Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214675.roa
File: AS214675.roa (raw, json)
Hash identifier: RcdSlBW5Uybku8RwmVbQzY/blYx40sFi2blhzt+no3k=
Subject key identifier: 51:B3:15:7A:F7:47:C3:C6:CC:56:8E:05:67:A2:19:21:29:87:E3:31
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 01638A7D585B0FB440D4E3A5360817D9D8CDE41A
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214675.roa
Signing time: Fri 12 Jul 2024 03:32:05 +0000
ROA not before: Fri 12 Jul 2024 03:27:05 +0000
ROA not after: Fri 11 Jul 2025 03:32:05 +0000
asID: 214675
IP address blocks: 2a0f:85c1:3fa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:63:8a:7d:58:5b:0f:b4:40:d4:e3:a5:36:08:17:d9:d8:cd:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 12 03:27:05 2024 GMT
Not After : Jul 11 03:32:05 2025 GMT
Subject: CN=51B3157AF747C3C6CC568E0567A219212987E331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:f6:1e:a9:21:c6:03:25:40:2a:80:b2:ad:
1a:0b:7e:8d:48:33:64:36:a4:a6:e5:ee:6d:5e:c8:
45:e8:9e:43:a8:d8:5e:3e:45:b7:83:55:c3:72:9c:
0c:8b:f0:5d:6a:b5:73:e0:98:6e:1c:4e:38:8a:2c:
dd:13:2f:10:47:cd:22:97:5d:47:12:ba:19:1b:ea:
c7:83:4b:2f:8e:b5:7e:fb:e4:c8:a5:97:66:29:e5:
d2:41:14:0f:75:8b:e1:57:89:ae:5d:e5:87:c5:af:
2e:bc:b3:a3:80:df:46:a0:83:28:1c:80:12:ba:c6:
a3:ae:82:a6:3c:21:36:b3:23:1b:b2:a1:c3:9e:7e:
dc:4d:19:ec:09:78:e1:98:57:47:fa:c8:cf:2c:2b:
01:bc:82:d2:8d:33:f1:c1:fd:15:43:38:5f:43:d1:
c7:2a:18:32:ed:33:12:b8:12:e4:30:6f:68:eb:ef:
cc:4e:c0:18:8b:8a:2c:22:9b:6e:99:8f:ac:d2:5a:
28:7e:ae:41:c4:9b:cf:79:9c:52:9e:69:1d:65:85:
b0:bb:9c:3c:d7:20:85:d7:1d:db:29:c2:20:29:46:
b2:6d:0f:82:fd:5f:ce:98:0e:8f:95:0a:fa:94:9e:
2e:e4:46:41:59:84:31:84:c4:62:1d:5e:c4:85:b5:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:15:7A:F7:47:C3:C6:CC:56:8E:05:67:A2:19:21:29:87:E3:31
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3fa::/48
Signature Algorithm: sha256WithRSAEncryption
6e:93:ae:02:59:06:41:d9:0a:3e:14:2e:07:97:b4:2b:38:a5:
2b:00:9a:fb:d5:a1:74:5d:a4:7b:00:42:9c:1d:02:a4:ba:12:
2e:37:ff:77:c5:bf:77:ca:ec:50:9e:e2:51:a2:02:b8:25:d9:
b2:c6:ac:b4:de:70:fc:b8:78:9e:97:5e:64:73:57:fd:a2:fa:
57:33:09:a3:7a:71:24:e4:0f:56:02:71:7f:35:1b:27:94:12:
86:ca:71:0a:08:2c:ea:b4:32:9c:03:f3:49:25:15:c8:fd:b3:
13:12:46:c0:84:c6:a8:9c:ee:e6:e9:70:58:d1:f8:6a:1b:f4:
d5:55:65:9c:fa:af:30:21:96:96:fa:a8:ea:30:73:3e:59:0e:
a4:81:e8:20:dc:38:f6:17:c4:01:45:37:33:92:91:a9:17:40:
1a:30:df:a2:fb:bb:5e:fd:97:dc:92:7a:5b:e4:57:46:9f:94:
a3:09:b0:8b:10:2a:9a:b1:b7:61:b6:38:ea:d8:d9:5e:b1:d0:
2f:e7:7d:65:ff:f8:60:d0:4e:dc:13:7b:17:72:5f:0e:c8:8c:
8d:8d:4d:f8:25:4d:3c:1b:7d:66:68:c1:73:f9:98:70:e8:6b:
de:21:5b:46:e3:bb:9b:f0:d5:7f:ff:98:fa:b3:65:d4:4d:11:
b1:a8:68:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAWOKfVhbD7RA1OOlNggX2djN5BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA3MTIwMzI3MDVaFw0yNTA3MTEwMzMyMDVaMDMxMTAvBgNV
BAMTKDUxQjMxNTdBRjc0N0MzQzZDQzU2OEUwNTY3QTIxOTIxMjk4N0UzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0vYeqSHGAyVAKoCyrRoLfo1I
M2Q2pKbl7m1eyEXonkOo2F4+RbeDVcNynAyL8F1qtXPgmG4cTjiKLN0TLxBHzSKX
XUcSuhkb6seDSy+OtX775Mill2Yp5dJBFA91i+FXia5d5YfFry68s6OA30aggygc
gBK6xqOugqY8ITazIxuyocOeftxNGewJeOGYV0f6yM8sKwG8gtKNM/HB/RVDOF9D
0ccqGDLtMxK4EuQwb2jr78xOwBiLiiwim26Zj6zSWih+rkHEm895nFKeaR1lhbC7
nDzXIIXXHdspwiApRrJtD4L9X86YDo+VCvqUni7kRkFZhDGExGIdXsSFtRfjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUbMVevdHw8bMVo4FZ6IZISmH4zEwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMjE0Njc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQP6MA0GCSqGSIb3DQEBCwUAA4IBAQBuk64CWQZB2Qo+FC4Hl7QrOKUrAJr71aF0
XaR7AEKcHQKkuhIuN/93xb93yuxQnuJRogK4Jdmyxqy03nD8uHiel15kc1f9ovpX
MwmjenEk5A9WAnF/NRsnlBKGynEKCCzqtDKcA/NJJRXI/bMTEkbAhMaonO7m6XBY
0fhqG/TVVWWc+q8wIZaW+qjqMHM+WQ6kgegg3Dj2F8QBRTczkpGpF0AaMN+i+7te
/Zfcknpb5FdGn5SjCbCLECqasbdhtjjq2NlesdAv531l//hg0E7cE3sXcl8OyIyN
jU34JU08G31maMFz+Zhw6GveIVtG47ub8NV//5j6s2XUTRGxqGiH
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org