Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa
File: AS214660.roa (raw, json)
Hash identifier: F1yX6a+hovB0nkrWLsg3F+qjHhku/gV17APrHsZC94w=
Subject key identifier: 7F:17:C7:67:50:E8:5B:0E:42:75:27:D3:A4:A3:11:06:BF:51:78:E3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3792458524787C1D7C3BBB4A9AC1597789A5BE77
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 214660
IP address blocks: 2a14:7580:d000::/36 maxlen: 48
2a14:7580:fe00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:92:45:85:24:78:7c:1d:7c:3b:bb:4a:9a:c1:59:77:89:a5:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=7F17C76750E85B0E427527D3A4A31106BF5178E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:19:0b:c1:98:57:34:09:75:16:69:75:f0:
39:b2:59:1f:b1:cf:b3:87:12:c1:64:fa:95:85:0a:
01:99:e7:ab:af:60:af:59:fd:8c:7c:a0:64:70:8d:
be:c6:10:52:e7:72:a8:1c:7c:b8:47:31:f5:71:e4:
c7:e3:4b:2f:0f:4c:b8:da:86:f8:ef:05:fc:d3:84:
a9:7b:fa:a4:ed:a2:d7:d8:6d:cf:70:0f:10:85:39:
01:13:c0:07:90:eb:76:9b:6e:ab:11:b9:d9:9b:dd:
53:61:ea:1a:db:d6:1f:60:82:01:a6:e7:f4:86:66:
d6:4a:0c:93:93:8f:f9:01:6e:65:6d:7d:7d:cf:ff:
5f:fd:7e:2a:1e:f4:a7:a5:62:79:c5:6c:96:45:ff:
8a:b6:98:ee:69:57:07:1e:d0:a8:ce:e2:68:47:db:
01:8f:0f:7a:2a:18:1f:03:29:a7:11:12:1d:4d:69:
b3:bb:8c:c9:f8:85:0d:3d:6e:81:6f:b1:5d:58:fc:
94:bb:13:f1:7c:e4:a3:e8:22:7a:f4:a1:d9:20:71:
b7:0f:58:a9:ea:ec:0b:03:ea:e2:ff:df:b9:fa:6b:
7f:ec:43:f2:f2:66:d5:94:05:3d:ea:81:0d:70:a8:
89:e6:78:3e:55:4e:e2:34:07:74:4d:e9:56:4f:af:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:C7:67:50:E8:5B:0E:42:75:27:D3:A4:A3:11:06:BF:51:78:E3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d000::/36
2a14:7580:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
93:6e:cf:7e:da:85:99:a4:cf:d1:83:a6:e9:34:29:96:59:40:
56:62:b0:e2:c9:e2:48:3d:e3:56:36:fc:75:eb:34:ea:52:0e:
a1:91:33:ac:ee:e1:4c:b2:d7:23:91:2b:8d:1d:28:e7:64:7b:
50:27:d3:2a:b3:74:dc:09:a9:f0:70:77:31:ce:92:d4:2f:09:
26:8e:23:48:db:a4:83:fc:9e:40:9e:ca:6a:4c:de:e9:39:0c:
4a:9e:5d:c7:59:72:b6:20:02:14:56:3e:91:98:6b:cd:24:36:
13:75:27:9f:cb:bb:8c:bc:50:2b:f2:38:cd:13:8e:59:99:5e:
be:f3:cc:c1:b1:1f:98:fd:10:b0:99:4b:d3:0f:2b:e5:c1:e0:
96:d5:c0:4f:9d:da:4e:4d:82:8f:85:7d:f1:a3:40:c6:64:4f:
92:62:ee:06:9b:8e:dc:86:98:3a:8f:86:64:94:55:ef:dc:0f:
e7:a0:5b:2e:8e:ea:b5:88:9c:70:16:2e:7d:88:96:c3:79:06:
d2:bd:32:32:50:6f:e4:fb:2e:8c:5a:c8:bb:b4:29:80:77:85:
a5:9c:fb:f2:a5:09:b1:bc:6e:c0:9e:e6:72:71:e8:3e:15:e8:
06:70:22:dc:e5:94:bb:05:7e:40:a0:11:ba:81:2f:1e:ce:06:
16:9d:42:bf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUN5JFhSR4fB18O7tKmsFZd4mlvncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMDlaFw0yNjAyMDMwMDE3MDlaMDMxMTAvBgNV
BAMTKDdGMTdDNzY3NTBFODVCMEU0Mjc1MjdEM0E0QTMxMTA2QkY1MTc4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXRkLwZhXNAl1Fml18DmyWR+x
z7OHEsFk+pWFCgGZ56uvYK9Z/Yx8oGRwjb7GEFLncqgcfLhHMfVx5MfjSy8PTLja
hvjvBfzThKl7+qTtotfYbc9wDxCFOQETwAeQ63abbqsRudmb3VNh6hrb1h9gggGm
5/SGZtZKDJOTj/kBbmVtfX3P/1/9fioe9KelYnnFbJZF/4q2mO5pVwce0KjO4mhH
2wGPD3oqGB8DKacREh1NabO7jMn4hQ09boFvsV1Y/JS7E/F85KPoInr0odkgcbcP
WKnq7AsD6uL/37n6a3/sQ/LyZtWUBT3qgQ1wqInmeD5VTuI0B3RN6VZPr4KbAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUfxfHZ1DoWw5CdSfTpKMRBr9ReOMwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE0NjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhR1
gNADBgAqFHWA/jANBgkqhkiG9w0BAQsFAAOCAQEAk27PftqFmaTP0YOm6TQplllA
VmKw4sniSD3jVjb8des06lIOoZEzrO7hTLLXI5ErjR0o52R7UCfTKrN03Amp8HB3
Mc6S1C8JJo4jSNukg/yeQJ7Kakze6TkMSp5dx1lytiACFFY+kZhrzSQ2E3Unn8u7
jLxQK/I4zROOWZlevvPMwbEfmP0QsJlL0w8r5cHgltXAT53aTk2Cj4V98aNAxmRP
kmLuBpuO3IaYOo+GZJRV79wP56BbLo7qtYiccBYufYiWw3kG0r0yMlBv5PsujFrI
u7QpgHeFpZz78qUJsbxuwJ7mcnHoPhXoBnAi3OWUuwV+QKARuoEvHs4GFp1Cvw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:24 2025 by rpki-client