Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa
File: AS212085.roa (raw, json)
Hash identifier: lGoKzm5UYf6AHOoN6V6Ku9DEGBp7RhaCjCxAye/C7p0=
Subject key identifier: 72:8B:04:39:A0:C7:5B:AD:DC:61:4D:C5:B4:E6:EE:57:26:69:55:6F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1D4D5A40F7419184FD803983F7C3A26D1CCAA0E4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa
Signing time: Tue 04 Feb 2025 00:17:07 +0000
ROA not before: Tue 04 Feb 2025 00:12:07 +0000
ROA not after: Tue 03 Feb 2026 00:17:07 +0000
asID: 212085
IP address blocks: 2a14:7581:500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4d:5a:40:f7:41:91:84:fd:80:39:83:f7:c3:a2:6d:1c:ca:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:07 2025 GMT
Not After : Feb 3 00:17:07 2026 GMT
Subject: CN=728B0439A0C75BADDC614DC5B4E6EE572669556F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:16:ca:c7:ee:2d:ad:fe:68:a0:d4:8b:a2:
ff:f1:6a:d5:49:30:ff:5c:c1:92:2b:15:e7:4f:04:
7b:24:12:b3:d2:4e:fd:60:b2:69:3a:53:c5:7a:2e:
4f:15:39:3f:f2:23:38:10:5a:02:94:53:8a:bd:1a:
f5:05:ea:d8:70:39:5f:3d:bd:dd:3e:e1:c1:1f:5c:
18:70:fd:cb:a0:dc:b1:67:bf:8c:9d:1a:44:23:47:
b1:7c:cd:7b:5d:38:b9:93:08:a5:e3:61:9f:ed:97:
c1:45:7b:da:36:19:f8:bb:a4:f1:40:b8:65:bd:88:
12:bf:80:65:6c:74:8d:07:50:d9:e3:d9:14:e8:58:
80:95:5a:ae:cc:a9:a4:67:fb:39:26:7e:da:84:64:
8e:4d:a2:4e:7e:6f:c0:0c:67:c5:fa:a3:19:8e:5f:
f5:a5:92:1d:77:4d:ed:d6:57:ca:9a:e6:c7:7c:fb:
f1:75:72:49:49:db:90:af:fb:12:b5:73:1c:f6:57:
53:5b:d1:da:8b:ec:7d:a9:c8:15:df:a2:4b:dd:aa:
3c:e9:97:83:7c:3f:c7:c3:88:9a:79:c3:f9:9b:d9:
31:27:74:1c:bf:55:eb:05:52:74:97:eb:9a:bb:18:
61:bf:ce:43:98:ec:2c:ba:f5:bc:4c:a4:34:05:3d:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:04:39:A0:C7:5B:AD:DC:61:4D:C5:B4:E6:EE:57:26:69:55:6F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:500::/40
Signature Algorithm: sha256WithRSAEncryption
20:62:ca:27:0c:bd:f9:00:f8:b7:4a:08:f8:5e:48:ca:44:8a:
fa:ce:37:6b:a1:6a:b6:92:42:c2:ad:b3:34:b5:06:7c:d4:e1:
d9:ff:fa:a0:00:31:bc:06:31:2e:ad:ef:b2:8a:fe:6a:8c:ef:
db:ad:f1:50:14:25:ac:2a:37:e1:08:f6:d5:37:ef:f6:25:a8:
d5:87:5f:4b:0e:80:e9:62:89:ad:63:c0:cb:5e:a1:de:97:4b:
8b:99:30:5e:c4:a4:95:51:82:be:50:d0:e5:06:0a:59:76:d5:
57:b8:f5:b0:bf:40:9d:d4:fd:98:4d:69:a2:4b:59:43:c9:0c:
36:06:01:79:27:2b:ca:49:00:0b:62:16:68:4b:84:ab:9c:3c:
6c:cb:33:21:bd:2d:7c:6c:e7:b0:a6:01:e3:5e:e5:7d:f6:da:
7b:f4:22:bb:b0:35:b3:45:70:a7:60:a7:d6:2a:2a:4c:cf:d1:
92:b8:d8:56:c1:a3:75:d2:fa:8d:4d:bf:73:47:14:34:74:81:
59:24:f4:4e:a2:67:7b:4d:56:18:f5:6a:81:7d:61:05:ad:33:
72:50:48:3b:ac:34:62:b9:22:80:8f:3b:5c:1d:0a:f0:b7:28:
c1:5d:4a:22:25:43:1b:ba:17:15:49:7a:87:b8:63:e5:c9:eb:
64:87:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:00 2025 by rpki-client