Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
File: AS215313.roa (raw, json)
Hash identifier: XDV9LoAXYjWEV8LV7rYG/im9qTPHPn6WMz5fmVY/lOk=
Subject key identifier: FC:4B:85:B5:A9:75:64:8E:69:6E:AA:E7:AA:F6:D6:BD:0A:E4:45:CE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 275B131AC7798ACD01B99B8265327F6B22C019CB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
Signing time: Wed 11 Dec 2024 03:27:26 +0000
ROA not before: Wed 11 Dec 2024 03:22:26 +0000
ROA not after: Wed 10 Dec 2025 03:27:26 +0000
asID: 215313
IP address blocks: 2a0f:85c1:398::/48 maxlen: 48
2a0f:85c1:b20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5b:13:1a:c7:79:8a:cd:01:b9:9b:82:65:32:7f:6b:22:c0:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 11 03:22:26 2024 GMT
Not After : Dec 10 03:27:26 2025 GMT
Subject: CN=FC4B85B5A975648E696EAAE7AAF6D6BD0AE445CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:49:71:03:4b:ac:2e:9e:37:d5:f8:c7:9c:
7d:ff:86:fd:b2:65:74:89:9e:f5:77:a1:d2:91:02:
24:31:e7:a8:27:9f:3e:1c:16:12:5a:a6:b6:4c:aa:
10:59:8e:93:a3:64:12:e0:c3:8c:da:fa:73:2f:cf:
43:98:e5:1d:4a:08:a1:52:98:47:f1:1e:42:49:72:
8e:6d:80:24:5d:e0:85:2f:fc:a4:07:ff:d3:2d:62:
0e:9a:cb:dc:da:b7:66:c4:ad:e7:1e:e0:a1:e5:1f:
e6:69:5b:bf:09:4d:c3:91:17:0e:12:62:e6:f9:b9:
77:64:9a:05:6e:f3:a8:a4:e0:52:da:5a:32:e9:92:
fd:f6:90:23:3e:06:ad:b6:f6:cc:2c:d5:a7:13:f3:
d3:c3:9e:49:fc:ca:3b:61:17:70:b6:a9:f6:c6:31:
1a:a9:04:67:8c:8f:8b:75:b5:e7:37:b1:35:c9:43:
b3:a4:a0:f2:c1:46:ff:47:50:0a:89:ba:cc:2d:78:
5a:88:80:09:ee:ec:2f:f8:48:63:6c:d9:da:ce:40:
7c:5a:b0:cd:ed:83:d8:d8:0f:42:ca:2d:52:8d:ef:
da:98:a5:72:3c:8c:3a:e5:f3:2a:62:44:7c:6f:bc:
8d:91:c6:c6:03:2a:cc:47:81:11:ae:88:22:74:c1:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:85:B5:A9:75:64:8E:69:6E:AA:E7:AA:F6:D6:BD:0A:E4:45:CE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:398::/48
2a0f:85c1:b20::/44
Signature Algorithm: sha256WithRSAEncryption
4c:0e:90:28:c6:b9:c2:ea:fe:66:bf:8c:d1:15:7b:31:26:03:
83:13:17:a7:70:6d:eb:6d:c8:d5:ab:41:79:1a:69:31:00:72:
de:ee:ac:69:55:6d:20:aa:8e:5e:67:0f:c0:46:e9:e8:bb:1f:
59:b6:8a:ab:a2:4b:c9:af:58:8c:47:c0:73:b0:c4:c6:bf:d5:
a8:e7:c3:d9:be:23:af:b8:b7:99:47:f9:01:c9:29:6b:6d:60:
97:ee:87:44:e9:46:8b:ab:ab:e3:7a:02:26:3a:b5:de:2b:d8:
aa:10:57:1a:82:8b:c5:64:1b:20:a7:c3:21:61:ec:02:8b:5d:
c1:12:34:92:a0:59:fd:15:d0:a0:89:6d:5f:cb:89:f7:de:a7:
3b:c8:3b:07:d5:85:6c:b0:30:78:b5:5a:b8:9b:02:7b:c4:7d:
21:ef:a8:f0:89:be:71:46:c8:14:6c:7c:6e:16:db:50:7d:18:
41:d3:77:36:6c:7b:90:56:34:9f:ad:f3:6a:c9:6e:1c:5e:27:
24:17:2c:22:e7:62:9d:47:1b:91:16:ed:e1:5f:89:48:e7:44:
7e:7c:5a:0b:8b:43:83:1a:49:ff:ce:ec:4f:97:62:d1:da:99:
b7:fb:9c:81:e1:72:0c:c0:ee:a1:c2:3a:94:7a:c3:4f:9c:38:
72:0a:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:06:27 2025 by rpki-client