Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: +QnjSnQQz1RRxx0J6RXYUp17rLNUP8957TWwyWY/8xQ=
Subject key identifier: AB:78:AE:79:66:C8:D7:D5:AB:1B:9A:26:F8:32:22:C0:56:21:5B:C4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 39C49E2D891C63A43DC5E98EF0D60BEAF889C254
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
Signing time: Sat 04 Jan 2025 15:18:48 +0000
ROA not before: Sat 04 Jan 2025 15:13:48 +0000
ROA not after: Sat 03 Jan 2026 15:18:48 +0000
asID: 215304
IP address blocks: 141.11.240.0/24 maxlen: 24
194.60.89.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c4:9e:2d:89:1c:63:a4:3d:c5:e9:8e:f0:d6:0b:ea:f8:89:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 4 15:13:48 2025 GMT
Not After : Jan 3 15:18:48 2026 GMT
Subject: CN=AB78AE7966C8D7D5AB1B9A26F83222C056215BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:54:f9:a6:6b:6f:5f:a6:a6:2b:31:b1:3c:
4e:0d:94:63:06:a8:ed:a3:7e:09:58:8e:3f:92:3a:
05:21:bc:80:4f:cb:81:26:79:ca:98:fe:ec:e3:b5:
e1:ee:5e:bc:1b:03:2f:5a:00:f3:bd:6d:7a:37:d3:
fc:ca:90:a1:8f:cf:f9:99:bd:31:05:9f:b9:b2:53:
4e:0b:ea:a3:22:e1:e2:e4:c9:00:e0:5e:05:23:4d:
17:20:d7:e8:91:70:68:54:9b:44:13:e8:9d:d9:7b:
18:00:f8:d4:cc:06:96:d6:c8:c9:75:af:ba:6f:9a:
50:a2:37:a8:f7:b7:72:d1:30:48:53:a2:ba:d1:c7:
2a:fc:40:e9:61:54:14:8f:23:57:0e:b6:eb:4d:a8:
98:4f:c4:17:25:48:1c:c9:d4:69:9a:83:93:33:f9:
d5:65:5d:0f:f9:89:39:80:c9:24:30:15:bd:b0:f5:
78:6f:ca:1f:c5:c7:f7:05:8e:85:9c:4d:5d:0e:18:
fc:cb:53:c3:15:75:ec:2a:80:c1:ab:09:31:4a:db:
f8:ff:97:e5:43:52:45:27:3e:f9:81:37:cf:3e:db:
1e:05:ec:a7:61:40:68:f7:06:24:58:bd:8a:a4:b8:
63:54:6d:2e:c5:66:4e:10:89:a4:62:06:09:b8:b8:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:AE:79:66:C8:D7:D5:AB:1B:9A:26:F8:32:22:C0:56:21:5B:C4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
194.60.89.0-194.60.90.255
Signature Algorithm: sha256WithRSAEncryption
42:a2:7a:14:40:41:e4:fa:cd:55:68:40:77:15:5c:76:88:41:
2e:0c:e3:7a:fb:19:e7:92:3c:bf:91:79:a4:46:cf:c6:7c:10:
27:5c:e4:3f:1a:36:e8:21:c8:78:6c:7b:57:4b:99:35:62:25:
45:fb:0e:9a:06:38:0a:5a:7e:f2:e3:18:82:6e:7b:e8:8c:61:
9a:e6:95:94:3a:a7:6b:65:83:12:13:a0:25:fc:aa:91:04:c6:
4d:3a:32:52:23:52:42:7f:47:1b:aa:d8:8a:59:03:cd:ea:61:
59:a1:eb:31:64:65:21:fa:95:04:7b:67:05:55:9f:55:4e:d8:
b0:d1:28:7d:04:9f:0f:35:f9:57:19:42:f7:6e:49:26:d2:8c:
78:69:68:25:d0:97:87:a6:45:cf:f0:3f:c5:f6:f4:79:5d:c9:
08:59:17:78:c4:67:c6:06:9b:f1:4d:45:d7:05:a1:13:c6:8c:
af:1f:ec:fc:4c:97:53:e0:02:72:b7:2f:88:51:95:01:70:ef:
ca:7d:eb:69:e9:68:6b:d4:39:a2:a2:d8:8d:cd:bd:7d:0e:f6:
fa:55:90:34:18:26:4d:93:27:56:14:6c:73:e1:59:e3:d1:d8:
47:56:2e:a7:14:22:32:44:e6:75:bd:86:6a:43:7f:e6:f2:6a:
ac:b0:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:46 2025 by rpki-client