Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213409.roa
File: AS213409.roa (raw, json)
Hash identifier: 9SK1EixxE3luegDl9ihkPIXQZFpX0/x77NLZ8/I4bos=
Subject key identifier: D3:31:73:79:FE:06:41:55:79:4B:D3:F5:C0:84:12:B4:48:E7:E8:8B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7497FED8B186E70778CCE61A000E22216F12FA03
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213409.roa
Signing time: Mon 17 Feb 2025 02:12:56 +0000
ROA not before: Mon 17 Feb 2025 02:07:56 +0000
ROA not after: Mon 16 Feb 2026 02:12:56 +0000
asID: 213409
IP address blocks: 2a14:7580:ef00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:97:fe:d8:b1:86:e7:07:78:cc:e6:1a:00:0e:22:21:6f:12:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 17 02:07:56 2025 GMT
Not After : Feb 16 02:12:56 2026 GMT
Subject: CN=D3317379FE064155794BD3F5C08412B448E7E88B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:61:a4:52:80:e0:0f:b0:6b:c5:57:e3:90:
a0:5d:e3:9f:2c:2d:68:d5:4f:76:43:60:30:1a:64:
03:70:b4:a9:a9:ff:c3:9d:0e:dd:af:a1:72:fd:e3:
48:d7:ed:a2:9d:c5:20:fb:01:35:22:8a:15:1d:a3:
1b:4a:18:aa:b8:dc:21:0a:23:27:90:f3:12:5e:72:
7e:b7:22:98:cd:13:e4:bc:e5:f5:85:48:99:87:81:
48:5c:e8:a1:e3:ef:89:9e:01:cd:ed:ee:cc:9d:d5:
cf:af:e7:2e:4f:3c:07:d3:1f:17:ea:10:dc:3e:9c:
87:80:17:35:d4:9e:37:85:9a:97:49:bb:1e:b6:e1:
b7:75:16:a0:4c:eb:7c:e6:5b:5c:31:f6:2e:04:e0:
ae:4c:38:b5:62:d7:7d:16:15:31:fe:f5:5f:1c:d9:
f4:ad:b7:6e:d2:bc:3e:9f:ad:30:1d:48:08:cf:30:
c7:34:67:e5:28:40:06:1a:02:30:cb:c6:dc:8f:7d:
a9:a7:c1:c2:ee:06:a0:53:8c:43:f1:c7:19:0d:e9:
00:ed:c0:29:e3:3f:f8:6e:39:e1:f0:ca:e4:6c:1e:
42:0a:4f:63:07:6d:8b:25:b8:da:ae:71:d3:cd:b9:
03:7b:bf:08:0d:14:58:bc:29:cd:1e:a8:b7:be:7d:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:31:73:79:FE:06:41:55:79:4B:D3:F5:C0:84:12:B4:48:E7:E8:8B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ef00::/40
Signature Algorithm: sha256WithRSAEncryption
38:b0:11:36:3a:ec:3f:19:40:f4:6b:2f:f7:35:e9:a3:9d:5d:
75:63:5f:29:95:75:33:31:fd:41:88:da:07:c1:b3:52:9c:fd:
54:5d:32:53:79:2e:fb:11:10:0c:5c:28:e3:fe:9a:96:4c:63:
0c:2e:a1:2f:70:db:84:ef:7e:be:d4:01:a5:29:18:53:a2:9e:
6b:27:e6:87:fd:e5:13:2b:47:49:6a:b9:72:0c:78:c4:31:39:
31:d6:6a:59:55:3b:11:7e:f3:42:75:5b:bd:e5:1b:78:dc:57:
6c:2b:59:4f:f3:69:43:e1:6e:67:17:a0:6c:23:c7:8a:ea:9e:
91:b1:91:ac:16:53:b0:ec:29:13:af:34:a7:85:bb:7b:21:4e:
10:0f:f9:36:fd:d6:3d:b1:ab:7d:04:a2:a7:34:04:21:fb:37:
74:da:92:11:05:df:74:4d:90:fb:b0:23:99:d7:ab:5f:b7:b7:
e2:1d:ed:73:d1:89:9b:cc:6c:73:b8:87:cb:45:55:6d:09:dd:
1e:aa:ff:a4:fa:2e:40:d0:18:db:6d:5e:82:ad:6f:62:dc:b8:
50:ff:e7:13:13:77:5e:62:ea:98:ce:35:ac:6a:ca:3d:85:3a:
97:f7:b3:e6:62:f8:c6:6d:1a:7f:ec:44:a8:db:5f:39:31:98:
3e:5b:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:51 2025 by rpki-client