5:f9:43:55:a7:73:0f:7e:27:7c:e8:1c:aa:a1:
7e:81:b6:e8:23:96:14:57:b8:73:dd:b7:95:46:9c:
d3:1b:39:2d:e7:6b:14:4d:fd:ab:d8:49:c5:61:46:
68:4f:75:c3:51:29:ef:e0:81:cf:53:9f:d9:ad:95:
43:9f:76:85:e1:a0:50:a3:51:bb:50:c4:23:c1:fd:
26:9d:a3:9f:7a:bd:a0:a3:68:50:d4:67:de:2b:6c:
05:66:39:df:6e:62:14:37:77:8b:c3:db:16:b1:3d:
07:c3:47:c8:87:e1:9c:f3:47:71:e5:0d:e5:df:22:
d3:61:c3:b3:d5:b8:b2:b8:bc:7e:0f:49:ec:4e:d4:
1b:4d:26:d1:ae:ef:de:31:ce:4e:3b:54:ea:4e:c3:
17:93:bd:dc:bd:db:80:c6:02:c8:ff:58:c7:41:bd:
e9:bc:79:ce:d8:52:ec:40:37:9f:20:a4:ea:20:98:
d5:b6:a0:2e:39:51:4b:46:18:d7:07:36:8a:96:b9:
70:10:ea:12:8c:0c:e5:a9:f0:e9:40:f0:0a:03:73:
fd:85:b2:cd:ca:59:ab:5c:1d:50:50:32:93:9e:f8:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:14:F7:BA:2B:A6:AA:41:21:03:E2:7D:87:F4:04:D4:56:9D:85
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8be::/48
Signature Algorithm: sha256WithRSAEncryption
05:9b:c0:11:c9:f8:8f:2e:fd:1a:ba:35:07:31:fa:9b:44:fb:
9c:7f:c5:03:d8:8c:67:69:21:f9:ef:e3:17:66:73:5d:b4:0d:
e3:b3:32:57:23:44:f8:fc:7f:d5:b2:70:32:ca:95:01:ff:8c:
19:02:11:0f:1d:9f:d7:71:d6:09:fe:b6:56:ef:d1:d8:53:7c:
3a:e1:22:29:26:f3:e8:e5:bd:74:4f:e6:e4:9a:12:13:17:fc:
bf:8d:07:d6:a7:4a:c7:7a:31:5c:80:25:25:70:33:62:a6:97:
83:8b:f5:05:03:2c:60:ed:5c:53:6b:96:e4:ae:b9:2c:cf:69:
9a:64:0d:b8:5b:ef:c8:98:90:c3:5f:56:8c:6a:d1:bd:24:8c:
72:1a:3b:1b:ba:72:8e:37:dd:37:7c:e2:92:f0:95:47:c0:0a:
2b:cc:22:b7:7d:d0:97:0d:65:a0:c1:02:8f:ba:a2:98:64:cc:
34:e2:1e:21:fd:01:30:d3:95:78:28:d5:d2:1e:08:4d:61:ef:
f4:05:c2:db:e6:e1:32:e6:c1:d9:61:8a:37:81:1a:03:64:44:
3d:cc:36:0e:4d:97:5f:7e:dd:97:08:bd:0b:95:b5:b7:3c:c5:
1b:0d:83:44:ba:8c:94:1e:6d:20:c6:f6:7a:09:56:cd:04:ea:
02:76:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:12 2025 by rpki-client