Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: 5n1ClJ6nOFjT2CrimzQwExnCsF9xm4kN/COS901wdsM=
Subject key identifier: E3:AC:F4:C1:E3:33:F9:A1:1B:AC:41:6D:3F:E8:6D:F8:E2:2C:C7:19
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 07C7812F56DF3F6060B183816DFAEDA549283CD9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
Signing time: Thu 13 Mar 2025 15:46:57 +0000
ROA not before: Thu 13 Mar 2025 15:41:57 +0000
ROA not after: Thu 12 Mar 2026 15:46:57 +0000
asID: 215287
IP address blocks: 194.60.92.0/24 maxlen: 24
194.60.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c7:81:2f:56:df:3f:60:60:b1:83:81:6d:fa:ed:a5:49:28:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 13 15:41:57 2025 GMT
Not After : Mar 12 15:46:57 2026 GMT
Subject: CN=E3ACF4C1E333F9A11BAC416D3FE86DF8E22CC719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:b1:62:35:e0:fe:11:34:68:9a:82:b7:0c:
82:10:d5:9a:fa:25:ea:8f:46:2e:cd:48:6e:fd:e4:
92:7a:4d:50:fa:4f:ce:42:8f:a1:cc:04:ad:6f:48:
15:a5:2a:03:9c:e7:eb:e2:71:44:ab:9d:bd:11:94:
e0:7d:33:26:f0:4d:1e:8c:2f:36:6d:9f:0c:9b:b0:
d7:69:30:9f:cb:97:a4:77:7d:47:0d:f7:e7:dc:95:
4f:50:ad:f0:93:21:47:5c:ab:6d:a9:81:29:cb:64:
ee:ea:1c:dc:d2:7a:b8:d7:f9:e3:08:07:9f:87:80:
d7:45:fd:d6:fa:5c:e0:fd:8e:eb:b8:82:7a:ce:2b:
0f:3a:1a:de:0f:8e:b6:32:c5:40:b4:c5:43:e6:ed:
94:16:76:e4:1c:d0:42:ef:f7:e8:45:e6:ed:31:1e:
13:f6:a3:41:dc:6b:d6:d5:f7:54:10:a3:90:61:4f:
d9:f5:bf:0f:3f:6e:f5:f0:95:01:7a:21:04:46:0d:
48:7b:68:01:e6:73:72:79:4c:14:83:b9:dd:82:00:
4c:07:43:01:e4:f5:26:9c:98:f3:94:6d:f4:60:e5:
05:34:a2:31:66:e3:f1:c2:97:44:58:f0:70:29:e9:
14:9a:d0:5b:e2:15:7b:d7:9f:07:e1:bc:31:74:22:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:F4:C1:E3:33:F9:A1:1B:AC:41:6D:3F:E8:6D:F8:E2:2C:C7:19
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.92.0/23
Signature Algorithm: sha256WithRSAEncryption
97:d1:21:59:4e:32:86:cb:a9:d2:2a:7f:94:19:54:de:4c:b4:
57:db:e8:ec:da:3f:c8:f8:72:02:a5:5e:f2:e2:e8:36:4e:b8:
3e:96:1c:0b:1a:73:3d:a4:eb:a6:73:d0:44:d4:bf:91:40:d2:
d5:13:6c:79:45:32:bf:eb:eb:8b:dc:d0:7a:7a:8e:ff:23:74:
77:bd:22:10:bf:d4:47:32:86:47:fd:0f:84:24:41:eb:7a:33:
99:c8:a6:1a:44:66:9d:64:d3:4a:81:2d:b9:97:e1:cb:46:e1:
11:10:b3:cf:2f:61:16:96:cf:27:e0:9a:b8:e3:04:f6:88:5d:
6e:00:46:a7:80:8c:e9:5f:32:74:01:7a:76:03:c4:93:1c:13:
0b:b8:74:8f:88:22:f5:d6:cc:22:fb:cf:de:53:74:bd:4b:31:
f4:e1:18:e0:59:9a:74:7c:fb:37:7b:05:70:58:ab:13:31:4a:
3e:0e:06:e0:eb:76:c3:d1:e7:76:00:a8:40:7a:f7:06:3e:1c:
67:41:06:36:81:9a:70:06:62:88:53:d2:8c:1d:94:dd:92:d8:
e6:67:7b:e0:81:17:58:fe:d5:0c:40:32:64:14:f7:0b:2d:19:
af:1a:bd:c6:42:22:61:8a:3d:18:42:fc:83:27:41:c2:cb:b1:
59:c4:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:42 2025 by rpki-client