Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214168.roa
File: AS214168.roa (raw, json)
Hash identifier: eSNLegaLSju1iEE1mGQ5tUXOhP1t2xei1TvUiGBwojQ=
Subject key identifier: 3F:C5:DE:5D:6F:2C:6A:1F:44:F6:8E:86:0F:71:6A:26:28:65:18:70
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2BEA84740BDBD1F353DDC7A7D564C80E0682FEFE
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214168.roa
Signing time: Tue 04 Feb 2025 00:17:07 +0000
ROA not before: Tue 04 Feb 2025 00:12:07 +0000
ROA not after: Tue 03 Feb 2026 00:17:07 +0000
asID: 214168
IP address blocks: 2a14:7581:9c00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ea:84:74:0b:db:d1:f3:53:dd:c7:a7:d5:64:c8:0e:06:82:fe:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:07 2025 GMT
Not After : Feb 3 00:17:07 2026 GMT
Subject: CN=3FC5DE5D6F2C6A1F44F68E860F716A2628651870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:c4:27:e4:ca:2c:56:f9:c7:35:25:7e:b9:
cc:a9:b6:81:d7:62:f6:03:20:e4:db:2a:09:e8:72:
29:dd:5a:93:fb:0b:0e:0b:1b:ce:8b:89:f7:c1:b6:
22:c8:44:d4:0f:af:d0:32:6d:64:cc:33:79:64:0c:
ec:6d:c6:f2:fc:17:64:a4:3c:cc:9e:e3:ca:1c:0e:
0e:b6:d9:e7:66:f3:a2:6f:48:9d:4b:20:8d:55:5b:
67:23:cf:67:36:88:07:f6:8f:a4:1b:54:16:7e:98:
51:60:06:0a:b7:45:6e:43:cc:c6:c1:82:2e:3c:ec:
09:e3:94:49:97:d8:9f:94:0b:b7:74:ba:0e:7d:e9:
83:83:57:1a:97:33:d3:f2:5a:94:ea:88:57:dd:84:
13:6f:e3:cd:f4:51:ed:6f:3d:20:17:40:ea:5e:e4:
56:75:17:78:07:d1:fb:b9:41:81:36:2f:b5:74:54:
38:da:bf:6a:55:02:53:fc:ec:9d:fc:46:48:95:49:
ca:e2:07:40:9d:20:6a:84:65:d8:a0:55:40:93:62:
2a:af:28:c5:02:10:aa:ae:cb:c6:36:27:a4:26:a1:
6e:0a:28:38:b7:af:dc:b9:0c:79:8d:b3:26:81:cc:
15:e8:f2:31:47:42:5c:6a:4b:51:2b:7c:01:eb:90:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:DE:5D:6F:2C:6A:1F:44:F6:8E:86:0F:71:6A:26:28:65:18:70
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
3b:c3:5e:d6:dc:cb:57:6e:77:0a:d5:8c:55:f6:a1:5a:43:26:
09:ed:de:92:45:a1:c6:82:6e:94:c5:19:dc:9e:54:b5:8f:8e:
74:b9:90:b2:53:74:7f:ca:5b:ac:78:96:64:41:c8:9e:d5:3a:
44:8e:1c:ea:04:0e:37:bf:7f:3a:f8:6f:4f:6e:9f:fb:41:cd:
18:01:8f:25:8c:d5:1d:66:7c:8a:e0:b1:22:9d:36:17:db:aa:
dc:a2:b2:8f:1c:f9:44:38:a8:e4:6d:d7:dc:40:7e:f8:46:92:
80:fe:d8:66:6b:ec:d9:6b:63:11:fd:4e:96:d6:66:34:42:35:
b6:ee:16:d2:9f:89:9f:75:00:71:01:0d:42:21:eb:fa:b9:ae:
00:9c:97:74:01:04:32:56:59:1b:17:c8:23:37:7d:f5:d7:79:
1a:83:b7:32:ee:d0:ef:74:a5:88:8c:6b:d7:14:f6:ea:b5:bf:
e3:83:1a:9c:2f:1a:ab:20:94:00:a0:44:8d:2f:53:72:f9:cf:
a5:4c:f8:0f:9c:40:55:7d:1d:aa:ba:d7:f7:d9:32:ba:5b:b9:
b2:a6:36:34:15:f7:03:ad:49:74:1d:13:b3:23:29:01:51:33:
9a:dd:79:56:2a:23:39:ca:6b:9e:4a:7e:43:13:d5:0b:fe:eb:
cc:c4:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:50 2025 by rpki-client