Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216155.roa
File: AS216155.roa (raw, json)
Hash identifier: 9KCt6n/rpOHqWpkQ+EvChOngIhD6ibD5FRPc/Sr3BhE=
Subject key identifier: 15:93:A9:01:0A:E0:CC:53:02:D7:AB:76:81:F8:F1:75:DF:59:AE:F0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 665AD9C20962ECA60C800D8F8CD86398AA08B251
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216155.roa
Signing time: Sat 18 Jan 2025 22:08:58 +0000
ROA not before: Sat 18 Jan 2025 22:03:58 +0000
ROA not after: Sat 17 Jan 2026 22:08:58 +0000
asID: 216155
IP address blocks: 2a0f:85c1:b60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5a:d9:c2:09:62:ec:a6:0c:80:0d:8f:8c:d8:63:98:aa:08:b2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 18 22:03:58 2025 GMT
Not After : Jan 17 22:08:58 2026 GMT
Subject: CN=1593A9010AE0CC5302D7AB7681F8F175DF59AEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:5c:d9:71:09:99:0e:5e:b6:51:f9:8d:dd:
b2:62:8d:47:2c:c4:22:ff:d6:a0:81:3e:24:af:6a:
a8:ce:5b:0b:b4:cb:81:a8:3d:6b:b2:f9:3c:8e:38:
d3:a5:73:23:7e:8c:0c:ab:92:02:11:59:03:7e:0b:
56:5b:d0:06:b5:0f:df:30:d4:d6:6b:a5:4a:20:a8:
d0:a5:70:9c:10:c8:52:72:f9:51:dd:10:79:23:d9:
cb:f5:da:9d:d0:33:9e:85:7c:5f:82:2d:e6:90:9f:
4f:38:5f:dd:0f:7e:a2:d9:32:3e:49:7d:c0:5f:3f:
f6:db:20:8f:43:f8:f1:dd:1e:71:bd:41:56:5f:cb:
ab:be:43:a7:ed:a3:33:a3:cd:e5:4a:de:39:8c:0e:
b9:58:a2:09:bf:9e:fa:ec:65:ef:5d:a3:6d:08:b6:
fd:a2:f4:45:d1:da:38:bc:39:19:12:3f:18:ce:b0:
1f:7f:a4:21:ab:a8:6b:98:21:4f:64:ae:cc:69:0f:
38:56:84:dd:5a:6f:cb:82:d2:df:0c:fd:c1:89:28:
86:83:5e:8f:e6:2d:7e:f9:7b:e1:89:cf:38:b5:e0:
2b:a0:52:bf:7f:70:65:f1:e7:d7:83:c3:a1:7f:4d:
fe:a5:10:d0:67:56:6c:4d:98:2c:13:f8:20:22:76:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:A9:01:0A:E0:CC:53:02:D7:AB:76:81:F8:F1:75:DF:59:AE:F0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b60::/44
Signature Algorithm: sha256WithRSAEncryption
d0:57:e0:08:07:77:6a:8d:ee:56:04:71:26:5f:9c:78:a3:4a:
49:49:45:1a:16:74:78:22:a3:87:68:0f:e0:e5:1d:90:ff:01:
09:5a:79:b3:88:99:1f:b8:5d:8c:0a:2d:a9:3e:79:99:0c:30:
25:0d:5d:2f:1c:c1:ae:21:79:9c:d7:72:3c:82:b4:35:a3:40:
61:58:2d:38:97:d2:c6:37:be:7d:62:85:c9:0c:d2:75:74:e7:
6b:2e:94:4a:a2:6b:07:9c:f1:d1:e2:f5:a7:23:e9:05:48:0e:
89:71:23:18:11:a6:cd:88:18:06:94:bc:be:04:5b:47:c3:56:
06:dd:f6:8f:26:e0:22:21:97:bd:c6:a8:d7:34:60:f5:2f:ec:
9c:23:26:92:e5:7e:44:fd:92:8c:f9:50:d9:01:23:bc:2e:c5:
d9:93:25:c9:50:c8:d3:c8:d0:df:6e:72:fe:63:f7:f8:26:3e:
a3:b0:76:57:8f:7a:1f:98:32:a1:71:50:0e:35:6f:f7:32:fc:
0e:f2:c7:2d:b4:fe:4b:e2:3f:d2:b4:0e:bb:48:d9:33:92:c4:
c4:b9:c8:53:4c:79:aa:0d:88:7c:d6:df:29:df:02:16:48:3f:
81:a5:ee:05:b4:2a:37:ad:f9:dc:15:c9:7a:e4:d5:ce:89:9d:
1d:6d:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:38 2025 by rpki-client