Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
File: AS201364.roa (raw, json)
Hash identifier: x93eX3gvYh9f3mWCLOlVoB13qOWuDHMgZtyCtBg/Ddg=
Subject key identifier: 93:69:5E:15:54:7C:2E:C4:66:6D:EB:8E:0A:33:43:71:18:2F:AB:26
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 19B7A69E2EAB593BF553918FAC89F40B5E357D4F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
Signing time: Tue 03 Dec 2024 21:18:26 +0000
ROA not before: Tue 03 Dec 2024 21:13:26 +0000
ROA not after: Tue 02 Dec 2025 21:18:26 +0000
asID: 201364
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
2a0f:85c1:8f3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b7:a6:9e:2e:ab:59:3b:f5:53:91:8f:ac:89:f4:0b:5e:35:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 3 21:13:26 2024 GMT
Not After : Dec 2 21:18:26 2025 GMT
Subject: CN=93695E15547C2EC4666DEB8E0A334371182FAB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:2a:8f:af:56:12:bb:d9:65:3f:55:9e:ae:
64:1f:79:7e:b2:88:35:43:40:a9:6f:63:32:a9:0f:
f4:11:12:0f:b0:c9:8d:dd:ce:a3:27:46:ef:1b:2c:
c1:7c:9f:d6:d9:c5:78:98:39:a3:83:39:52:32:e3:
c9:9d:17:9a:52:70:44:47:e9:9f:cb:49:a0:bd:c5:
8f:c1:8c:fd:1d:68:86:4c:2c:c5:52:6b:38:fd:34:
73:c4:10:d0:96:3b:3e:02:1a:62:aa:5b:ae:c5:13:
ce:2b:87:36:f4:1f:8b:c6:6a:0f:cd:12:ad:0e:1e:
e8:d3:8c:98:95:8a:9a:48:6f:bd:36:ca:37:00:61:
43:45:c1:9b:ab:87:52:35:4d:68:aa:41:d8:e7:83:
b8:99:a1:15:d0:50:ce:b6:09:7e:cd:55:4c:fd:0f:
5a:46:93:8e:21:4c:a2:c0:d7:22:e9:da:31:a2:9d:
95:bc:72:5e:d6:55:a5:28:48:aa:39:fa:18:8e:77:
27:80:0e:bc:db:41:0c:f1:30:1e:23:35:7e:ad:97:
9c:65:f0:76:14:37:44:d5:ec:96:d6:d2:46:6b:ea:
b6:39:55:a2:a8:c5:fe:f8:07:9c:2c:28:01:8a:2e:
04:d9:cb:35:25:91:83:b4:28:01:2c:50:2a:55:ec:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:5E:15:54:7C:2E:C4:66:6D:EB:8E:0A:33:43:71:18:2F:AB:26
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
2a0f:85c1:8f3::/48
Signature Algorithm: sha256WithRSAEncryption
ea:81:a8:bc:85:3c:53:23:ac:f7:eb:97:e1:e5:b1:35:d1:e1:
67:81:d8:42:e3:d0:e0:7c:9b:6b:da:70:aa:df:72:9a:a6:7c:
45:89:1a:d0:b3:78:48:c7:88:63:d6:07:ea:0f:4c:0e:e8:5d:
45:d6:0e:e2:4d:36:c7:ea:b2:c4:25:78:da:98:d1:3f:7f:85:
9f:37:f0:f1:1b:18:e2:24:4b:2b:b7:90:e9:e1:6c:94:28:60:
7d:d8:51:78:c5:54:18:0e:55:33:a4:d4:45:a3:39:da:2a:e6:
ed:2b:ef:8f:26:4b:f3:52:4d:b6:1f:9f:d9:17:8d:6d:fa:ee:
79:d3:31:81:b2:82:09:b4:91:5a:72:6d:2b:5e:83:47:cb:e6:
5f:e0:25:76:0b:a5:56:2c:f1:2e:dd:d9:8d:11:38:11:78:c9:
48:0f:a7:d1:b5:83:2d:2d:79:7c:82:85:4e:8c:0d:14:e2:12:
7a:6d:16:c7:d2:48:6f:98:fd:c8:50:2e:2d:bf:30:15:f5:f7:
45:93:51:2d:a8:b9:f4:28:53:c1:40:88:b5:f2:e2:3a:24:b6:
88:94:8e:bd:fb:05:ec:61:1a:a9:e2:ae:bd:d2:b8:1a:48:59:
d0:86:2e:b7:c8:a3:0b:78:78:52:30:d7:4e:43:32:98:06:18:
db:84:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:40 2025 by rpki-client