Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: vBzGiiR4zsk/4n7lZir+WwzxZrImWhTv/1V5OASQoFM=
Subject key identifier: 99:C2:D6:77:F1:83:B7:2B:E3:E6:BD:61:A1:A8:B7:55:EA:5E:0E:D9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 63B59A4E4DA5DC7E5DF3DE663AD5C07962EEC9EA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa
Signing time: Mon 10 Feb 2025 11:04:57 +0000
ROA not before: Mon 10 Feb 2025 10:59:57 +0000
ROA not after: Mon 09 Feb 2026 11:04:57 +0000
asID: 210542
IP address blocks: 141.11.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b5:9a:4e:4d:a5:dc:7e:5d:f3:de:66:3a:d5:c0:79:62:ee:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 10 10:59:57 2025 GMT
Not After : Feb 9 11:04:57 2026 GMT
Subject: CN=99C2D677F183B72BE3E6BD61A1A8B755EA5E0ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:f7:e6:0c:98:8b:a7:8a:74:71:70:d6:c0:
0c:6e:bc:2e:5c:c0:91:ee:42:bc:ad:f0:d0:a1:ce:
b0:09:6d:e2:17:0b:5c:de:4a:d0:e0:8d:35:5e:03:
aa:66:37:4e:1c:7e:ba:27:35:39:f1:81:1e:bb:f5:
d4:52:e3:fd:a6:ab:94:d2:d6:d0:4a:d7:f7:e0:c3:
21:80:0a:9b:bb:72:b0:15:50:a5:98:ea:c0:2e:99:
54:03:99:4a:b7:1e:f6:11:cc:a9:2a:b9:8f:97:b7:
e4:78:d6:71:d7:c0:5c:dc:68:7b:43:0d:69:fc:95:
fe:68:41:00:9a:f0:52:5a:a8:c5:f7:4c:45:70:42:
32:78:ba:25:b5:11:3c:e8:dc:f8:5d:55:17:04:9c:
4c:60:a5:24:37:8b:88:fa:51:3b:ac:28:7a:78:03:
1b:f8:cf:8b:eb:06:ea:5c:11:38:d6:dc:8b:da:62:
e1:1e:b7:3f:7e:44:14:0b:08:34:1e:c5:59:c6:a8:
1c:dd:bf:2d:13:e8:f8:0b:18:d3:61:f9:f2:93:3f:
f1:f4:75:a4:f6:9e:7d:e7:05:aa:fd:7a:aa:e6:aa:
c8:ea:33:f7:31:86:ac:ad:64:28:29:87:8b:3e:c0:
25:ba:f4:62:ea:d1:ea:8b:a4:7f:90:2d:0b:91:4d:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:D6:77:F1:83:B7:2B:E3:E6:BD:61:A1:A8:B7:55:EA:5E:0E:D9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:d1:7e:c5:5c:e8:2d:4d:d9:db:60:9a:82:d6:6c:b0:f1:d0:
5e:56:05:56:57:f4:36:dc:a8:7a:65:2b:15:83:24:fd:96:8c:
ea:39:d6:ed:7f:fd:43:48:e1:ab:d8:a1:45:29:b3:72:fb:26:
70:9b:25:05:56:86:d4:dd:e2:23:71:54:6c:0b:25:e8:9e:82:
ba:9c:f7:48:2f:2d:a8:b6:b3:08:64:76:8d:f6:b9:3c:8a:01:
c9:3a:15:06:d9:db:8d:18:40:a6:34:cb:4f:e8:f2:57:63:bf:
c8:50:24:d4:6e:47:57:ec:60:b3:0f:80:29:4e:73:01:1b:b2:
2f:c5:14:f9:42:cf:33:9e:df:9b:a6:64:82:e0:64:f6:dc:6b:
dd:b1:9f:a7:7d:48:44:b4:75:e8:52:ad:23:f0:77:96:5e:4a:
3a:10:fb:fb:b2:b8:c3:aa:a2:a5:51:9d:fc:5f:d2:c2:62:08:
6e:e9:55:d8:31:04:1a:2f:9e:1c:b6:5c:83:d4:36:6e:0c:11:
ec:a0:97:1c:ab:3c:38:d1:6e:f9:82:56:2c:1d:06:35:85:ef:
9e:29:aa:cc:aa:c0:a1:7c:c9:23:00:cc:b6:ac:9d:55:71:ca:
b7:ce:0c:cd:f4:2f:23:3f:20:54:f0:1f:59:21:3c:6d:0e:68:
bf:28:4f:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUY7WaTk2l3H5d895mOtXAeWLuyeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTAyMTAxMDU5NTdaFw0yNjAyMDkxMTA0NTdaMDMxMTAvBgNV
BAMTKDk5QzJENjc3RjE4M0I3MkJFM0U2QkQ2MUExQThCNzU1RUE1RTBFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxvfmDJiLp4p0cXDWwAxuvC5c
wJHuQryt8NChzrAJbeIXC1zeStDgjTVeA6pmN04cfronNTnxgR679dRS4/2mq5TS
1tBK1/fgwyGACpu7crAVUKWY6sAumVQDmUq3HvYRzKkquY+Xt+R41nHXwFzcaHtD
DWn8lf5oQQCa8FJaqMX3TEVwQjJ4uiW1ETzo3PhdVRcEnExgpSQ3i4j6UTusKHp4
Axv4z4vrBupcETjW3IvaYuEetz9+RBQLCDQexVnGqBzdvy0T6PgLGNNh+fKTP/H0
daT2nn3nBar9eqrmqsjqM/cxhqytZCgph4s+wCW69GLq0eqLpH+QLQuRTUgpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUmcLWd/GDtyvj5r1hoai3VepeDtkwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEwNTQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQuG
MA0GCSqGSIb3DQEBCwUAA4IBAQDC0X7FXOgtTdnbYJqC1myw8dBeVgVWV/Q23Kh6
ZSsVgyT9lozqOdbtf/1DSOGr2KFFKbNy+yZwmyUFVobU3eIjcVRsCyXonoK6nPdI
Ly2otrMIZHaN9rk8igHJOhUG2duNGECmNMtP6PJXY7/IUCTUbkdX7GCzD4ApTnMB
G7IvxRT5Qs8znt+bpmSC4GT23GvdsZ+nfUhEtHXoUq0j8HeWXko6EPv7srjDqqKl
UZ38X9LCYghu6VXYMQQaL54ctlyD1DZuDBHsoJccqzw40W75glYsHQY1he+eKarM
qsChfMkjAMy2rJ1Vccq3zgzN9C8jPyBU8B9ZITxtDmi/KE/0
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:33 2025 by rpki-client