Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
File: AS202656.roa (raw, json)
Hash identifier: 9TEerOmu32Jf6RfSSSQ9jS0gTvYRPw90S18oV1ts5NI=
Subject key identifier: E3:96:52:35:00:EF:5D:E2:DD:47:71:A6:82:61:D9:E1:46:0A:B1:77
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 716B635EBE4B5D8570256A76221B10D79BB5D099
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
Signing time: Tue 18 Mar 2025 00:00:14 +0000
ROA not before: Mon 17 Mar 2025 23:55:14 +0000
ROA not after: Tue 17 Mar 2026 00:00:14 +0000
asID: 202656
IP address blocks: 179.61.248.0/24 maxlen: 24
194.110.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6b:63:5e:be:4b:5d:85:70:25:6a:76:22:1b:10:d7:9b:b5:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 17 23:55:14 2025 GMT
Not After : Mar 17 00:00:14 2026 GMT
Subject: CN=E396523500EF5DE2DD4771A68261D9E1460AB177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:08:02:fd:82:7d:64:17:cb:b7:02:4c:28:
b4:9f:12:c7:87:85:f9:b3:64:83:05:30:36:39:3a:
73:83:87:6a:bc:27:b1:ef:36:76:a3:22:5a:9c:ff:
2d:fb:27:22:03:78:c0:6a:56:65:29:eb:ae:f1:5e:
e6:92:9c:8d:fe:35:3c:96:d1:9f:7f:0f:be:96:6b:
a9:0d:1e:cc:b4:85:ae:e7:b4:18:e2:ce:e5:b8:3f:
5e:51:e3:83:c2:21:ec:e8:e8:43:24:b7:2b:c8:36:
64:f2:28:4c:07:7f:1b:0b:b8:6c:b6:a9:2b:53:36:
eb:68:16:c9:da:29:0c:e5:49:61:2d:65:9a:fc:54:
25:13:eb:ed:69:4e:52:62:43:54:46:bb:35:51:93:
1a:a9:32:d1:b1:ac:bf:6c:55:e8:1f:04:99:d8:48:
16:74:d4:5c:60:50:ae:95:f5:fd:c8:e9:02:d5:04:
1f:f9:96:b3:0b:de:fb:81:8f:32:3d:57:66:13:b3:
65:86:6e:3c:18:61:30:75:5e:c4:f3:3c:71:5f:7b:
20:77:c6:aa:8a:4e:5f:0d:ab:90:92:5b:b1:35:80:
2d:37:46:a9:12:2b:48:83:6e:2f:ba:61:5f:dd:94:
c1:31:42:d9:8f:71:22:69:94:25:81:d4:2c:0a:a8:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:96:52:35:00:EF:5D:E2:DD:47:71:A6:82:61:D9:E1:46:0A:B1:77
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.248.0/24
194.110.14.0/24
Signature Algorithm: sha256WithRSAEncryption
75:01:f4:af:be:09:b4:66:31:df:9e:d0:f6:77:79:dd:d6:71:
9b:0e:25:45:3f:20:58:5b:90:24:00:7e:3d:07:42:1f:30:de:
db:c2:c6:e5:79:66:18:65:cb:ec:50:28:d0:2a:eb:81:95:83:
10:52:4a:a7:49:a9:09:89:b9:05:2d:37:1b:28:07:60:2d:7c:
2a:a4:9d:f5:ff:63:3d:60:dd:70:16:81:1d:3b:ea:3e:ab:c8:
eb:22:24:ff:27:30:99:7a:74:99:f0:dd:39:ea:17:06:a9:8b:
17:86:75:7d:bb:03:63:c1:1b:41:5c:58:38:a7:65:7f:e9:ae:
ef:62:da:77:19:76:a8:09:63:85:37:ed:17:a5:94:14:52:08:
71:17:86:7f:f7:0b:82:e4:38:0c:b1:c5:55:ee:ab:97:08:af:
f0:89:a9:66:00:e3:de:c9:9a:98:42:06:0d:0e:63:2b:82:32:
dd:cd:16:61:a3:78:cc:b0:7f:3e:13:4a:84:b9:a5:dc:6c:66:
95:ae:84:69:98:16:28:c4:bb:1e:41:30:66:84:b9:b2:6e:8a:
f5:6d:8d:d6:1b:5a:14:2d:f9:d8:26:43:e9:2f:36:99:bc:83:
7b:cc:90:cd:55:12:f1:74:2d:8b:9b:95:48:23:cc:5c:36:0b:
5e:d3:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:14 2025 by rpki-client