Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
File: AS211014.roa (raw, json)
Hash identifier: +T2Kdzs6jWSKTbJN5sJMScLgm3jZyf5fUluDFcwe3FI=
Subject key identifier: 98:C2:2C:02:6D:95:E4:63:94:45:16:07:E6:C7:BF:48:24:40:BE:38
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 25AD1FE9FAE36272CA6113D2FB56FFA6AC14E489
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
Signing time: Wed 08 Jan 2025 02:58:39 +0000
ROA not before: Wed 08 Jan 2025 02:53:39 +0000
ROA not after: Wed 07 Jan 2026 02:58:39 +0000
asID: 211014
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ad:1f:e9:fa:e3:62:72:ca:61:13:d2:fb:56:ff:a6:ac:14:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 8 02:53:39 2025 GMT
Not After : Jan 7 02:58:39 2026 GMT
Subject: CN=98C22C026D95E46394451607E6C7BF482440BE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:ab:68:e4:5b:db:96:87:fb:dd:3f:e3:97:
cd:22:bd:35:6a:49:a1:39:b7:9b:04:1a:5d:cc:4a:
9c:2a:59:70:69:78:6b:ab:05:a9:f8:3a:b0:3c:0a:
ca:68:c7:14:45:d1:dc:3b:ae:e4:99:b6:43:a3:1b:
d5:df:f0:fc:8f:34:54:50:ef:02:9b:7d:c6:d8:f4:
73:1b:14:5e:82:2d:5b:8f:ec:1c:90:ac:c7:18:19:
e1:a5:ef:18:85:f2:40:d5:d4:61:99:1a:e1:5f:5a:
a3:e4:81:8a:35:9c:1d:68:db:0c:33:4a:67:9b:3d:
be:9b:d0:81:e7:97:9d:e3:9b:3c:04:3a:ef:ac:db:
c0:fe:84:42:51:a3:91:0d:b2:2c:aa:b1:3a:ea:5a:
a8:4f:43:8d:5e:6c:e6:d6:f7:75:69:82:35:c8:99:
a8:78:a0:14:81:55:d5:14:08:4c:11:25:c6:83:11:
21:a8:a7:a3:b7:9f:2e:cf:61:75:3f:39:5c:23:bc:
a6:7d:cb:ab:9a:3a:1b:e4:bd:30:86:07:c7:91:49:
66:a8:92:63:da:4b:88:f2:64:0f:e9:3f:58:a9:77:
78:ec:82:13:70:c7:8b:83:09:c5:11:94:ca:41:f0:
c4:4d:aa:40:33:c6:53:ea:37:4a:24:2e:66:89:79:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C2:2C:02:6D:95:E4:63:94:45:16:07:E6:C7:BF:48:24:40:BE:38
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0f:ab:37:f2:62:c9:a4:ac:f2:1d:23:fb:b6:41:c2:e4:8e:
80:70:23:eb:ac:5a:7e:d9:ce:cd:06:0b:2b:47:f0:6b:20:68:
e9:8f:d1:56:48:0d:ea:18:40:49:7f:fc:29:92:2e:f0:82:7a:
89:cd:02:cd:30:a4:d4:ab:fc:83:e8:dd:26:45:bf:d4:75:b0:
16:44:f7:6b:cc:b9:b1:63:ed:36:62:6f:20:40:fe:36:78:a6:
9f:b0:52:0e:28:a4:71:be:90:bb:95:d6:30:7c:54:26:55:27:
f2:8e:b4:4b:ba:ad:20:38:81:23:96:a1:4a:81:e1:7c:c7:0b:
d2:b6:28:15:e6:6c:28:20:20:d7:42:53:f7:34:7b:1a:c3:e4:
f5:f2:60:38:c3:f1:60:2f:6a:9a:a1:1a:bc:cf:50:b9:83:97:
94:0d:c1:40:b5:5c:9f:aa:0d:8b:39:8c:48:de:0d:32:cb:fa:
8f:f6:48:3c:26:4f:f7:14:b4:7e:9a:9b:ae:60:98:c7:5e:41:
ba:2e:f1:66:ef:06:e6:c3:19:d0:b0:ed:fa:60:7a:bc:26:c6:
e2:b4:4a:0d:28:7a:c6:73:63:51:26:21:3c:01:e6:cc:0f:a6:
ee:c7:0d:13:79:6d:1a:fd:5c:9e:aa:c8:26:07:fb:2a:26:0c:
b9:9d:49:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:12 2025 by rpki-client