Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: vOvcNo2n5Xvtn3qXm77+DosOIhzO4oyh12aKRjJkIPI=
Subject key identifier: F1:47:D5:16:C6:2B:20:61:92:E8:12:C2:3B:28:D0:15:42:8B:6F:D6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4B7D3BFA71F5DBA7C85863207580DEAC4C3103D4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
Signing time: Wed 15 Jan 2025 04:03:41 +0000
ROA not before: Wed 15 Jan 2025 03:58:41 +0000
ROA not after: Wed 14 Jan 2026 04:03:41 +0000
asID: 215287
IP address blocks: 141.11.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7d:3b:fa:71:f5:db:a7:c8:58:63:20:75:80:de:ac:4c:31:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 15 03:58:41 2025 GMT
Not After : Jan 14 04:03:41 2026 GMT
Subject: CN=F147D516C62B206192E812C23B28D015428B6FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:ed:a3:06:f6:74:7e:a4:a7:12:2b:23:09:
5f:8f:f8:98:3e:8e:ef:e1:50:70:c3:df:85:39:b6:
90:fe:ab:07:ea:cb:fe:6b:e9:03:98:3c:65:05:af:
96:5f:6f:37:34:8b:67:8d:45:13:38:d6:6c:13:ad:
19:ac:b1:96:cb:d3:84:bc:24:85:76:0d:22:f3:ea:
fc:e6:75:e3:f9:c0:38:2d:50:26:56:ff:45:bd:78:
9c:f0:c5:5f:4e:ab:9a:2e:da:24:1d:be:a5:94:17:
8f:ae:3d:95:37:bb:7a:b1:0a:16:e0:dd:f3:f8:cd:
e3:7a:ca:3b:af:ad:f4:62:5f:9a:83:b0:17:f8:44:
ba:95:6d:7b:9e:c5:8c:07:86:b2:f2:1d:f4:02:11:
60:2a:ab:20:a1:ca:43:b1:2d:e0:87:b8:66:76:f6:
20:8d:c1:bd:e6:da:a6:9c:54:c6:21:86:88:13:b6:
4f:20:b4:a3:fe:66:ab:73:0b:19:0c:e5:34:64:0f:
47:72:44:ed:77:83:1c:a0:60:b0:68:e5:bc:6e:36:
b4:be:78:69:6a:e3:e7:bc:1e:ac:6e:3d:34:9f:9a:
cf:f7:f1:7a:95:2d:c0:1b:75:eb:97:ed:c4:fb:55:
a7:d9:a0:7c:fa:9c:f0:16:fa:17:7a:72:fb:c3:b1:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:D5:16:C6:2B:20:61:92:E8:12:C2:3B:28:D0:15:42:8B:6F:D6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0e:10:e5:9f:8a:53:8a:f3:33:54:5f:34:d8:06:b9:82:0b:
47:c8:27:fb:f6:65:21:32:bf:2e:35:1d:3e:ac:a8:05:45:ce:
02:11:e9:d0:f5:f7:d9:84:67:c0:cd:47:4b:d8:f0:46:5e:91:
80:cb:00:b5:1c:a4:34:41:92:d3:2c:1e:4d:d9:19:ba:16:64:
15:1d:57:3c:92:88:bb:9e:e2:85:a6:2b:ba:ed:46:26:e8:76:
2f:92:3f:1b:87:b7:17:eb:fe:3c:9b:e7:7f:52:4e:1b:15:8d:
3c:7e:0c:2c:d0:69:4b:86:0e:c1:cf:24:0e:d8:e8:49:e5:c7:
31:f9:e8:23:b8:18:ee:7e:80:5d:1f:04:39:64:81:ca:ff:6d:
af:9e:17:22:08:66:26:2d:45:13:83:44:79:48:d3:29:99:8f:
83:e9:24:6d:23:79:21:c4:39:27:b2:19:61:7a:de:2e:e1:11:
09:6d:24:b3:a0:4d:02:43:26:0b:aa:44:e7:6f:8b:db:da:fa:
55:c5:07:91:ae:ff:d8:06:14:07:05:04:0b:7b:46:33:68:fa:
ff:9c:62:c7:d9:4d:cb:a8:c1:66:03:f2:70:03:4c:67:d7:46:
4b:e4:0e:33:27:86:b1:16:51:f7:ac:21:1d:7f:17:1e:17:75:
1b:9a:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:47 2025 by rpki-client