Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa
File: AS199183.roa (raw, json)
Hash identifier: PkLe7usxZUKST6Z8epQCf94t3cGo8UoI6IFFsheaUZU=
Subject key identifier: 5E:CC:17:09:62:BA:1D:87:75:CE:8C:E9:BF:5A:2C:E3:1D:75:20:85
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 74EDBCC444D8D77C4BDA2A69F53822B76F1C3C0D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 199183
IP address blocks: 2a14:7581:9f50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ed:bc:c4:44:d8:d7:7c:4b:da:2a:69:f5:38:22:b7:6f:1c:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=5ECC170962BA1D8775CE8CE9BF5A2CE31D752085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:21:f2:49:1c:ec:ef:aa:e7:d6:17:d6:80:
8f:1d:05:8e:81:d0:bb:1a:5d:26:3a:db:a6:cb:8e:
a2:dc:ca:3b:bf:f4:ea:27:29:31:8c:3c:04:8c:d4:
01:cd:e0:17:f2:f8:26:e6:1d:c7:ba:99:ff:cd:68:
e9:b0:aa:f3:fd:14:a6:4b:b1:7b:52:b5:c5:41:c9:
29:d5:35:51:a8:7f:f6:d0:49:42:25:d0:78:4d:75:
6b:5c:ce:fe:14:1c:44:38:ae:99:f6:3f:0a:84:2a:
61:d3:76:dd:ce:d9:09:4d:a1:21:ea:c3:d3:21:e5:
64:7a:f0:55:8a:54:bc:04:ca:6b:50:05:36:d6:4d:
cc:83:a6:3f:29:a7:7c:22:e7:7f:42:b6:97:c1:8e:
a9:de:af:52:a7:f4:0a:b1:73:d8:be:e1:03:68:c5:
c4:24:cf:2f:b7:6a:fd:2a:38:8d:9b:30:b6:70:66:
55:57:8d:c4:3d:1a:9d:7f:ef:ec:f8:ab:93:fa:b1:
01:95:33:84:d9:e0:8b:9b:eb:2a:63:3c:a9:21:41:
c3:dc:09:7e:12:09:db:98:c8:07:2d:97:48:4e:82:
16:6e:dc:7f:15:f6:1e:b1:c8:ac:0d:07:8d:dd:93:
ab:c6:1c:92:ab:cb:42:5d:12:c8:ba:92:98:53:98:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:17:09:62:BA:1D:87:75:CE:8C:E9:BF:5A:2C:E3:1D:75:20:85
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f50::/44
Signature Algorithm: sha256WithRSAEncryption
9f:a1:fa:96:ba:99:98:a5:6a:96:a9:db:5d:dc:e9:09:4b:e6:
b1:a7:11:b3:b3:81:9d:eb:14:85:e0:30:92:83:7b:8a:84:40:
16:01:ac:aa:80:62:1a:63:ac:57:cb:44:de:c2:6e:9a:65:21:
bc:63:ac:57:d7:9f:6a:aa:00:77:3d:3f:c1:65:86:12:02:b7:
c7:29:66:f5:a9:42:41:12:4f:d5:36:e4:14:f8:9d:cc:43:4a:
f7:d6:de:5d:b1:55:fe:41:07:16:cf:80:79:c0:e7:8d:da:f0:
cf:87:54:d7:49:e8:dd:10:6f:c2:04:80:22:5f:59:25:53:bf:
ba:a4:7f:d5:ff:97:cc:29:b8:a6:02:61:98:f6:0b:46:aa:b8:
4e:ab:6c:0b:5a:d3:6e:73:45:ea:93:d4:3f:73:76:ae:c5:2c:
17:e2:f9:97:c8:ee:fa:e1:d8:77:c8:c9:16:85:7e:9b:5f:5d:
22:7d:35:63:d3:64:aa:d8:72:f6:a4:79:82:4c:16:f3:ec:7f:
c4:c4:18:e1:a1:9b:a7:44:66:7b:e8:a6:9e:65:78:1e:60:18:
7f:d0:62:8c:fc:00:ee:20:d9:22:de:c7:d4:df:25:7e:7e:b7:
91:85:62:d4:57:6f:f2:fb:84:d5:7d:75:3c:c8:f9:b6:99:17:
97:1a:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:48 2025 by rpki-client