Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa
File: AS207314.roa (raw, json)
Hash identifier: 1iv1/LhCeYsJzs6G6dqZcysWS+5+aGOPOA0XlqSFzYA=
Subject key identifier: 32:CA:25:3B:43:1C:04:98:5F:9A:2D:49:70:94:81:DB:19:6E:F5:6F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0D330CDE0D1F49CCEAB6861F376B7668F180D2F1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa
Signing time: Tue 04 Feb 2025 00:17:10 +0000
ROA not before: Tue 04 Feb 2025 00:12:10 +0000
ROA not after: Tue 03 Feb 2026 00:17:10 +0000
asID: 207314
IP address blocks: 2a14:7581:9500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:33:0c:de:0d:1f:49:cc:ea:b6:86:1f:37:6b:76:68:f1:80:d2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:10 2025 GMT
Not After : Feb 3 00:17:10 2026 GMT
Subject: CN=32CA253B431C04985F9A2D49709481DB196EF56F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:14:52:c5:76:28:0a:f2:01:0d:ef:27:70:
ec:4c:b9:e8:1a:cf:72:75:a6:23:12:a1:f1:ec:1c:
91:61:4b:46:6f:f4:e4:a8:77:2a:04:82:d6:fb:3f:
df:cb:74:2a:b5:ac:05:33:20:9c:34:fa:c6:2a:ba:
41:c5:51:54:aa:88:3d:a1:ae:94:d0:5d:c6:78:71:
0b:60:de:3a:88:35:05:61:1e:0f:7b:f9:64:e7:92:
52:0e:84:ee:b3:24:f0:5c:a1:d7:23:6d:29:17:e8:
96:6a:03:09:ab:1c:cd:e3:b5:2c:f8:e9:5b:d6:07:
b5:0e:f2:13:2d:3b:07:ba:8a:eb:39:12:04:f9:a1:
a2:e9:8d:ad:dd:a4:71:3f:25:82:99:cb:59:85:37:
40:93:0a:38:b4:18:dc:47:01:ff:f2:e9:e0:fd:95:
c3:56:18:f9:b5:88:36:b6:3f:ae:f0:4a:dd:a8:99:
19:b6:1b:a9:79:a0:6d:f5:a8:32:2f:c2:05:80:cb:
1e:cc:af:5d:6e:0b:5a:7b:eb:a5:9e:f2:ff:35:57:
de:91:cc:ea:99:95:ce:fc:df:b0:c3:b1:f1:2d:0f:
8d:ea:59:e7:ef:c6:3f:3a:1b:4c:aa:d8:53:6b:37:
16:0c:00:44:70:ab:63:e7:5e:ce:f7:e2:bf:57:54:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:25:3B:43:1C:04:98:5F:9A:2D:49:70:94:81:DB:19:6E:F5:6F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9500::/40
Signature Algorithm: sha256WithRSAEncryption
3e:84:47:c8:ed:22:bb:74:a8:23:38:57:39:8f:3a:25:63:2a:
40:95:60:87:f1:3b:a9:f4:1e:de:53:cc:04:2a:5b:ef:05:33:
e6:c3:bc:48:43:87:26:12:dc:52:96:82:a8:0c:bb:91:b3:9c:
ae:c2:ab:03:90:aa:ca:26:8c:2e:57:b5:f1:c5:7c:c2:c9:69:
ba:99:c7:9b:c6:d8:8a:4c:76:43:aa:fa:7e:c2:3e:31:c5:f0:
ff:4d:34:12:85:7c:36:8b:8f:15:f0:2d:ae:f9:1b:ff:d9:9d:
cb:86:5f:96:6d:e8:fe:38:92:bf:cf:96:47:5f:4a:f9:28:21:
2d:fc:14:90:60:c9:a2:98:66:30:ca:46:6b:ba:e9:0e:88:08:
58:c8:a8:8c:48:8f:eb:11:37:7a:28:cd:41:ea:c9:27:2b:e4:
e3:61:d4:77:fb:21:c3:3b:f2:16:5d:41:bb:95:36:fe:48:cd:
06:a9:b2:b3:4d:73:0f:df:83:0c:48:c0:93:65:6d:4e:31:e3:
fb:71:05:77:39:14:d4:ca:e7:2d:16:4e:21:29:d9:c8:0a:89:
ff:10:e2:ed:92:f7:77:66:29:64:f6:af:ef:97:7a:34:7c:d9:
c9:a2:0e:97:63:e0:72:d6:54:29:6f:a7:86:b6:f5:3a:f8:1c:
db:14:5b:1e
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUDTMM3g0fSczqtoYfN2t2aPGA0vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMTBaFw0yNjAyMDMwMDE3MTBaMDMxMTAvBgNV
BAMTKDMyQ0EyNTNCNDMxQzA0OTg1RjlBMkQ0OTcwOTQ4MURCMTk2RUY1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFxRSxXYoCvIBDe8ncOxMuega
z3J1piMSofHsHJFhS0Zv9OSodyoEgtb7P9/LdCq1rAUzIJw0+sYqukHFUVSqiD2h
rpTQXcZ4cQtg3jqINQVhHg97+WTnklIOhO6zJPBcodcjbSkX6JZqAwmrHM3jtSz4
6VvWB7UO8hMtOwe6ius5EgT5oaLpja3dpHE/JYKZy1mFN0CTCji0GNxHAf/y6eD9
lcNWGPm1iDa2P67wSt2omRm2G6l5oG31qDIvwgWAyx7Mr11uC1p766We8v81V96R
zOqZlc7837DDsfEtD43qWefvxj86G0yq2FNrNxYMAERwq2PnXs734r9XVJxJAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUMsolO0McBJhfmi1JcJSB2xlu9W8wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA3MzE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1
gZUwDQYJKoZIhvcNAQELBQADggEBAD6ER8jtIrt0qCM4VzmPOiVjKkCVYIfxO6n0
Ht5TzAQqW+8FM+bDvEhDhyYS3FKWgqgMu5GznK7CqwOQqsomjC5XtfHFfMLJabqZ
x5vG2IpMdkOq+n7CPjHF8P9NNBKFfDaLjxXwLa75G//ZncuGX5Zt6P44kr/Plkdf
SvkoIS38FJBgyaKYZjDKRmu66Q6ICFjIqIxIj+sRN3oozUHqyScr5ONh1Hf7IcM7
8hZdQbuVNv5IzQapsrNNcw/fgwxIwJNlbU4x4/txBXc5FNTK5y0WTiEp2cgKif8Q
4u2S93dmKWT2r++XejR82cmiDpdj4HLWVClvp4a29Tr4HNsUWx4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:19 2025 by rpki-client