Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199310.roa
File: AS199310.roa (raw, json)
Hash identifier: /52FHMv26moLKIYiGW5zhK2Pqf3wql0mCvU7JwBIPq0=
Subject key identifier: 13:CB:B0:9C:9D:EA:91:99:0B:8E:34:B3:4B:F5:26:37:3B:F1:8A:0A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 52DE829941FE4CC1DB39E02F19EFB8B025F2FEC8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199310.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 199310
IP address blocks: 2a14:7581:f60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:de:82:99:41:fe:4c:c1:db:39:e0:2f:19:ef:b8:b0:25:f2:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=13CBB09C9DEA91990B8E34B34BF526373BF18A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:db:7e:dd:3e:c7:fd:b8:e7:cc:31:ed:ae:b7:
50:de:e2:01:a5:dd:90:08:ee:c2:b8:5a:86:45:78:
eb:9e:7e:94:9b:b3:8a:da:03:1d:b9:60:3a:41:81:
f9:31:af:10:ac:68:a1:e3:ed:00:62:88:0b:9d:9f:
72:7b:24:5b:a5:93:9a:e0:8e:6c:51:82:ce:a8:d9:
d2:1b:7c:4e:24:d0:b2:8a:5c:71:4d:c3:d1:3f:59:
f3:bb:b1:09:df:c3:72:98:88:e3:e4:8b:d8:60:ac:
67:cc:b2:9c:e7:58:18:69:8f:50:8a:3e:27:df:e7:
0e:10:75:05:ae:5e:df:df:27:df:24:f1:6a:9a:70:
4c:62:da:4a:03:46:b4:2b:67:94:2e:91:a8:a9:54:
94:b8:93:a2:fa:1c:44:e6:7c:ec:5e:b7:de:4c:54:
ff:68:a6:97:88:1d:39:b5:89:28:e3:85:5c:f7:f2:
76:35:9c:c4:b7:77:84:5d:d7:4e:85:ae:e4:41:96:
7a:15:73:66:63:13:42:14:95:f1:b9:2f:39:76:2c:
10:ff:24:9f:88:3e:7c:a5:9f:58:18:00:93:42:86:
a5:39:46:d4:db:f8:78:54:78:a1:2b:e9:9f:f1:58:
f0:95:61:e6:0e:c8:4e:b8:16:09:b3:b6:9e:75:13:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:B0:9C:9D:EA:91:99:0B:8E:34:B3:4B:F5:26:37:3B:F1:8A:0A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS199310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f60::/44
Signature Algorithm: sha256WithRSAEncryption
34:3f:f8:8d:63:62:8f:5b:dd:65:d0:d5:5b:71:5a:41:a9:3c:
43:d3:83:fb:96:f6:39:bb:c7:99:b4:2f:e3:fa:56:1b:b2:ad:
c1:a7:b7:7f:03:07:93:fc:35:1f:6d:96:88:7f:63:f3:43:84:
75:02:6a:73:73:5a:a4:31:9a:d6:8c:bc:a1:f3:70:47:75:e6:
06:c3:b3:7d:0d:0e:c0:b0:5f:a7:4d:3f:fc:71:c6:45:36:e9:
34:9a:b5:dc:66:42:48:57:bf:e7:8d:95:d1:55:32:9b:fd:f1:
22:70:6a:f4:98:e9:7f:7f:16:84:9a:32:48:e8:48:df:44:09:
a5:66:36:7c:45:03:e9:1c:74:77:6e:f5:d8:9d:73:ca:53:68:
9f:60:2e:81:27:f5:6f:bb:aa:e7:1b:9d:d0:97:e2:51:4e:f2:
50:02:69:53:17:c8:d8:90:63:52:d5:c7:79:2f:3f:69:d2:d4:
3a:7d:95:56:1c:77:fe:60:85:45:75:e5:34:6b:d1:a5:b7:1a:
b6:f1:86:90:27:39:23:11:9e:48:8e:09:26:02:6c:3f:c5:94:
2e:c4:4f:7d:e5:6a:ea:aa:63:86:1c:a0:d8:28:e5:52:bd:5b:
13:c3:a1:91:54:3b:db:c9:ef:f8:dc:3e:27:6b:71:07:f4:7d:
b6:f7:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:00:04 2025 by rpki-client