Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
File: AS210535.roa (raw, json)
Hash identifier: 1n1vhxjY+MiRKvBxorgP/cD6yQ4VdfPxgrwonpn/8O4=
Subject key identifier: 39:43:2B:C8:14:AB:FC:86:80:28:08:BF:9C:B2:EE:77:FD:DC:41:09
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 10CE60037FEB6B89D9138D344AD177C6462E2E29
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
Signing time: Sun 01 Dec 2024 16:02:10 +0000
ROA not before: Sun 01 Dec 2024 15:57:10 +0000
ROA not after: Sun 30 Nov 2025 16:02:10 +0000
asID: 210535
IP address blocks: 141.11.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ce:60:03:7f:eb:6b:89:d9:13:8d:34:4a:d1:77:c6:46:2e:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 1 15:57:10 2024 GMT
Not After : Nov 30 16:02:10 2025 GMT
Subject: CN=39432BC814ABFC86802808BF9CB2EE77FDDC4109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:c0:5e:df:c4:26:eb:fe:4c:c8:78:7d:2f:
58:73:fa:a4:36:b7:87:cd:01:b0:85:f7:bd:c1:9b:
29:14:66:d7:fd:f3:a2:42:d9:ea:3d:b9:ac:d9:53:
2f:d0:c0:a0:cc:94:05:df:77:86:27:1a:8e:32:a0:
32:7e:f5:ee:4b:17:a3:b9:8a:36:2f:ed:21:f2:d7:
7e:23:77:24:27:68:48:8c:4f:a2:b8:bd:ff:56:f3:
eb:27:8d:2e:63:41:69:7d:16:2c:93:ce:2c:9f:11:
b6:e4:0f:ee:c0:9e:d0:fa:c6:2e:9a:95:19:81:a9:
dd:78:81:e1:39:28:c7:6d:87:25:fd:26:a7:20:3a:
38:1a:cf:23:85:0c:68:6a:ee:40:8d:9e:b9:2b:1e:
e9:8f:8a:2f:38:87:26:b8:c4:2f:49:86:9f:fa:ea:
46:67:6c:06:bf:2d:5f:35:ff:4d:b8:2e:59:73:b6:
c7:67:20:1a:f3:b3:08:6e:e7:86:95:5b:44:c6:65:
f3:bc:31:9d:c5:9a:b1:7f:b3:d4:95:69:53:e5:36:
1f:38:1c:d2:9d:e5:d3:ad:3e:3f:a6:c4:94:0e:21:
71:dc:9d:6e:66:89:17:23:2c:8f:76:7c:80:cd:a6:
0b:4e:bd:bc:4d:ab:fe:50:33:f7:20:2c:e2:43:55:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:2B:C8:14:AB:FC:86:80:28:08:BF:9C:B2:EE:77:FD:DC:41:09
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1c:38:eb:25:59:ac:bd:45:ca:76:f6:69:ba:e4:e2:8b:64:
41:da:69:61:60:39:1b:bc:a7:15:55:38:88:3a:ed:28:83:9a:
3f:2d:bf:30:b8:ff:a3:cc:3c:c1:fc:c9:f5:34:84:d9:a3:c6:
33:2d:9b:04:5b:ee:e9:9b:a9:58:5a:54:5e:62:2a:c7:ec:8d:
fd:7d:ad:f0:46:6e:54:dd:8d:e3:15:da:49:35:32:2c:40:42:
3b:32:14:81:cd:89:bb:6f:79:87:47:bd:41:d7:60:34:83:05:
c5:3a:b6:ea:fd:01:e2:7b:b4:39:c5:b7:6f:1f:b6:c2:82:b4:
f5:92:b5:30:fe:1e:be:f9:79:2f:c0:62:09:d5:78:a3:31:8c:
7c:3a:c2:b9:bd:19:0b:94:14:d7:e7:91:5d:26:d2:68:7d:fa:
13:b5:a0:93:b5:e6:0a:8c:12:88:76:07:01:cd:54:9b:a4:9c:
b6:78:56:37:cb:7d:f1:76:1d:35:f7:a4:7f:d3:f0:e9:24:98:
be:de:ef:f9:7d:ea:44:2d:b7:7d:de:67:cb:10:5e:46:6f:0e:
2e:d7:4f:49:73:27:f1:6d:6b:6c:15:41:c1:61:63:84:90:6b:
c0:19:47:7a:ae:c1:7b:5a:2a:76:1a:c6:b8:55:f8:e4:d0:ac:
5a:60:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:50 2025 by rpki-client