Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214203.roa
File: AS214203.roa (raw, json)
Hash identifier: TioTqBLpsScm39+gvtFrgFlFYB5Mc3MQ3by0ioX8R80=
Subject key identifier: 98:16:8E:3E:FE:E1:E5:66:3E:FC:11:19:93:B0:49:EF:18:D1:F1:99
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 023B9CE455F93BA75E0C8B676D2482A3C002017A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214203.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 214203
IP address blocks: 2a14:7584::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:3b:9c:e4:55:f9:3b:a7:5e:0c:8b:67:6d:24:82:a3:c0:02:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=98168E3EFEE1E5663EFC111993B049EF18D1F199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:44:5f:bf:1c:7f:e8:3d:e8:bd:4a:6a:41:
97:09:be:48:59:cd:c3:de:21:1b:69:9c:44:ca:5f:
49:fb:bb:09:65:18:b4:7c:1b:df:d7:e3:b9:40:8a:
67:2e:e9:fb:a3:a2:97:fc:6b:c5:18:47:ba:87:51:
43:51:2d:e8:03:b7:5f:af:7e:0f:7f:e1:2d:99:55:
90:68:ec:25:ab:fc:f8:18:3a:58:a0:39:fc:73:b2:
34:21:26:9a:7e:72:03:03:6b:94:d5:70:c7:27:e7:
50:0e:7c:97:bc:c4:78:56:4b:b2:54:90:96:b6:0e:
9e:19:05:81:a9:84:35:b7:30:ad:a4:2a:19:67:fa:
e2:12:8f:2e:5d:82:2d:10:23:14:c1:43:8a:cd:2e:
7c:85:a1:bc:69:0e:c2:63:a4:4c:d2:c0:b9:6d:91:
f4:eb:10:85:65:7b:1d:b1:82:66:78:06:1e:e9:ff:
b3:d9:fd:54:21:cc:b8:54:b5:b0:da:d7:16:77:10:
09:c0:17:30:4d:a7:7d:51:f0:62:27:8c:a9:a6:7c:
59:eb:71:5f:af:ce:be:28:0f:71:33:66:bb:08:90:
81:50:d7:a8:c9:ab:4f:7b:d2:d9:24:d7:d8:48:9d:
a2:17:1a:25:9e:db:ad:ed:9d:9f:a8:54:cb:b8:fa:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:8E:3E:FE:E1:E5:66:3E:FC:11:19:93:B0:49:EF:18:D1:F1:99
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584::/36
Signature Algorithm: sha256WithRSAEncryption
7a:7d:f9:9a:c4:e2:51:c1:25:2e:cf:a2:e2:79:34:7a:aa:10:
e9:e9:4a:a0:29:1e:a5:c9:8a:54:ea:f9:ea:25:29:5d:9b:39:
32:9d:9c:63:0e:e9:36:0d:4d:0f:05:6d:13:7b:03:ff:2c:c7:
00:0e:bb:e9:40:08:a5:1d:70:da:61:13:b4:64:40:fe:c0:f1:
36:1a:39:3b:b4:e7:99:6a:ff:8e:a0:00:df:0c:bb:2c:ad:cf:
fd:2c:73:e2:4a:b3:4b:7b:90:83:74:18:60:9c:27:98:6d:13:
ab:01:d9:a7:54:9d:5c:f4:88:86:69:43:a5:81:aa:e3:22:76:
dd:f3:7f:df:e9:94:96:be:ad:96:cf:2f:5f:3b:8f:48:c1:21:
56:d6:b5:6e:be:8b:55:87:33:33:00:55:fa:54:37:46:23:fd:
74:cb:da:ae:e4:89:41:88:5e:01:00:fc:f1:0c:df:7a:40:39:
cd:fb:1c:9c:73:bf:ac:a5:48:2d:f5:a7:62:99:e1:e2:8d:10:
bd:85:1e:f1:57:b1:7d:11:2a:7c:85:4f:cf:78:5c:8a:d3:c2:
b3:44:b2:76:04:d9:22:09:9b:a2:b9:3e:2e:b2:f8:32:2b:22:
52:5a:98:2a:9e:ba:22:3d:57:ec:7c:2a:54:4a:ef:ed:a7:e9:
7d:42:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:53 2025 by rpki-client