Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa
File: AS216099.roa (raw, json)
Hash identifier: OYfYYBy15wARYFYWYnouWa+aAfGZAEJyHCuvJntaxSk=
Subject key identifier: 9B:BC:25:9A:06:BD:DA:76:92:95:68:BD:B3:36:80:4F:2A:BE:D1:5B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2485EEFF021127181F5E13C2431D0D4B90F094AB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa
Signing time: Tue 11 Feb 2025 03:42:13 +0000
ROA not before: Tue 11 Feb 2025 03:37:13 +0000
ROA not after: Tue 10 Feb 2026 03:42:13 +0000
asID: 216099
IP address blocks: 2a0f:85c1:b3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:85:ee:ff:02:11:27:18:1f:5e:13:c2:43:1d:0d:4b:90:f0:94:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 11 03:37:13 2025 GMT
Not After : Feb 10 03:42:13 2026 GMT
Subject: CN=9BBC259A06BDDA76929568BDB336804F2ABED15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:0e:c5:fb:e2:a6:cb:39:a4:e1:2b:a8:21:
ad:84:cb:66:5f:6b:d3:7e:4f:b9:7b:4b:a9:8a:89:
6b:90:31:48:76:18:d1:77:ec:b3:37:2f:b7:19:7b:
48:ac:56:86:dc:9c:ea:b9:2a:e4:98:bd:84:6f:ea:
39:e2:c5:92:b6:ea:0a:9e:4f:c8:f6:f6:b1:02:65:
0c:b8:98:e4:15:4b:24:8d:2c:2b:75:66:d5:47:76:
fb:71:81:dc:3b:6b:9c:2a:77:bf:e6:ca:49:5f:a8:
2c:89:8a:ae:b1:da:73:d5:ac:92:ae:8f:0b:1e:19:
27:50:38:42:49:ca:b4:64:05:2d:42:9a:96:d7:d9:
f6:42:f5:2b:cd:92:0e:68:b6:2b:80:a3:29:53:87:
d5:7b:cf:57:3e:e6:ad:cb:2e:1e:97:60:ab:0f:b0:
a6:5d:bd:9e:0c:53:49:ca:64:0c:6d:8e:64:be:43:
7e:a0:d2:c3:1a:b3:c3:4e:a0:f5:dd:cd:f4:f8:a9:
e6:14:09:c3:fd:10:fe:11:b7:b3:f4:18:b6:c6:c2:
ec:0f:38:ff:52:87:c4:77:ee:88:86:f8:8e:57:5b:
37:32:df:4f:00:53:e5:fa:6d:db:98:14:61:c9:2a:
35:bc:d9:22:d0:bf:6f:68:07:f7:49:e7:14:7a:38:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:25:9A:06:BD:DA:76:92:95:68:BD:B3:36:80:4F:2A:BE:D1:5B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b3c::/48
Signature Algorithm: sha256WithRSAEncryption
88:e7:c6:39:2e:59:b0:a9:0f:50:1e:8d:88:d4:5d:7b:38:68:
39:a7:fc:11:fd:bb:f2:e9:5f:29:83:bb:e7:60:a9:8d:ce:d7:
a2:91:b8:d5:b6:ad:54:03:05:db:7a:8d:38:1f:f1:17:b8:d9:
59:80:af:b8:a9:c0:34:18:23:d5:bc:ba:dc:09:a8:17:16:8d:
af:fd:e0:a0:9f:50:9d:7d:15:60:f1:56:18:aa:b1:dc:46:71:
35:aa:48:3c:1a:a1:90:fb:2f:dc:d9:af:4c:53:d3:60:70:c6:
52:b4:21:aa:d3:fc:61:0a:5a:9e:66:bf:e0:a2:65:5f:de:70:
ec:8c:88:64:db:74:a5:21:9e:9d:d2:b9:9c:9d:04:9f:b8:78:
30:89:ad:52:2b:bb:3b:b5:c4:c4:0c:66:ef:73:ed:8f:8b:d0:
dd:4e:e1:60:32:61:17:af:cc:11:2b:5f:2e:fe:d7:70:6e:22:
ae:cc:1c:9d:16:6c:26:06:31:85:27:05:44:c0:17:3f:85:7a:
bf:30:b1:6d:8c:fd:18:85:99:e9:b1:48:e3:1b:4c:80:3a:f2:
1f:78:78:50:3e:06:d8:25:a8:3c:0d:50:a3:b9:cc:e9:2d:b1:
ee:92:6f:e7:8c:1f:a9:26:04:29:9b:99:84:b1:27:02:c3:84:
51:92:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:34 2025 by rpki-client