Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215364.roa
File: AS215364.roa (raw, json)
Hash identifier: 7WFbX0kz7Hq37lLsY4u8+ea4nnenDvddG6ypX+jhCvU=
Subject key identifier: 60:5E:B6:CE:20:09:3E:28:56:10:F7:27:CA:D1:DC:39:24:86:25:05
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 236CD1D2521473D983C0B13B8A8657466A9977EA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215364.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 215364
IP address blocks: 2a14:7581:ff0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6c:d1:d2:52:14:73:d9:83:c0:b1:3b:8a:86:57:46:6a:99:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=605EB6CE20093E285610F727CAD1DC3924862505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:f3:de:ce:de:7d:de:21:ee:eb:ca:c6:dd:
4a:33:26:5a:fb:2c:48:85:87:30:18:c6:06:c5:d0:
5c:5d:e8:dd:73:be:2e:15:85:11:12:b4:39:17:34:
14:47:de:02:ed:78:d4:4e:66:9c:39:e6:08:78:79:
dd:21:17:09:f2:ce:a6:dd:88:35:ba:4c:a4:9c:7d:
f2:7d:c7:71:69:ad:de:b5:18:ca:1e:06:21:b4:b3:
ec:e0:03:41:3d:4e:8d:4b:01:66:1e:2b:6d:2e:eb:
0c:bf:73:1e:a3:d6:6f:a2:f4:69:88:00:b8:68:45:
f4:e3:e0:8c:05:90:ff:95:ae:b7:f2:f9:6d:f8:a7:
00:fa:22:bc:e5:4b:b1:fc:13:b4:e3:3e:01:47:89:
5a:23:96:0d:dd:59:2b:5f:0b:41:c5:39:ba:92:d6:
5e:98:b5:a5:84:fe:c0:3b:e6:fe:27:75:01:db:0e:
db:e3:5a:f3:0a:7b:2d:68:df:f6:23:02:76:d4:f5:
2a:3a:d8:f5:69:85:3e:ca:c8:d8:2b:ee:3b:21:8b:
be:a8:fa:55:5f:c3:ea:cd:93:83:d1:78:a3:d7:1f:
14:61:a6:6d:41:b6:1d:12:b1:bb:cd:0b:15:28:5d:
38:43:58:60:c1:44:ff:7a:4a:5c:18:ad:29:f4:93:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:B6:CE:20:09:3E:28:56:10:F7:27:CA:D1:DC:39:24:86:25:05
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff0::/48
Signature Algorithm: sha256WithRSAEncryption
90:1d:e8:68:69:97:55:be:3d:55:06:e8:6d:c4:32:91:59:66:
89:51:09:88:26:2c:a7:3c:e5:23:0f:04:cc:0f:ed:21:3c:d8:
e6:b7:6f:11:d1:2d:dc:06:af:31:b0:19:68:ab:cb:2f:79:c8:
34:89:d6:16:91:7a:51:84:a0:a3:a5:f1:34:c8:c4:8f:07:8d:
37:97:49:9e:2d:07:d0:6b:d8:6d:7a:9f:db:62:8c:27:cb:3a:
ca:49:7a:3d:73:0c:f5:ce:b3:1a:8a:a7:9a:8f:97:5e:71:c9:
e0:3d:da:b2:e4:20:72:4e:8b:82:d1:1e:4b:f9:21:c9:e8:d8:
85:e4:ab:1d:67:27:2a:de:c4:53:91:3b:96:ed:37:08:4a:67:
72:ab:31:09:01:5b:a5:01:5e:80:11:66:f9:ad:2b:18:2f:14:
a1:03:97:8f:1b:08:6f:60:ae:63:89:fa:a0:70:c4:72:0a:b9:
b4:bf:4a:6b:f4:a5:95:24:2a:60:a5:cc:7a:af:fd:2f:79:73:
7c:81:d6:8a:2e:31:98:79:7d:9d:fb:50:64:ad:25:d1:00:02:
97:c6:1d:5b:76:e8:0b:a4:4c:33:a8:23:63:9f:1e:9c:67:ad:
45:a5:98:d3:bc:3c:41:17:c9:d0:48:dd:7b:d9:25:0e:c4:bb:
63:94:97:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUI2zR0lIUc9mDwLE7ioZXRmqZd+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMDlaFw0yNjAyMDMwMDE3MDlaMDMxMTAvBgNV
BAMTKDYwNUVCNkNFMjAwOTNFMjg1NjEwRjcyN0NBRDFEQzM5MjQ4NjI1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FPPezt593iHu68rG3UozJlr7
LEiFhzAYxgbF0Fxd6N1zvi4VhREStDkXNBRH3gLteNROZpw55gh4ed0hFwnyzqbd
iDW6TKScffJ9x3Fprd61GMoeBiG0s+zgA0E9To1LAWYeK20u6wy/cx6j1m+i9GmI
ALhoRfTj4IwFkP+Vrrfy+W34pwD6IrzlS7H8E7TjPgFHiVojlg3dWStfC0HFObqS
1l6YtaWE/sA75v4ndQHbDtvjWvMKey1o3/YjAnbU9So62PVphT7KyNgr7jshi76o
+lVfw+rNk4PReKPXHxRhpm1Bth0SsbvNCxUoXThDWGDBRP96SlwYrSn0kyIZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUYF62ziAJPihWEPcnytHcOSSGJQUwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1MzY0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gQ/wMA0GCSqGSIb3DQEBCwUAA4IBAQCQHehoaZdVvj1VBuhtxDKRWWaJUQmIJiyn
POUjDwTMD+0hPNjmt28R0S3cBq8xsBloq8svecg0idYWkXpRhKCjpfE0yMSPB403
l0meLQfQa9htep/bYownyzrKSXo9cwz1zrMaiqeaj5deccngPdqy5CByTouC0R5L
+SHJ6NiF5KsdZycq3sRTkTuW7TcISmdyqzEJAVulAV6AEWb5rSsYLxShA5ePGwhv
YK5jifqgcMRyCrm0v0pr9KWVJCpgpcx6r/0veXN8gdaKLjGYeX2d+1BkrSXRAAKX
xh1bdugLpEwzqCNjnx6cZ61FpZjTvDxBF8nQSN172SUOxLtjlJf3
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:26 2025 by rpki-client