Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215362.roa
File: AS215362.roa (raw, json)
Hash identifier: F3P7BdWLiZvpRrF48s/ayX+waxz22+NANFqpqe3tOQE=
Subject key identifier: DE:25:F4:2F:CB:40:10:55:28:8F:9C:8D:85:30:A5:CE:30:C2:A9:B6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 764C4F16B99C1470698B3F1DF0010CC578D75855
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215362.roa
Signing time: Sat 01 Feb 2025 11:04:24 +0000
ROA not before: Sat 01 Feb 2025 10:59:24 +0000
ROA not after: Sat 31 Jan 2026 11:04:24 +0000
asID: 215362
IP address blocks: 141.11.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4c:4f:16:b9:9c:14:70:69:8b:3f:1d:f0:01:0c:c5:78:d7:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 1 10:59:24 2025 GMT
Not After : Jan 31 11:04:24 2026 GMT
Subject: CN=DE25F42FCB401055288F9C8D8530A5CE30C2A9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:c7:d9:57:0a:fd:e3:73:e6:a3:c5:37:ba:
3c:99:fb:17:8e:95:87:b3:09:77:1c:a9:19:61:d4:
b8:1a:20:90:a1:74:25:1e:5b:f1:e4:b7:29:0c:ea:
0a:09:c9:8b:c5:4d:8f:4e:3d:05:73:76:f4:af:5e:
0f:09:8f:44:f3:4a:3a:76:bf:f5:eb:ed:e0:9d:f2:
5b:37:af:0b:d1:76:3c:02:02:26:9d:e8:24:5f:cf:
37:b6:80:2a:75:18:a9:82:63:ba:40:db:76:59:24:
7f:17:8a:c2:3b:f1:9c:50:6e:d0:64:53:72:e8:89:
03:7d:f0:cf:48:aa:2a:ff:2b:5a:fa:29:1c:c3:02:
d8:2f:eb:4a:b4:d0:f6:c0:08:50:73:81:b6:29:61:
56:a6:3d:e1:16:5a:06:d5:2a:a2:44:3e:d2:1f:ff:
36:b8:56:ed:03:1e:d4:14:a9:f3:45:fb:75:70:90:
57:5a:8c:d4:9c:ee:52:63:3a:dd:59:db:45:10:22:
f7:e3:98:36:e6:d8:53:e8:62:7e:98:15:e5:dd:40:
7d:5c:94:6d:5b:4f:9b:2d:c3:71:53:0a:cd:89:de:
73:a6:f5:c8:8e:1a:02:24:49:5e:c6:a2:47:80:3a:
ff:67:45:74:2c:0e:35:10:a5:ee:7e:29:76:b6:f3:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:F4:2F:CB:40:10:55:28:8F:9C:8D:85:30:A5:CE:30:C2:A9:B6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.164.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e0:77:89:2d:8b:6c:24:78:8f:f3:35:a1:02:00:62:d4:e5:
65:cb:36:7a:04:a7:18:50:0d:9b:0d:ba:8e:bf:25:87:bb:89:
d1:73:bb:88:b6:83:0c:46:bc:43:cb:4b:f5:17:4f:ba:cc:7e:
68:82:62:48:b0:82:43:05:0f:d7:74:5e:df:b7:2e:2b:37:de:
66:bd:38:49:f9:9d:e4:6a:a3:73:bc:d0:4e:13:f8:5c:8b:2c:
8e:b9:5d:6a:65:d4:e2:d8:7e:e4:68:b8:ff:e3:28:2e:f4:f8:
d9:96:22:c1:99:47:84:c6:bf:de:30:6b:2c:7f:33:bd:06:f6:
f0:95:a1:48:4d:a7:c7:d1:99:5b:ab:47:20:67:6d:b2:8c:99:
e1:b8:35:b1:2e:0a:7c:e8:6e:ee:07:5b:ba:84:84:00:17:bc:
cc:8d:5f:a3:a8:af:51:6e:e2:6d:3b:66:60:17:4e:30:41:1b:
c7:01:13:bd:01:e6:75:0e:0a:d6:7b:a6:27:c8:55:b3:cd:e8:
ce:88:0b:cb:4e:1d:7a:95:bd:fd:da:94:ce:2d:1c:a2:97:56:
ec:d7:d7:c8:d2:9c:fb:82:48:64:3b:f8:5c:8f:aa:f7:4e:9f:
e8:62:67:21:d3:0e:17:81:0a:66:38:d2:36:e5:a8:06:79:b5:
35:56:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:29:57 2025 by rpki-client