Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
File: AS198651.roa (raw, json)
Hash identifier: Ryea1ziO1WnCwb4wsg/qBs8tpYlzixib6z3ram3X+wY=
Subject key identifier: 4D:00:80:FC:68:3F:98:CA:E4:F4:54:24:44:7E:8D:28:A7:35:89:E6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7E652E95B9EB85CC151ED418F4A64F716F8D0939
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
Signing time: Wed 01 Jan 2025 08:53:50 +0000
ROA not before: Wed 01 Jan 2025 08:48:50 +0000
ROA not after: Wed 31 Dec 2025 08:53:50 +0000
asID: 198651
IP address blocks: 185.172.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:65:2e:95:b9:eb:85:cc:15:1e:d4:18:f4:a6:4f:71:6f:8d:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 1 08:48:50 2025 GMT
Not After : Dec 31 08:53:50 2025 GMT
Subject: CN=4D0080FC683F98CAE4F45424447E8D28A73589E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:99:12:a9:26:d2:e2:08:22:ef:79:37:7e:
22:5b:84:af:fa:a6:7e:e2:a2:05:b7:10:d9:b3:e1:
9a:2c:18:bb:b5:b6:c8:15:5f:49:fd:0e:e8:b0:15:
34:56:69:62:fb:b3:23:c9:e9:d7:b1:0b:c8:d9:60:
98:6e:01:ea:bf:93:5c:18:c8:25:f4:74:db:1f:02:
a9:e2:97:7f:04:48:fb:a0:e9:78:ab:af:c7:ff:7d:
e2:6f:2b:ca:27:41:7c:6d:1b:e6:f4:ef:c2:af:8f:
a6:f2:f4:1b:e9:b5:a7:b9:e4:b3:83:b0:9b:79:bb:
dc:f6:50:dc:56:4e:51:93:c4:4d:e8:af:80:89:9d:
82:27:07:bd:93:f5:63:d3:04:a0:26:cc:82:1c:dc:
9f:d5:70:c4:05:02:92:a3:23:b5:c7:4c:70:5a:fd:
4e:f0:b1:71:a1:f2:01:67:8a:88:0e:f3:f8:c6:64:
ac:23:97:84:f6:4a:c4:34:f2:01:fe:5f:a7:1e:da:
9e:c4:d9:88:f9:e7:f1:8c:ad:87:fc:9f:1f:9d:0d:
37:b9:8b:02:f5:b6:d3:49:4b:64:3c:aa:56:43:15:
f1:65:68:77:8e:32:47:cd:52:53:57:93:a6:81:45:
e2:e4:96:11:02:1d:c3:97:d7:13:c7:fd:31:96:cf:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:80:FC:68:3F:98:CA:E4:F4:54:24:44:7E:8D:28:A7:35:89:E6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a1:ec:1c:a1:e3:6f:73:a6:dc:aa:d8:ce:aa:35:0b:ee:e7:
c3:74:e4:9a:8a:ed:86:8e:60:1b:c5:45:9a:f1:51:d0:98:57:
b1:f0:d6:3f:bf:12:59:d2:ed:8e:cf:96:dc:4d:55:da:18:23:
ad:61:07:01:b8:d8:3a:d4:af:0f:b5:be:d3:18:df:e2:a5:50:
c4:93:74:0c:9e:2e:00:1b:79:fb:81:19:40:f4:ba:9a:53:04:
09:67:7c:82:af:ae:ce:e6:8c:9a:57:25:ed:54:fc:1a:d2:66:
7d:54:30:7c:78:10:60:e2:86:18:7f:06:b3:35:66:85:cf:4b:
0f:fd:04:68:5c:1a:f2:41:6c:57:a5:01:86:e0:69:45:1f:47:
ed:1d:f8:9c:43:9f:c7:9a:a8:af:b7:10:1a:fa:78:c4:ad:13:
6f:40:ac:f1:2a:61:b3:00:40:ad:eb:9f:92:68:c5:81:41:eb:
f0:11:32:b6:f4:a4:e1:0f:0b:19:1a:bd:df:fe:a0:f8:71:eb:
bb:11:5b:93:6d:52:54:81:d5:1d:7c:bd:3e:97:fb:2a:5e:d1:
e9:18:b2:4e:65:8f:40:ad:5e:76:7e:c1:e6:aa:81:ae:0f:0b:
d1:fe:1c:22:e1:59:c5:6b:f6:48:41:6a:5d:92:34:94:42:24:
00:e0:bf:a2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfmUulbnrhcwVHtQY9KZPcW+NCTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTAxMDEwODQ4NTBaFw0yNTEyMzEwODUzNTBaMDMxMTAvBgNV
BAMTKDREMDA4MEZDNjgzRjk4Q0FFNEY0NTQyNDQ0N0U4RDI4QTczNTg5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZP5kSqSbS4ggi73k3fiJbhK/6
pn7iogW3ENmz4ZosGLu1tsgVX0n9DuiwFTRWaWL7syPJ6dexC8jZYJhuAeq/k1wY
yCX0dNsfAqnil38ESPug6Xirr8f/feJvK8onQXxtG+b078Kvj6by9Bvptae55LOD
sJt5u9z2UNxWTlGTxE3or4CJnYInB72T9WPTBKAmzIIc3J/VcMQFApKjI7XHTHBa
/U7wsXGh8gFniogO8/jGZKwjl4T2SsQ08gH+X6ce2p7E2Yj55/GMrYf8nx+dDTe5
iwL1ttNJS2Q8qlZDFfFlaHeOMkfNUlNXk6aBReLklhECHcOX1xPH/TGWzyajAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTQCA/Gg/mMrk9FQkRH6NKKc1ieYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk4NjUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaxB
MA0GCSqGSIb3DQEBCwUAA4IBAQCdoewcoeNvc6bcqtjOqjUL7ufDdOSaiu2GjmAb
xUWa8VHQmFex8NY/vxJZ0u2Oz5bcTVXaGCOtYQcBuNg61K8Ptb7TGN/ipVDEk3QM
ni4AG3n7gRlA9LqaUwQJZ3yCr67O5oyaVyXtVPwa0mZ9VDB8eBBg4oYYfwazNWaF
z0sP/QRoXBryQWxXpQGG4GlFH0ftHficQ5/HmqivtxAa+njErRNvQKzxKmGzAECt
65+SaMWBQevwETK29KThDwsZGr3f/qD4ceu7EVuTbVJUgdUdfL0+l/sqXtHpGLJO
ZY9ArV52fsHmqoGuDwvR/hwi4VnFa/ZIQWpdkjSUQiQA4L+i
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:26 2025 by rpki-client