Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
File: AS215280.roa (raw, json)
Hash identifier: 9k2Yzq7watDBGO97HUdfATtunGUIMEXoBcgxtAC2Qgk=
Subject key identifier: 21:AB:9C:44:2F:4D:75:68:2B:C9:C7:A1:DE:42:58:19:E4:E7:77:1D
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 351EF3200A8B0642BF8786FE7A802C1B33663BD9
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
Signing time: Thu 20 Feb 2025 00:06:18 +0000
ROA not before: Thu 20 Feb 2025 00:01:18 +0000
ROA not after: Thu 19 Feb 2026 00:06:18 +0000
asID: 215280
IP address blocks: 2a07:54c1:3800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1e:f3:20:0a:8b:06:42:bf:87:86:fe:7a:80:2c:1b:33:66:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Feb 20 00:01:18 2025 GMT
Not After : Feb 19 00:06:18 2026 GMT
Subject: CN=21AB9C442F4D75682BC9C7A1DE425819E4E7771D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:98:cb:53:f7:b4:ce:75:59:31:10:9b:8e:
5f:5b:c9:ff:14:2e:fa:b5:74:dc:93:55:33:d7:03:
d9:30:cd:4e:0f:75:48:f3:ee:2d:3e:be:f2:6d:f2:
e1:e9:3c:b5:9c:53:f9:22:0a:ee:e0:3d:c9:ee:16:
42:09:fd:b7:70:ea:39:d0:a2:56:6f:86:a5:7a:bc:
92:fc:dc:79:2e:38:64:86:93:80:5f:a0:40:62:82:
52:8b:33:98:66:61:5e:33:2e:90:48:d6:63:31:4d:
e3:95:60:76:c9:c0:20:43:7e:4a:7a:74:85:95:57:
28:5f:6a:d5:63:40:df:92:62:b7:df:73:e9:e0:ed:
c7:3d:e0:4e:7d:e3:f2:68:e1:d8:b5:e8:51:b2:8d:
5e:3a:aa:da:c6:f5:b8:56:a2:83:98:06:8f:b2:e2:
d1:2b:43:a6:a1:c3:14:b7:91:0c:96:4d:0e:25:85:
6b:52:0d:f7:7e:0e:1c:be:d4:ca:1f:c2:93:58:eb:
6c:6a:3c:fb:09:bd:94:28:9e:f4:66:3a:85:d7:71:
9d:74:a5:07:b4:a8:f3:a4:37:a2:f0:ec:1f:56:bb:
5a:7f:8e:a0:dd:0b:7d:92:7e:ed:59:16:c7:a1:f7:
53:f8:8e:9d:fb:2a:86:2e:85:58:9c:38:d8:92:c4:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:9C:44:2F:4D:75:68:2B:C9:C7:A1:DE:42:58:19:E4:E7:77:1D
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3800::/40
Signature Algorithm: sha256WithRSAEncryption
49:5e:89:33:3e:7d:c3:19:42:df:ed:cb:1b:60:28:36:54:8d:
6a:cc:23:0a:57:dd:79:e3:c2:d4:03:af:38:3c:53:1f:0f:d1:
86:fe:c0:b4:64:13:d1:23:65:74:75:6c:a0:49:da:19:25:ed:
e5:d5:30:14:b1:aa:99:92:fd:b5:c4:de:d2:09:f4:fa:e1:7c:
ff:3f:15:df:5f:5c:30:b0:72:91:79:3f:33:7d:5c:b5:aa:72:
da:81:bd:7f:5d:36:52:1e:0c:b8:67:63:ee:dc:ce:30:ef:df:
71:1d:37:e4:86:d0:9f:3c:ba:e3:69:f9:57:54:52:1e:b0:c6:
5a:a1:33:70:7a:95:eb:ac:22:c0:b4:60:3a:81:c9:7d:80:fa:
65:d8:74:21:43:f9:14:13:f1:aa:ef:91:a5:e2:01:d7:e6:06:
e3:1f:c1:2f:27:77:96:c8:f2:a3:cb:cd:63:a2:c7:57:0d:f9:
64:71:c9:cc:67:50:88:51:90:53:4e:0b:c5:6d:76:49:9c:68:
69:23:f7:30:c8:ca:fe:f6:51:6a:6d:fc:d7:10:00:69:dc:2f:
fe:96:34:93:df:87:ef:02:01:53:f9:0c:88:9a:c7:bf:90:d8:
4b:1c:69:99:7a:12:41:20:35:2a:02:d9:3c:e2:25:fc:01:02:
bd:ea:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:04:45 2025 by rpki-client