Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
File: AS215280.roa (raw, json)
Hash identifier: yCftr4mi6xiAbprH/+T19c9lVbQpU72Tnc6GimhFUog=
Subject key identifier: E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 618203DA078C2FD23D3F3DEAA8C0DFFDED9FE3A9
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
Signing time: Wed 20 Mar 2024 23:20:40 +0000
ROA not before: Wed 20 Mar 2024 23:15:40 +0000
ROA not after: Wed 19 Mar 2025 23:20:40 +0000
asID: 215280
IP address blocks: 2a07:54c1:3800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:03:da:07:8c:2f:d2:3d:3f:3d:ea:a8:c0:df:fd:ed:9f:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Mar 20 23:15:40 2024 GMT
Not After : Mar 19 23:20:40 2025 GMT
Subject: CN=E3118FDCA6AC1260B6B3A470C5D3DCE167B8B6EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:58:df:36:30:22:fe:14:d7:6f:d7:5c:a3:
c9:4b:44:f0:35:cb:4e:f9:b3:f8:85:3f:58:fb:25:
ef:b0:59:88:b9:cd:62:28:7f:5d:64:e5:1d:d2:85:
36:fa:63:0d:8b:e8:a4:c2:40:02:1a:52:17:3c:46:
02:77:66:09:25:83:5c:ba:5a:89:aa:29:5c:3c:60:
32:38:65:38:55:c0:60:1e:62:66:b5:5d:39:41:f4:
ac:fc:59:50:a2:35:b4:8c:9e:7e:95:0f:67:42:f7:
81:78:d3:a4:e3:a8:a2:a3:33:47:e4:e4:71:ca:f5:
63:97:da:43:90:64:06:ee:90:0e:f8:05:0b:7a:2c:
37:5c:b8:e4:39:0a:18:94:5f:2a:d9:e7:cf:38:a2:
bb:1a:92:30:23:74:82:86:8b:e4:ce:2e:25:6b:57:
9a:a4:5f:98:51:9c:02:18:43:76:78:1f:ca:0d:88:
25:3a:c1:1b:91:4a:86:eb:6e:db:4a:d2:84:ad:62:
bb:0b:df:7d:12:dc:f1:bb:90:93:8c:3a:7c:1a:3e:
72:ed:a1:72:b1:07:50:ce:c4:1a:f3:93:ff:f7:3b:
b2:96:ff:4f:3c:11:be:28:9a:82:67:5f:af:3c:3f:
dd:fc:eb:32:f8:62:0d:6f:7b:2a:b6:52:da:57:d6:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:3800::/40
Signature Algorithm: sha256WithRSAEncryption
41:4f:14:8d:91:af:38:37:c1:eb:86:d3:a2:22:83:6b:c8:a9:
ea:91:18:7b:c1:cc:45:3f:de:b5:93:8f:c8:a9:3b:b8:1b:8c:
5d:7e:21:2d:88:67:b5:8f:c8:fb:48:f3:4f:30:15:1e:d6:72:
0c:c3:53:d2:ba:fe:22:f6:12:f9:aa:c5:c1:55:16:3c:ec:a9:
a2:3c:f1:92:82:be:2e:83:c2:7a:63:01:ac:9c:a3:28:0a:77:
ac:e6:7a:3a:c3:d3:eb:c6:f5:de:ee:8c:d2:38:fe:e6:d1:40:
80:c5:bb:39:22:34:39:32:ef:3e:fd:81:24:ed:8e:68:ad:79:
b8:e3:9a:34:52:2d:4f:33:93:bc:9c:67:85:7f:42:f9:9e:33:
93:8a:17:02:95:55:67:15:fb:26:ad:9b:f3:64:42:9d:7d:8c:
a8:d1:2b:7f:2a:83:eb:1a:43:74:3c:af:dc:11:cc:2f:2a:d1:
73:41:26:ff:06:21:e6:ac:fb:22:0b:9d:78:24:a1:2a:a6:15:
4b:f4:fc:00:4e:f5:16:11:98:66:61:98:4a:9a:b4:21:3f:30:
d7:ba:55:78:2b:d1:bc:b1:40:08:d4:19:bd:e9:29:db:6e:63:
42:bf:ab:b8:d4:d6:51:8a:29:68:80:71:35:37:b0:32:c0:9f:
62:cb:b3:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYYID2geML9I9Pz3qqMDf/e2f46kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yNDAzMjAyMzE1NDBaFw0yNTAzMTkyMzIwNDBaMDMxMTAvBgNV
BAMTKEUzMTE4RkRDQTZBQzEyNjBCNkIzQTQ3MEM1RDNEQ0UxNjdCOEI2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu1jfNjAi/hTXb9dco8lLRPA1
y075s/iFP1j7Je+wWYi5zWIof11k5R3ShTb6Yw2L6KTCQAIaUhc8RgJ3Zgklg1y6
WomqKVw8YDI4ZThVwGAeYma1XTlB9Kz8WVCiNbSMnn6VD2dC94F406TjqKKjM0fk
5HHK9WOX2kOQZAbukA74BQt6LDdcuOQ5ChiUXyrZ5884orsakjAjdIKGi+TOLiVr
V5qkX5hRnAIYQ3Z4H8oNiCU6wRuRSobrbttK0oStYrsL330S3PG7kJOMOnwaPnLt
oXKxB1DOxBrzk//3O7KW/088Eb4omoJnX688P9386zL4Yg1veyq2UtpX1ra1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4xGP3KasEmC2s6RwxdPc4We4tu8wHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjE1MjgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU
wTgwDQYJKoZIhvcNAQELBQADggEBAEFPFI2Rrzg3weuG06Iig2vIqeqRGHvBzEU/
3rWTj8ipO7gbjF1+IS2IZ7WPyPtI808wFR7WcgzDU9K6/iL2EvmqxcFVFjzsqaI8
8ZKCvi6DwnpjAaycoygKd6zmejrD0+vG9d7ujNI4/ubRQIDFuzkiNDky7z79gSTt
jmitebjjmjRSLU8zk7ycZ4V/QvmeM5OKFwKVVWcV+yatm/NkQp19jKjRK38qg+sa
Q3Q8r9wRzC8q0XNBJv8GIeas+yILnXgkoSqmFUv0/ABO9RYRmGZhmEqatCE/MNe6
VXgr0byxQAjUGb3pKdtuY0K/q7jU1lGKKWiAcTU3sDLAn2LLs5A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:36 2025 by rpki-client