Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151106.roa
File: AS151106.roa (raw, json)
Hash identifier: wBG//uxP2c6CsH9F0afbYDioOSVcq1ffNYqequywVzM=
Subject key identifier: B5:19:72:B0:D9:69:85:5C:17:E9:E5:E9:A6:01:43:39:19:59:40:9F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 368DE1659BC2639A811A9F6DEDCA5A5EFF15FFDB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151106.roa
Signing time: Fri 21 Feb 2025 06:33:31 +0000
ROA not before: Fri 21 Feb 2025 06:28:31 +0000
ROA not after: Fri 20 Feb 2026 06:33:31 +0000
asID: 151106
IP address blocks: 103.141.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8d:e1:65:9b:c2:63:9a:81:1a:9f:6d:ed:ca:5a:5e:ff:15:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 21 06:28:31 2025 GMT
Not After : Feb 20 06:33:31 2026 GMT
Subject: CN=B51972B0D969855C17E9E5E9A60143391959409F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:a5:74:71:18:e4:96:f1:d5:93:f0:45:7d:
fc:17:27:2d:07:78:fa:b7:f9:37:56:d8:a9:91:40:
53:cc:17:3e:1f:fd:bb:bf:df:8f:46:cc:20:ed:87:
7f:17:25:58:8f:08:7b:f2:e5:78:f7:6a:cb:01:71:
69:77:b7:13:fd:34:13:ce:06:f5:94:99:ab:e2:18:
f9:80:ae:27:dc:b6:b0:c4:16:fd:2b:75:3a:06:00:
db:f9:27:6a:19:4c:f8:5b:77:a9:0d:50:7b:42:4d:
3e:83:b5:9c:9e:99:aa:53:5d:07:b5:53:43:ee:e2:
f0:1f:3d:35:96:54:bb:c7:ad:88:01:7c:2d:b6:b7:
73:3e:ed:2d:30:91:62:b4:86:41:96:44:5a:8a:bb:
c5:c5:41:a3:e7:d4:2c:c3:7d:42:79:88:1b:65:51:
7e:a0:47:52:98:4a:19:54:ee:63:f2:32:de:e0:6a:
04:1f:28:07:50:db:74:2a:9f:af:44:87:40:f8:ce:
db:fd:ba:93:f8:ed:48:77:25:f4:d2:9e:20:5a:09:
45:80:96:73:77:a1:dc:b3:ef:30:54:b4:e5:87:ee:
5f:e6:ab:50:27:7f:9f:85:d2:75:66:fc:b9:e7:26:
55:3f:ae:41:1c:f6:dd:94:e1:31:0c:aa:1c:b5:f8:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:72:B0:D9:69:85:5C:17:E9:E5:E9:A6:01:43:39:19:59:40:9F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS151106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:68:93:91:57:f5:ec:19:c2:d9:ff:20:81:48:ec:02:8a:8a:
42:31:5c:ab:cc:b2:21:81:07:53:8b:3d:fc:f5:75:17:d3:81:
61:b0:2a:3b:eb:5d:95:a5:56:da:fb:da:c9:e5:b3:f6:d5:cc:
ce:8a:c3:4c:f3:b4:bf:d8:a9:4a:5f:a5:9b:7d:f3:ee:b1:9b:
0f:83:b8:e1:b4:7f:37:cb:ce:cc:12:8c:12:6a:95:ee:cd:2d:
cb:65:23:26:05:45:91:f4:f8:c6:ae:90:a9:4a:da:90:cf:45:
9f:c7:06:06:15:52:69:1b:86:d0:69:37:22:b1:b2:e4:e2:0e:
7d:69:4f:e6:a9:5e:9c:2f:01:79:c8:a6:61:85:92:90:32:bb:
a2:84:e1:12:a6:65:0f:8b:df:91:26:10:21:d9:ac:89:37:c4:
55:05:fc:4e:fb:89:c0:3e:09:e1:54:a8:d0:b4:0a:fe:d0:94:
3e:01:f9:3e:53:bb:f9:ba:4b:39:64:9b:b7:ef:4e:c6:21:dc:
5b:11:74:1e:a1:a9:5b:ac:cf:3e:04:c2:ff:18:66:44:e7:f5:
6c:e5:36:f3:9b:68:7f:98:c9:4a:e6:1a:57:64:2d:3f:ef:69:
d9:16:76:6d:48:42:7d:f3:20:f2:18:e1:2e:b8:c3:8f:07:93:
97:ca:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:49 2025 by rpki-client