Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa
File: AS214566.roa (raw, json)
Hash identifier: ElV5pAfgpdL3kpOInmRC4ne+pHqu8cjoOxGnwfxocPk=
Subject key identifier: F1:75:56:E9:32:C2:58:5A:06:9A:BF:7D:BD:76:1B:47:FF:8F:62:B8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7786D7A3DD370E6A617849B2C42976DCA13C69BB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa
Signing time: Tue 17 Dec 2024 00:46:20 +0000
ROA not before: Tue 17 Dec 2024 00:41:20 +0000
ROA not after: Tue 16 Dec 2025 00:46:20 +0000
asID: 214566
IP address blocks: 2a0f:85c1:82f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:86:d7:a3:dd:37:0e:6a:61:78:49:b2:c4:29:76:dc:a1:3c:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 17 00:41:20 2024 GMT
Not After : Dec 16 00:46:20 2025 GMT
Subject: CN=F17556E932C2585A069ABF7DBD761B47FF8F62B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:cc:5c:79:39:b3:55:cb:b2:9c:f5:2f:85:
47:24:23:74:a0:a6:f5:7b:b1:9a:dd:47:2d:f3:56:
cf:59:6b:24:ec:8b:98:5c:ab:8a:91:6b:7b:02:12:
dd:5d:8d:2f:3f:27:09:22:79:23:cc:af:50:43:9e:
e5:f0:d7:3a:64:53:6b:a9:b5:2a:73:2f:b9:bb:9e:
da:b9:34:eb:68:02:62:6a:67:d2:e4:00:f9:27:62:
9c:94:09:4a:69:b0:b4:c0:e3:cb:27:b3:2f:ee:09:
59:35:5d:12:97:a6:f0:be:44:ba:0b:ce:4f:e7:21:
b6:02:ca:35:95:05:28:05:64:77:ec:eb:cb:c4:ba:
87:2b:28:76:97:f5:41:66:ca:df:a7:7d:3c:ee:91:
b1:80:45:17:f8:b7:ff:e0:2c:b9:c3:28:c2:c5:79:
70:be:f7:ee:03:62:59:88:2f:79:3e:66:8e:1d:1f:
2b:0a:d2:35:e6:85:f9:fd:88:59:46:a4:14:4e:51:
a7:69:d6:de:42:51:b8:73:b4:8f:d6:5e:98:34:09:
84:a1:cd:d0:66:c6:44:6a:6f:1d:60:ba:62:16:9d:
ac:30:f3:06:b1:83:a2:90:88:a9:6d:4c:61:4e:42:
50:e5:7c:98:78:1d:5a:00:18:d4:7c:86:d5:61:e3:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:56:E9:32:C2:58:5A:06:9A:BF:7D:BD:76:1B:47:FF:8F:62:B8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:82f::/48
Signature Algorithm: sha256WithRSAEncryption
71:da:25:39:bc:d7:87:65:00:9e:4e:91:5a:2b:98:c4:b8:f9:
53:52:e5:fd:f0:41:9b:83:d9:77:6a:c7:51:48:d8:92:bb:81:
c6:1c:fa:55:5d:2c:4c:e0:b7:3c:d2:e2:e3:bf:20:61:17:f4:
48:86:10:ad:84:2d:3e:88:b5:54:49:ec:cc:1a:dd:7f:3b:0f:
a3:6a:1e:0e:7a:4d:2f:12:b2:8e:98:ab:92:37:1b:f5:8f:bc:
4e:0f:16:cd:c6:8e:4e:ea:af:bc:eb:94:90:80:eb:fc:44:b8:
57:26:f4:ad:2e:09:13:60:05:d8:18:2c:74:45:62:97:34:17:
a8:49:e3:ba:d8:de:fa:04:79:04:67:1a:cd:76:d6:7c:00:d5:
94:87:51:11:f7:77:08:b8:27:73:3b:1c:69:17:33:f0:21:b8:
7e:bb:78:f5:b5:6e:bb:4b:0e:48:71:e5:6d:15:09:4a:03:26:
a9:40:e8:78:52:39:ea:a9:3a:89:bc:04:9b:f3:5e:f8:ca:ab:
69:a4:dc:97:91:57:8d:2c:ad:5e:f1:60:b2:21:c5:ca:21:c0:
e6:65:c0:3b:e2:9f:c3:3c:d6:63:d6:0b:ee:7a:7d:3f:ef:67:
34:a4:75:13:3e:fb:02:2f:f9:54:49:54:9f:d9:12:0c:ac:19:
82:89:2e:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUd4bXo903DmpheEmyxCl23KE8abswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDEyMTcwMDQxMjBaFw0yNTEyMTYwMDQ2MjBaMDMxMTAvBgNV
BAMTKEYxNzU1NkU5MzJDMjU4NUEwNjlBQkY3REJENzYxQjQ3RkY4RjYyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhcxceTmzVcuynPUvhUckI3Sg
pvV7sZrdRy3zVs9ZayTsi5hcq4qRa3sCEt1djS8/JwkieSPMr1BDnuXw1zpkU2up
tSpzL7m7ntq5NOtoAmJqZ9LkAPknYpyUCUppsLTA48snsy/uCVk1XRKXpvC+RLoL
zk/nIbYCyjWVBSgFZHfs68vEuocrKHaX9UFmyt+nfTzukbGARRf4t//gLLnDKMLF
eXC+9+4DYlmIL3k+Zo4dHysK0jXmhfn9iFlGpBROUadp1t5CUbhztI/WXpg0CYSh
zdBmxkRqbx1gumIWnaww8waxg6KQiKltTGFOQlDlfJh4HVoAGNR8htVh45ZPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU8XVW6TLCWFoGmr99vXYbR/+PYrgwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NTY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgvMA0GCSqGSIb3DQEBCwUAA4IBAQBx2iU5vNeHZQCeTpFaK5jEuPlTUuX98EGb
g9l3asdRSNiSu4HGHPpVXSxM4Lc80uLjvyBhF/RIhhCthC0+iLVUSezMGt1/Ow+j
ah4Oek0vErKOmKuSNxv1j7xODxbNxo5O6q+865SQgOv8RLhXJvStLgkTYAXYGCx0
RWKXNBeoSeO62N76BHkEZxrNdtZ8ANWUh1ER93cIuCdzOxxpFzPwIbh+u3j1tW67
Sw5IceVtFQlKAyapQOh4UjnqqTqJvASb8174yqtppNyXkVeNLK1e8WCyIcXKIcDm
ZcA74p/DPNZj1gvuen0/72c0pHUTPvsCL/lUSVSf2RIMrBmCiS4L
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:33:46 2025 by rpki-client