Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215794.roa
File: AS215794.roa (raw, json)
Hash identifier: MbWwVr9ErltPalKSPpq894/QGADgVzR4adVYZ/Yvt+A=
Subject key identifier: 74:B7:5B:4C:ED:6B:CB:E1:9E:A2:C2:19:BF:7A:B9:D1:65:1E:CB:5E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 78399AFC3EFBED4D0188A6E128E7754D1FD6A790
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215794.roa
Signing time: Thu 27 Mar 2025 04:03:04 +0000
ROA not before: Thu 27 Mar 2025 03:58:04 +0000
ROA not after: Thu 26 Mar 2026 04:03:04 +0000
asID: 215794
IP address blocks: 2a0f:85c1:8f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:39:9a:fc:3e:fb:ed:4d:01:88:a6:e1:28:e7:75:4d:1f:d6:a7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 27 03:58:04 2025 GMT
Not After : Mar 26 04:03:04 2026 GMT
Subject: CN=74B75B4CED6BCBE19EA2C219BF7AB9D1651ECB5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:51:e3:58:b9:dc:f6:4e:c2:ed:b6:db:e2:
a3:3e:32:db:5e:86:bd:ad:d4:0d:22:a3:e1:b7:13:
26:f8:eb:52:29:a8:de:03:f6:0d:2a:1f:a5:fd:10:
af:69:36:8b:63:3b:98:78:eb:f7:b1:25:77:9d:6d:
b4:01:ba:5a:f0:be:2a:e2:17:c2:84:66:b6:f9:5b:
0a:5d:94:eb:f9:98:01:84:18:b1:c7:8c:9f:1a:6b:
10:b0:1f:a1:a7:56:f5:c6:3e:9b:31:03:0b:2f:47:
f3:f0:ae:c5:d3:1d:bb:e7:33:45:24:44:28:7d:a0:
a2:90:2f:f0:4b:72:b7:e1:d5:e3:a2:5d:bb:4a:2f:
85:d4:cf:1a:eb:18:b1:41:ff:04:88:93:72:c1:77:
69:40:a5:99:18:43:bc:52:7c:b2:2f:ee:38:a8:3a:
f4:70:1c:a7:fd:72:38:7e:be:40:90:11:3f:8b:2b:
50:6a:8b:4d:c8:0d:21:86:17:5d:46:34:8a:52:08:
46:14:bc:db:dd:d1:40:63:2a:d1:57:ed:0f:61:b2:
2d:82:70:89:58:e8:a9:e1:40:b7:a3:a0:60:0c:85:
a7:bf:74:09:bd:ef:46:fc:e7:d8:08:99:c1:9d:29:
11:86:5b:b9:51:79:d0:f6:de:b1:6d:51:36:73:c6:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:5B:4C:ED:6B:CB:E1:9E:A2:C2:19:BF:7A:B9:D1:65:1E:CB:5E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f6::/48
Signature Algorithm: sha256WithRSAEncryption
af:3a:46:34:38:af:79:69:2c:c5:e6:ce:c9:2d:f7:7f:86:7b:
f0:27:d5:6c:6c:cd:e3:97:46:3a:27:11:b1:18:89:3d:87:ce:
7f:8c:52:db:85:b4:a2:6e:0b:d2:ff:3b:c5:a4:45:1f:ee:57:
e6:bc:e8:b4:1f:fc:f4:a6:13:56:12:32:2e:f4:c7:13:5d:7b:
03:38:2d:64:ef:5a:14:57:52:98:18:5d:8d:a6:2d:17:6e:a5:
75:f5:8f:f1:7c:bd:78:7d:36:1d:13:f3:e8:a5:b9:ef:4d:f4:
08:0b:bc:d3:d9:11:08:64:6f:b3:2d:09:ff:b8:dc:b9:49:b0:
19:66:63:7b:1a:9f:24:9e:54:f1:30:f6:de:5f:e4:61:cb:d5:
0e:be:2f:46:65:1b:48:7e:21:82:8a:38:d4:72:35:e9:cf:fe:
76:03:ad:59:b0:a7:4d:3d:ff:39:0a:a1:1b:2f:c5:eb:b1:fa:
db:15:05:26:2f:ce:80:53:63:e3:a3:e2:47:b2:36:50:ea:0d:
16:68:20:85:c0:3b:01:ad:82:f3:53:62:ef:39:6e:34:95:ad:
69:4a:4e:02:e4:13:87:fb:b8:99:1f:25:eb:8c:4d:b0:02:5c:
79:0c:dc:8d:8c:27:ca:cc:fc:4f:a4:68:17:3f:4f:1a:a5:50:
1a:d6:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:43:29 2025 by rpki-client