Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: 30lhMXl2dUh/JiBSwH6Cg/1hhDKDcVblIqPwE6sDk0Q=
Subject key identifier: 57:36:28:EA:2A:00:B4:FD:E7:80:64:48:4E:84:7F:EA:DB:8E:F7:8A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3ED5283195C715985511EFF58919D76F3C574006
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
Signing time: Fri 04 Apr 2025 00:01:59 +0000
ROA not before: Thu 03 Apr 2025 23:56:59 +0000
ROA not after: Fri 03 Apr 2026 00:01:59 +0000
asID: 215304
IP address blocks: 141.11.108.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d5:28:31:95:c7:15:98:55:11:ef:f5:89:19:d7:6f:3c:57:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 23:56:59 2025 GMT
Not After : Apr 3 00:01:59 2026 GMT
Subject: CN=573628EA2A00B4FDE78064484E847FEADB8EF78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:79:70:6c:72:d7:0b:35:af:f8:fa:3e:88:
e1:bd:a0:85:5e:cc:2b:7e:ba:d9:42:76:fd:90:f1:
70:46:3d:0e:57:49:22:1b:a1:c4:d2:37:e1:b7:e6:
1b:0e:8c:2e:15:85:1a:dd:4d:71:b5:e0:1f:be:ef:
76:62:5e:4a:23:3e:0f:e1:b2:21:a0:12:74:6f:7f:
4d:9d:fa:bb:a1:b6:02:af:96:4a:11:f9:2d:ea:47:
97:12:20:b5:90:1f:3e:95:d0:0f:76:83:72:b4:e6:
df:9e:e8:1e:34:2d:17:3f:4b:c1:87:e5:3c:86:e4:
59:87:fc:73:90:56:12:f1:52:80:87:0b:2b:c9:fc:
36:68:7a:4a:98:ca:5c:20:2c:15:04:cd:48:6d:14:
39:a7:72:30:d6:14:9c:a0:e5:eb:58:6e:c5:c7:a0:
16:cb:06:88:c0:ed:ae:ef:71:41:3e:42:5d:43:23:
4c:ac:70:d2:c2:6d:1e:d3:ef:06:f5:8f:12:5b:0f:
14:58:3e:af:e1:e8:e0:4a:0d:a1:67:51:da:f0:b7:
19:b1:05:ba:b4:bb:83:1a:48:31:5e:38:80:ab:d4:
ca:64:f6:84:d9:54:b3:5f:f2:1a:f0:9c:4e:23:57:
67:f5:c9:24:1b:ad:1e:88:f3:52:b1:96:fe:51:45:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:28:EA:2A:00:B4:FD:E7:80:64:48:4E:84:7F:EA:DB:8E:F7:8A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:9a:5f:0a:be:03:54:29:5e:b6:f7:44:c7:ec:40:0d:f3:
3e:b7:4e:62:c1:8c:61:12:75:c7:e0:77:bd:ee:c0:65:bd:8f:
7c:b6:49:12:b2:8c:b0:19:c6:5a:dc:90:1d:9e:fa:67:bc:64:
df:ae:17:88:12:6f:3f:59:59:d4:06:7c:b7:22:fd:18:59:86:
22:74:a8:e5:35:fc:ba:ce:89:8d:7c:e3:3f:26:0c:c7:e1:fb:
e4:fb:10:9b:e0:f9:8a:32:4f:f0:a2:c2:f6:32:80:b1:fa:78:
b7:e4:bd:db:ab:7c:1c:56:85:37:a8:99:7b:94:e7:69:6d:0e:
f9:23:d5:14:dc:03:4d:93:0c:05:70:f3:b3:e9:d3:d4:ab:f6:
5e:05:df:7d:0e:52:04:37:20:4a:d1:aa:c7:0e:b6:03:1a:2d:
80:dd:bc:44:dc:88:34:fd:18:96:1d:08:ed:42:06:ce:87:07:
db:a2:4e:15:70:7a:1f:9d:84:41:ac:62:ae:11:9a:be:0e:60:
ae:9f:c1:a3:ef:b9:40:7b:26:da:6e:8c:bb:c1:f6:58:34:7f:
04:37:e8:9a:6d:91:c1:bb:ad:41:52:0f:1e:cb:76:3e:52:fb:
bb:67:ba:f2:b6:33:55:83:35:08:38:41:18:67:9e:4e:a9:60:
9c:7d:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net