Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: fRly3kt+Li0jSvmR7ht/6CwAtjzE5XSmxal37PpJq/4=
Subject key identifier: 75:F7:91:D6:31:52:FE:D6:95:50:50:F0:E4:C7:A8:71:F7:28:F1:6E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4F0572CC34016A8C3954353312C5BF140D571A76
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa
Signing time: Fri 21 Feb 2025 05:37:27 +0000
ROA not before: Fri 21 Feb 2025 05:32:27 +0000
ROA not after: Fri 20 Feb 2026 05:37:27 +0000
asID: 212995
IP address blocks: 2a14:7580:f00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:05:72:cc:34:01:6a:8c:39:54:35:33:12:c5:bf:14:0d:57:1a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 21 05:32:27 2025 GMT
Not After : Feb 20 05:37:27 2026 GMT
Subject: CN=75F791D63152FED6955050F0E4C7A871F728F16E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:d7:29:48:89:5b:35:5d:2f:ef:81:33:a2:
58:e8:8a:8f:ef:b0:71:2c:ce:4d:f8:fe:0e:7a:c8:
86:4d:82:17:9f:c4:36:71:94:00:bb:66:ac:44:f4:
90:33:97:b2:0e:e6:48:6a:00:59:e7:db:23:f7:d5:
0d:1d:36:cc:c0:42:52:96:74:11:23:50:02:a3:f7:
44:ac:56:ff:73:b4:8d:ba:06:3f:fd:32:b0:10:0a:
bf:09:82:9d:29:d4:3b:e1:8a:4d:7c:58:20:bd:db:
9e:f1:e5:bf:1a:b0:72:77:b6:74:4a:62:1e:ec:43:
b1:ed:2b:6a:4a:a7:a3:70:5f:7f:01:4b:a8:f4:e3:
cc:85:d1:ec:8b:f7:1f:d3:17:db:c7:a6:df:f6:41:
c4:18:6b:e1:be:e7:74:2e:f2:af:63:7f:ac:ae:75:
64:ac:a6:85:f1:93:8c:c6:e2:bf:cf:bc:2a:6c:f5:
d3:5e:90:5c:4f:7d:21:71:00:5c:4c:55:44:90:d9:
c2:04:a3:fc:96:f0:19:65:57:04:dd:8d:07:fb:2c:
4a:66:84:86:e2:de:2e:32:59:04:f2:72:0f:e0:4a:
d4:6d:1f:23:fe:06:10:c7:0f:f2:30:41:a5:c5:2f:
f7:e6:d8:da:bf:6d:6e:3c:d2:cc:b1:72:d1:d3:c6:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F7:91:D6:31:52:FE:D6:95:50:50:F0:E4:C7:A8:71:F7:28:F1:6E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f00::/40
Signature Algorithm: sha256WithRSAEncryption
8f:44:b7:58:1c:29:15:e3:1e:d4:59:dc:56:b7:fd:5d:d9:6e:
e2:ca:01:be:dc:ea:5b:f5:2b:8d:f2:5f:af:d1:ec:4c:6e:88:
ed:b6:30:fd:09:20:e0:1b:2f:3b:45:76:67:5e:f1:18:b7:2f:
81:2f:a4:5f:93:fb:27:06:7c:db:9d:07:51:56:f1:85:64:e7:
3f:d1:54:77:86:a5:81:13:91:70:27:37:f4:12:a4:fb:a2:55:
80:3e:0d:ca:cf:43:df:c9:83:37:20:b2:56:1e:4f:8b:d4:69:
9b:58:99:f2:9c:c1:1e:0e:c3:f2:16:86:a3:40:b5:2c:72:85:
52:6c:b1:94:57:65:99:d7:ca:d7:a7:6c:cd:85:49:62:c5:d1:
8f:b5:df:34:36:2e:4b:d9:72:c8:eb:5a:01:85:9e:30:81:09:
b4:12:1b:2b:ff:51:d6:e6:63:87:2b:12:f4:2d:e5:9e:f9:c1:
f8:59:82:ed:ad:33:78:0c:4d:12:78:af:c2:73:9c:3e:02:b6:
f9:04:7e:bf:93:17:d1:81:02:e2:f8:99:50:e7:b0:92:b0:3e:
4a:ec:27:89:83:25:3a:53:27:1e:44:74:db:b7:57:64:1a:05:
ec:8d:76:e9:a4:13:b8:a7:e6:d3:b0:c9:5b:4c:d7:56:c2:18:
46:4c:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:44 2025 by rpki-client