Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215567.roa
File: AS215567.roa (raw, json)
Hash identifier: VnyjPiIYGaJHyHqBVlf0qPoJg+sm3U1ldhaYuHZwVpc=
Subject key identifier: 1D:1D:A3:E1:6D:D9:55:8D:0F:8A:31:AE:04:43:59:AB:5A:F0:79:0C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 57DFCE54F43C2FB3B354FAE3DD3EAF8B28A46770
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215567.roa
Signing time: Sat 28 Dec 2024 13:09:09 +0000
ROA not before: Sat 28 Dec 2024 13:04:09 +0000
ROA not after: Sat 27 Dec 2025 13:09:09 +0000
asID: 215567
IP address blocks: 141.11.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:df:ce:54:f4:3c:2f:b3:b3:54:fa:e3:dd:3e:af:8b:28:a4:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 28 13:04:09 2024 GMT
Not After : Dec 27 13:09:09 2025 GMT
Subject: CN=1D1DA3E16DD9558D0F8A31AE044359AB5AF0790C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:34:69:9c:cd:99:de:17:d3:44:ef:22:7c:
ad:85:7a:3c:93:d0:0f:22:ff:9d:d2:db:d3:1c:16:
64:20:da:db:b7:0c:7f:8d:c9:ac:6c:59:74:b5:bf:
80:63:3f:51:01:46:c5:5f:06:05:a4:e7:d3:44:e0:
ff:fb:ac:d9:84:38:ea:58:74:62:3c:6c:48:58:8a:
38:70:7e:6b:d9:8b:78:0e:a0:0e:d4:9f:3f:46:19:
0c:46:70:ca:74:fc:ec:66:89:4e:26:6b:96:db:73:
fc:56:f3:c5:19:69:b2:14:3e:6a:bf:44:1c:cd:c7:
4b:a6:60:87:27:d4:04:ac:0b:cb:4e:d8:5b:7d:53:
38:ea:3e:76:90:91:43:47:61:39:69:c7:77:1b:e0:
51:70:ee:9e:4e:90:e8:89:9b:09:ae:60:81:08:9d:
de:3f:60:1a:f7:98:21:dc:a1:0b:1f:6c:81:75:0f:
2b:6c:e9:0e:60:d5:5b:66:4e:e9:91:b5:65:f2:90:
7e:ce:33:cf:e4:b9:ea:d3:3d:dd:81:3b:72:78:bc:
f9:dc:95:04:51:91:70:e6:c7:db:3a:3d:5e:0a:b6:
2b:f1:c3:e6:04:95:7e:f7:41:ab:b0:17:04:b4:0f:
73:18:0d:5e:84:80:d1:aa:eb:b4:da:b9:37:63:e3:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:A3:E1:6D:D9:55:8D:0F:8A:31:AE:04:43:59:AB:5A:F0:79:0C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:f1:86:a1:8d:0d:82:b3:6e:8c:8b:a8:59:9f:8a:63:60:09:
6a:f0:b3:f4:4b:2b:1a:d5:65:db:62:e7:8c:12:92:47:dc:66:
bb:e4:bb:b3:ce:7b:ad:ba:34:cf:f2:ca:3b:c6:7a:16:00:c7:
ae:d7:3e:15:4a:b4:fb:05:b9:c6:f7:3d:b1:8b:02:ce:42:0e:
21:f4:b1:c1:d5:8b:0f:de:cb:5b:80:98:db:6e:d1:8e:ac:7f:
3a:84:dc:00:cc:14:79:d0:2f:42:da:20:b5:4b:58:12:5b:07:
d1:88:aa:ae:e2:15:fb:94:01:97:13:0d:2e:66:68:af:f1:89:
8b:74:6a:aa:b4:49:8f:ad:bd:e9:4f:bd:59:02:07:89:b5:fe:
3f:c4:33:c9:2f:d1:41:a3:eb:c0:8d:9c:2c:ec:6e:8c:62:47:
76:f2:42:a2:1d:a5:9f:a3:d6:8e:be:b5:19:b6:a2:3c:77:bc:
aa:99:19:ef:5b:59:12:b5:77:2a:88:b8:8f:7f:dd:e9:28:22:
ed:40:4f:c7:c8:be:f3:fa:e1:e8:a2:a8:b3:85:93:b1:76:ad:
0a:53:66:86:2f:ca:54:a6:ad:2c:5f:b6:a7:bd:6e:a4:fb:a5:
b5:34:8a:c9:3d:69:e6:89:43:1c:b9:ed:66:ed:33:00:bb:42:
33:7c:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:16 2025 by rpki-client