Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208958.roa
File: AS208958.roa (raw, json)
Hash identifier: vcfGwfeRXoT+++aLQLdbXk+q0x68gPvd7AGHV4qZu8U=
Subject key identifier: FA:A4:F2:7F:94:69:A1:8D:AD:24:92:8E:5F:20:68:FC:79:88:01:4D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 685C30995CA1E4E31CA314F022C17D02E79A197D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208958.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 208958
IP address blocks: 2a14:7580:ff00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5c:30:99:5c:a1:e4:e3:1c:a3:14:f0:22:c1:7d:02:e7:9a:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=FAA4F27F9469A18DAD24928E5F2068FC7988014D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:6e:c8:ee:4c:6d:a0:ff:b2:d2:3d:27:71:
cf:6c:aa:c8:e9:98:6c:ff:39:a6:f5:de:d1:48:a1:
64:53:57:de:15:0e:5f:43:53:d8:eb:b8:62:24:b1:
d0:d8:fb:44:69:84:77:01:31:17:cd:b6:b5:1b:30:
33:56:c6:ba:0c:97:b5:1f:fb:c2:ce:85:3a:d6:8e:
2b:e0:59:d9:26:22:53:1f:88:c6:37:95:6f:8a:06:
8a:37:f0:c0:d9:8f:67:12:7c:fe:b9:ee:c5:b0:bd:
4b:36:89:a7:c2:8f:4f:bb:29:2b:82:d4:91:c0:46:
a4:63:ea:7a:4a:56:61:b7:9b:15:82:7e:4f:e4:dc:
5f:48:c8:63:72:e4:4e:53:5a:63:e3:8d:64:f6:ae:
81:66:31:ff:c1:8d:4e:ea:96:30:72:e9:c3:63:5e:
db:02:c9:23:75:7e:f7:01:83:e9:de:43:9c:56:f1:
7b:14:5e:a4:19:f6:d8:d3:68:e7:35:5e:8d:cc:21:
8d:23:70:70:03:22:6a:37:c3:d0:ad:9f:f7:fd:d4:
67:27:5a:54:fc:d4:88:7c:eb:54:66:e5:20:63:48:
0f:18:91:f0:a0:4a:d4:31:a5:2f:89:01:95:2e:80:
4a:36:ac:b7:d9:82:cf:d9:ba:d3:ac:0b:5f:d4:02:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:F2:7F:94:69:A1:8D:AD:24:92:8E:5F:20:68:FC:79:88:01:4D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS208958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
74:ea:95:f5:8b:14:c9:75:9b:89:62:be:e0:1c:63:17:90:9c:
6b:c3:fe:df:44:c4:6e:dd:7c:47:ad:91:77:38:4f:0a:14:aa:
0c:10:54:43:d4:c9:69:26:39:ce:29:16:0f:93:5f:49:82:7c:
f8:43:c6:7a:ae:30:8b:0b:de:0e:4e:a6:81:e1:ec:47:8e:36:
c1:76:66:35:3a:a4:34:03:eb:5d:9c:39:4b:51:84:90:6f:35:
82:5c:7b:f4:48:95:6e:3d:e9:91:c1:93:9a:6e:21:23:aa:35:
8b:31:da:f2:73:7f:a7:0e:c3:f5:b3:a4:c2:0f:d2:2d:de:6a:
0e:4e:8d:ee:4d:bc:f4:4c:a8:d6:22:65:e5:4f:33:e7:34:68:
38:c6:10:96:b2:e0:c4:7b:71:85:fc:8f:ec:ac:19:65:7c:c6:
0f:78:3b:58:14:7d:54:b6:4e:e9:ff:9d:4b:8f:5c:1a:a8:fd:
75:84:f1:e2:f5:14:31:53:22:83:9a:11:ff:a0:cf:ad:0d:a0:
99:d3:a4:98:e1:d5:97:25:8c:14:49:92:e3:74:78:4f:3f:e4:
c8:7f:a4:26:88:e4:75:bb:63:51:b8:21:db:12:3a:1c:3b:74:
b9:cc:76:0a:93:df:79:82:3f:89:1a:cf:63:1e:2b:74:52:5b:
12:06:be:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUaFwwmVyh5OMcoxTwIsF9AueaGX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMDhaFw0yNjAyMDMwMDE3MDhaMDMxMTAvBgNV
BAMTKEZBQTRGMjdGOTQ2OUExOERBRDI0OTI4RTVGMjA2OEZDNzk4ODAxNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCG7I7kxtoP+y0j0ncc9sqsjp
mGz/Oab13tFIoWRTV94VDl9DU9jruGIksdDY+0RphHcBMRfNtrUbMDNWxroMl7Uf
+8LOhTrWjivgWdkmIlMfiMY3lW+KBoo38MDZj2cSfP657sWwvUs2iafCj0+7KSuC
1JHARqRj6npKVmG3mxWCfk/k3F9IyGNy5E5TWmPjjWT2roFmMf/BjU7qljBy6cNj
XtsCySN1fvcBg+neQ5xW8XsUXqQZ9tjTaOc1Xo3MIY0jcHADImo3w9Ctn/f91Gcn
WlT81Ih861Rm5SBjSA8YkfCgStQxpS+JAZUugEo2rLfZgs/ZutOsC1/UAhXZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU+qTyf5RpoY2tJJKOXyBo/HmIAU0wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA4OTU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1
gP8AMA0GCSqGSIb3DQEBCwUAA4IBAQB06pX1ixTJdZuJYr7gHGMXkJxrw/7fRMRu
3XxHrZF3OE8KFKoMEFRD1MlpJjnOKRYPk19Jgnz4Q8Z6rjCLC94OTqaB4exHjjbB
dmY1OqQ0A+tdnDlLUYSQbzWCXHv0SJVuPemRwZOabiEjqjWLMdryc3+nDsP1s6TC
D9It3moOTo3uTbz0TKjWImXlTzPnNGg4xhCWsuDEe3GF/I/srBllfMYPeDtYFH1U
tk7p/51Lj1waqP11hPHi9RQxUyKDmhH/oM+tDaCZ06SY4dWXJYwUSZLjdHhPP+TI
f6QmiOR1u2NRuCHbEjocO3S5zHYKk995gj+JGs9jHit0UlsSBr4v
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:31 2025 by rpki-client