Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa
File: AS215516.roa (raw, json)
Hash identifier: UVx2u8u3hQYQ/vnYgifeBHkt0s5V/Wpq4SvIaakgP8w=
Subject key identifier: 9C:77:69:01:C9:A9:93:8B:2F:66:19:50:62:4A:3F:62:64:D1:FC:C3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 24839240EBA951CDD5449DB3479F4D9CF89C235F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa
Signing time: Tue 11 Feb 2025 04:18:48 +0000
ROA not before: Tue 11 Feb 2025 04:13:48 +0000
ROA not after: Tue 10 Feb 2026 04:18:48 +0000
asID: 215516
IP address blocks: 2a0f:85c1:380::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:83:92:40:eb:a9:51:cd:d5:44:9d:b3:47:9f:4d:9c:f8:9c:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 11 04:13:48 2025 GMT
Not After : Feb 10 04:18:48 2026 GMT
Subject: CN=9C776901C9A9938B2F661950624A3F6264D1FCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:19:29:e9:48:b5:a5:37:3e:18:8c:b7:75:
a8:98:5c:52:8d:4b:f3:8a:88:43:a3:43:b5:24:93:
a2:24:ce:a5:ec:b3:75:3f:26:20:08:45:84:47:fe:
9b:da:c4:25:fb:dd:4c:10:69:d0:28:21:1f:23:34:
3c:d3:d7:87:90:ae:84:c8:08:bd:eb:20:42:87:71:
57:e4:36:83:bf:49:80:e8:ce:64:26:a9:d8:cc:f3:
9f:ec:b2:da:ab:87:0e:88:2c:21:14:16:e4:d5:3d:
97:c0:4f:e9:c0:0c:f8:84:1c:c1:53:d7:3c:72:b0:
82:e0:84:f4:72:75:67:30:08:c7:33:61:12:ca:6a:
23:20:96:07:e0:2d:73:31:00:c4:eb:59:a6:e6:30:
a0:89:22:b7:88:7d:a5:e9:d3:f1:ab:f3:0f:70:81:
3f:b4:7d:72:60:07:d2:70:cb:ba:75:63:7a:87:ff:
7b:d2:dc:7a:6d:d2:1a:f2:2a:b2:be:12:92:ae:d4:
c6:e2:62:36:55:1c:48:02:fb:2f:24:cc:5d:1e:3b:
d6:e4:e7:69:2d:f5:2e:66:84:bd:69:89:8c:d8:60:
5c:32:02:83:28:e9:67:c7:94:c7:a4:f2:a3:01:9a:
e5:56:f8:80:cb:8b:82:0a:72:ed:1a:f7:8b:4c:4b:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:69:01:C9:A9:93:8B:2F:66:19:50:62:4A:3F:62:64:D1:FC:C3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:380::/44
Signature Algorithm: sha256WithRSAEncryption
d4:89:dc:10:1d:3e:03:65:97:74:d4:a1:ac:f0:3a:9e:08:9f:
b3:ce:ab:74:53:e6:78:99:b5:5d:28:ca:0a:a3:9a:97:dc:94:
2f:cd:41:59:b1:63:4c:e9:88:31:fb:98:c0:25:2f:9a:d1:8c:
b6:0e:3d:9f:16:90:52:20:91:86:65:95:f1:1b:5c:68:62:08:
69:27:c4:be:e9:4f:9b:1b:70:a5:0c:8d:79:25:05:83:97:15:
e6:b4:57:b8:07:60:03:e0:ef:f4:9a:44:11:75:7b:ef:77:13:
2a:0b:3b:af:72:88:35:74:5c:93:8e:6d:2d:f3:bc:14:21:2e:
0c:e4:fc:08:26:86:97:11:24:18:ad:b7:7a:35:38:da:be:bd:
34:9b:38:2f:c2:6b:6f:9c:93:d1:fc:a7:50:c4:c7:92:88:38:
b1:49:0c:69:8c:ad:54:eb:95:03:5d:71:91:b6:e6:7f:0d:c7:
bb:2e:6f:26:ad:7c:f4:2a:7d:06:4d:c0:aa:c2:b8:ff:bb:f8:
91:bf:13:61:87:35:c0:d8:aa:fd:de:bc:37:52:e7:cf:18:d7:
3d:a3:47:4a:e5:ed:c2:cf:5f:40:a8:66:b2:58:98:10:37:be:
d2:0c:7e:c0:7f:03:10:e2:1a:77:c3:cb:b9:1d:f5:50:8c:59:
e9:04:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:43:18 2025 by rpki-client