Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa
File: AS215051.roa (raw, json)
Hash identifier: QXaJQBuTuo1xWrLWS/0vrxBx6lNS40vkewvdOZMaJuA=
Subject key identifier: 83:C6:30:99:D0:85:85:D5:16:08:9D:83:00:F4:85:95:59:AD:44:F8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2CED2140F5CFF67CFA9257A89B7D4760F13C2694
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa
Signing time: Wed 15 Jan 2025 02:48:32 +0000
ROA not before: Wed 15 Jan 2025 02:43:32 +0000
ROA not after: Wed 14 Jan 2026 02:48:32 +0000
asID: 215051
IP address blocks: 2a0f:85c1:b4b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ed:21:40:f5:cf:f6:7c:fa:92:57:a8:9b:7d:47:60:f1:3c:26:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 15 02:43:32 2025 GMT
Not After : Jan 14 02:48:32 2026 GMT
Subject: CN=83C63099D08585D516089D8300F4859559AD44F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:e2:a9:0a:08:18:bd:19:cf:06:46:5d:5a:
a0:af:40:b3:01:d7:c8:b2:92:95:0f:0e:2b:bf:93:
73:17:ee:b0:bd:ed:1b:bf:d6:69:7b:70:8e:78:3a:
44:c8:be:06:ab:dc:88:76:d0:91:a5:26:e9:76:85:
0b:e0:12:bc:10:d2:1d:6d:cf:e4:49:6c:30:a0:3d:
12:a1:d3:d4:6c:93:1e:11:41:fd:7c:2f:2a:9a:4d:
af:18:37:53:81:42:b5:6a:41:a7:cd:c3:d4:ad:f5:
06:cc:0b:48:20:ab:89:43:7f:30:3e:bc:04:7e:10:
b5:55:92:96:7c:1b:6d:65:26:f5:87:d8:60:68:4b:
0f:6a:20:70:c6:63:9d:1d:53:6b:98:2d:45:f4:a8:
9f:32:1d:d8:5a:73:e7:ce:5c:49:7a:a0:cb:94:8e:
23:f9:6c:82:27:18:7e:bb:b3:bb:4d:5d:75:68:14:
57:70:7b:9c:13:c0:77:5f:df:b5:cf:03:a7:d6:44:
da:76:67:4e:82:51:2f:f1:31:68:8f:07:3e:67:2b:
f9:85:23:9d:6b:8b:15:b6:bf:17:4f:9e:3b:15:b4:
e4:cc:20:04:a8:c0:c5:eb:15:3c:b5:c0:29:0d:54:
04:de:c5:91:a6:2c:a2:40:62:d8:31:09:5e:b2:6f:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:30:99:D0:85:85:D5:16:08:9D:83:00:F4:85:95:59:AD:44:F8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b4b::/48
Signature Algorithm: sha256WithRSAEncryption
56:fd:13:e2:56:11:83:56:18:67:0b:b9:4e:cc:bd:25:19:cd:
45:4f:bb:09:88:22:33:c8:74:ab:81:f9:d8:21:a5:68:9d:50:
39:ee:b7:93:af:2d:77:e1:be:39:c7:cb:7d:cf:eb:26:ac:d0:
c9:16:ed:26:ab:40:fe:f7:df:ec:1e:e8:11:84:33:d8:a5:63:
15:c3:1f:86:6d:e4:47:06:86:a1:13:b2:b2:7d:25:26:62:67:
6f:a6:69:74:48:bc:10:bb:ab:f8:42:56:db:3e:81:b7:2b:fb:
2c:e6:a4:15:8c:9b:0d:62:e1:f6:ea:c0:1a:73:3b:ba:1b:30:
e5:61:f0:81:b6:9a:85:cc:c5:86:4b:b9:78:fb:0a:92:e0:3e:
a2:ea:d9:f0:bb:58:95:7b:19:03:56:8f:3a:6c:3c:32:f3:25:
81:04:ea:b6:8f:5c:4f:22:a1:9f:48:6d:0f:54:db:db:53:7d:
9c:c7:27:f5:72:86:f7:f2:f8:03:d9:a7:8d:1c:9f:0e:91:01:
51:59:cc:7a:f5:0e:b6:15:b8:37:35:b5:1a:f1:83:0a:6d:51:
74:bf:2b:54:d6:2e:92:7e:d3:af:17:ad:d5:6f:74:1d:fa:1b:
68:54:44:d5:d1:c1:68:51:0c:20:ff:5d:de:15:9c:3b:f3:b1:
81:b2:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:21 2025 by rpki-client