Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211514.roa
File: AS211514.roa (raw, json)
Hash identifier: e05GPQ/V+pH1sYDb/wwn/qx6xQikUrhnV5FkLT+FjZ4=
Subject key identifier: C1:8C:34:35:EA:D1:DA:B9:0A:B8:17:CE:26:FA:52:79:8D:F3:D4:38
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4207223A608B06C245BC14F6D2E2F9BD27C0C660
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211514.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 211514
IP address blocks: 2a06:a005:484::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:07:22:3a:60:8b:06:c2:45:bc:14:f6:d2:e2:f9:bd:27:c0:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=C18C3435EAD1DAB90AB817CE26FA52798DF3D438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:7f:83:06:9d:23:2a:53:db:32:cf:32:a3:
df:9f:2e:97:b0:a3:f1:a5:10:4a:9c:06:e7:1b:90:
db:8a:21:06:50:43:e3:0f:f1:51:ae:44:92:27:20:
b7:23:75:34:d1:8e:61:2f:29:cd:22:ea:88:89:10:
a4:d8:48:c6:2d:97:51:f3:b8:d1:5d:22:21:c8:0f:
c1:0f:48:e4:a2:2b:e4:10:9e:1d:42:f4:28:f1:d9:
f5:24:74:6e:7b:b8:26:9b:cb:52:bc:69:18:af:1f:
80:71:6e:27:4a:99:9a:dd:86:15:ee:77:96:20:41:
09:a3:05:16:4b:00:2e:c2:df:07:58:f8:cb:ee:fb:
70:28:06:92:aa:f9:e4:b4:b3:41:3c:25:78:7a:49:
a7:e1:21:8c:58:ef:04:5a:a2:b6:4a:6a:06:34:22:
76:7a:ae:08:f6:c2:59:76:4b:17:4a:cf:31:eb:f0:
05:cc:8e:1d:22:13:2b:fa:32:4c:2e:6b:1f:47:2e:
6d:51:2f:73:d3:86:5a:65:e1:fc:03:7b:28:f6:9b:
71:fb:d4:76:4c:c5:96:c2:d4:ea:19:7e:ad:27:53:
7f:23:32:c8:ec:77:01:84:21:63:24:6e:75:fd:87:
4c:6a:9e:84:06:b8:54:26:35:c4:2c:60:45:0e:4e:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:34:35:EA:D1:DA:B9:0A:B8:17:CE:26:FA:52:79:8D:F3:D4:38
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:484::/48
Signature Algorithm: sha256WithRSAEncryption
58:51:f6:ba:32:77:75:58:1b:f7:7c:e1:5f:1b:a1:ec:34:0c:
c8:1c:dc:86:e5:0a:c5:cb:f3:2f:3d:fd:05:78:1d:4b:be:1c:
33:90:a5:0d:a7:ff:e9:d0:ed:a7:3d:f5:9d:a1:4d:41:2d:0d:
a6:19:5b:fa:94:51:71:e6:13:73:63:c2:50:23:39:9b:ae:13:
c4:2b:41:97:75:2a:b2:44:ae:eb:fc:6a:fc:65:44:6e:e4:65:
cf:e9:38:fe:08:d3:f5:34:f4:90:cd:bd:87:0e:be:fc:2b:4f:
11:f5:91:64:57:b9:ca:40:b5:08:82:fd:dd:d8:4b:cf:6e:e8:
d3:cc:44:74:f9:b0:b1:35:85:02:7c:31:2c:39:8e:db:a3:33:
11:92:e2:39:b3:0b:c1:ca:52:de:ac:a9:14:00:4a:1c:89:10:
e6:4a:3f:46:47:d2:ac:ca:30:6f:37:23:cc:8a:a1:64:c7:57:
94:71:eb:75:08:6b:4f:1e:1c:5b:85:38:65:d2:ce:38:c8:8e:
75:c3:81:f7:03:ea:f6:fe:47:b1:c9:6c:bb:7e:ec:e2:f6:d7:
41:db:8b:ce:16:2c:02:a0:9b:cb:4d:8b:78:db:1f:cb:29:74:
3a:20:1f:b7:8e:fb:9e:d7:97:95:38:d6:d3:1d:0f:7d:3d:74:
14:f5:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:50 2025 by rpki-client