Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa
File: AS216342.roa (raw, json)
Hash identifier: 4juhkbg3N9409UrGOLaM9NwM9ouZKtz2M+/WLP8Qc/A=
Subject key identifier: 91:B9:A8:A2:23:A9:63:A8:9A:46:05:EE:C3:E0:45:7D:F1:BA:77:2C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 539098F4845C5962D085149E4545B0B185F6E003
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 216342
IP address blocks: 2a14:7580:e400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:90:98:f4:84:5c:59:62:d0:85:14:9e:45:45:b0:b1:85:f6:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=91B9A8A223A963A89A4605EEC3E0457DF1BA772C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:76:bf:e2:07:85:57:33:e8:70:bc:d2:ad:
18:b1:20:e3:e1:aa:cb:b5:90:5e:e0:fc:9d:27:e6:
93:3e:d6:91:31:98:53:1c:00:28:b6:ed:bd:9d:14:
43:5e:5d:7b:1a:24:9e:cd:3e:a7:d7:cd:55:73:4b:
7a:f3:cf:0b:6e:87:51:7e:18:96:4a:71:19:45:d1:
27:0e:c5:03:03:84:3e:80:4a:45:a1:71:5d:63:70:
94:93:c7:07:dd:c4:5c:52:4e:19:8d:07:e3:29:d1:
7f:b4:7a:4c:95:2b:b7:6f:32:ac:0a:30:dc:d6:e8:
bc:31:42:ac:e8:b1:7e:59:21:6b:75:62:db:7b:c3:
64:78:fb:dc:89:b4:26:0f:0b:87:87:45:9c:02:d1:
46:c2:8c:4f:f0:41:cb:b6:e6:a2:df:95:f3:15:7d:
06:2e:99:83:c6:46:02:a4:de:7f:d4:11:03:76:0e:
d9:f2:27:04:6b:4b:1c:63:9b:41:c7:8a:54:f5:aa:
3a:b7:9e:70:51:8a:5f:32:4b:e6:c4:55:50:27:2f:
fa:78:2f:85:74:df:e6:68:8f:f4:a2:f2:f1:f5:78:
de:4a:25:9a:c5:4a:4f:51:e2:ca:9a:75:a1:11:37:
06:ba:9d:e5:fa:ff:39:12:b2:b3:4e:4d:9a:4f:c2:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:A8:A2:23:A9:63:A8:9A:46:05:EE:C3:E0:45:7D:F1:BA:77:2C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e400::/40
Signature Algorithm: sha256WithRSAEncryption
8b:d2:3a:04:b2:2c:53:c5:a0:8d:10:59:96:0e:d3:09:8a:b3:
62:e5:27:8d:53:f4:e4:cc:94:1b:42:89:82:5c:3c:27:7f:ec:
f8:09:af:70:f8:fe:43:c5:10:64:4b:45:7f:88:1b:db:79:15:
24:eb:83:9e:f1:6b:ef:dc:0c:dd:64:68:17:cc:27:80:53:a6:
ef:27:0a:4d:99:52:4c:e5:1a:4b:e9:53:ec:7f:e5:33:29:68:
6b:2a:cb:6f:0a:09:70:cd:0d:d4:8b:56:a3:58:dd:b5:8c:33:
ad:8c:d9:b0:8b:db:30:cb:cc:8a:ee:fe:30:ec:05:b8:80:05:
5f:31:f0:c7:57:6c:df:76:23:ee:9f:02:1a:52:28:c9:7c:39:
88:0f:43:4e:0f:c0:18:f9:d4:a7:34:eb:a4:45:47:8d:60:3b:
9d:5e:7f:c9:eb:ef:76:fc:97:2e:f0:82:8f:dd:15:29:d9:c5:
37:79:aa:eb:45:a1:3c:fd:7b:07:55:ec:42:fa:ec:4f:ee:20:
1c:33:2f:ed:4d:a4:24:fa:7f:0f:78:bc:de:ae:d4:7c:ce:5f:
bc:47:d4:c5:76:9d:be:c5:12:0a:c8:aa:06:05:e5:9d:4e:fa:
39:e4:2a:d3:48:0f:db:0f:33:1d:e9:ef:3b:be:67:46:cf:cb:
79:73:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:58 2025 by rpki-client