Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
File: AS211014.roa (raw, json)
Hash identifier: CJYNHFMGVQS9mVLgzAHnmHnyuPYNupxVHmTNaquaoCE=
Subject key identifier: B2:42:22:97:28:3F:B3:93:67:EC:0A:B2:80:EE:A9:48:42:AF:41:42
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2A792C86EAC784E88A8DB8D20AEB277714B714DC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
Signing time: Mon 10 Mar 2025 13:27:52 +0000
ROA not before: Mon 10 Mar 2025 13:22:52 +0000
ROA not after: Mon 09 Mar 2026 13:27:52 +0000
asID: 211014
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:79:2c:86:ea:c7:84:e8:8a:8d:b8:d2:0a:eb:27:77:14:b7:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 10 13:22:52 2025 GMT
Not After : Mar 9 13:27:52 2026 GMT
Subject: CN=B2422297283FB39367EC0AB280EEA94842AF4142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:38:9a:bd:47:3d:e8:fb:85:c8:7f:2d:fa:
d2:db:16:95:4f:06:8d:bb:db:f0:f8:5a:b6:40:a7:
71:ec:e0:ee:ca:94:61:a9:8c:dd:14:8f:05:ee:3e:
66:c3:3e:62:c7:43:a5:17:59:45:81:9d:20:d9:29:
11:fc:fc:73:9c:a5:b2:15:0f:02:ea:1c:f7:d3:ce:
4b:19:5b:3e:60:01:a4:d1:76:d8:1a:38:0d:b9:34:
d6:a1:26:f3:12:b3:44:1f:72:7c:45:1b:0e:97:86:
72:e8:d0:04:47:e2:9d:2d:c8:ba:c9:f6:9e:77:1b:
e5:cf:4c:1f:a2:8f:a6:4b:53:a9:50:6c:c4:69:19:
5f:53:ba:c2:dc:cc:57:b8:90:da:42:9c:d1:c8:b2:
dd:02:b9:8f:6e:49:09:4a:15:f3:d7:3b:eb:5a:a6:
bd:bc:b6:43:ac:8f:04:50:26:a6:33:0a:03:ec:0a:
dd:b5:8d:4e:02:2b:d3:ee:39:c4:15:23:87:7a:18:
9c:b5:0d:84:a1:7e:7b:6a:f2:f9:c6:bd:5c:93:7e:
b4:02:89:2c:c3:36:b6:f5:30:ff:06:5b:5f:18:d6:
e1:76:a8:6f:1b:bf:92:19:61:3c:ad:bb:3a:8b:85:
ed:94:1d:d4:2b:0a:ec:2c:90:1c:db:af:59:e2:d5:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:22:97:28:3F:B3:93:67:EC:0A:B2:80:EE:A9:48:42:AF:41:42
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d6:f1:ae:43:aa:8b:89:d1:88:af:86:32:91:a1:c4:3d:b5:
2b:a2:70:22:c1:a7:0a:33:ca:67:cb:2e:4d:94:04:fa:f8:12:
9f:64:6b:d4:83:6a:3b:f8:13:c2:a4:d5:dd:87:ba:10:26:22:
15:6d:c2:c0:79:2b:38:48:cb:1a:83:85:f2:81:96:4a:e1:43:
7e:23:d4:9f:fb:9d:d9:e8:de:58:56:38:99:51:34:cc:54:95:
cc:94:3a:12:79:f7:52:a8:e6:0c:b4:3b:9d:83:54:09:39:5d:
a5:07:f0:0f:b7:bb:01:4a:8c:0b:df:ff:ec:60:7c:bd:fa:fb:
17:8b:b0:5e:0c:aa:f0:1d:17:27:9c:73:dc:14:8a:05:b7:d0:
63:a8:f1:61:35:b4:8f:4e:f1:24:96:3b:59:a2:80:47:03:ef:
0f:fc:59:50:6c:16:e1:09:24:d9:64:b5:00:09:b2:34:27:36:
4d:02:76:9a:06:4d:0a:e1:94:8b:a8:20:46:76:7e:75:b2:88:
b7:ed:14:3d:10:94:77:2c:c0:b6:f3:d4:32:71:18:85:24:99:
b8:9d:2a:a2:2e:d0:34:79:91:7a:cd:af:3a:2a:44:9a:92:26:
18:9a:ba:d7:43:e8:ba:5a:18:4f:9c:c6:8b:d4:7c:54:77:24:
73:3d:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:24 2025 by rpki-client