Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
File: AS206446.roa (raw, json)
Hash identifier: /+lTrUs76b+k9d1wBeULlJttAgl1V+OkgZ3XvkcmRTU=
Subject key identifier: 1E:56:23:A2:89:D7:FD:04:4E:3E:A6:BF:E1:93:E4:5D:F9:29:26:31
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3FB3E3CB9525B20731BB8B58144195ECFDB71258
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
Signing time: Mon 10 Feb 2025 13:01:31 +0000
ROA not before: Mon 10 Feb 2025 12:56:31 +0000
ROA not after: Mon 09 Feb 2026 13:01:31 +0000
asID: 206446
IP address blocks: 45.93.46.0/24 maxlen: 24
181.214.135.0/24 maxlen: 24
181.214.197.0/24 maxlen: 24
181.214.214.0/24 maxlen: 24
181.215.141.0/24 maxlen: 24
191.96.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b3:e3:cb:95:25:b2:07:31:bb:8b:58:14:41:95:ec:fd:b7:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 10 12:56:31 2025 GMT
Not After : Feb 9 13:01:31 2026 GMT
Subject: CN=1E5623A289D7FD044E3EA6BFE193E45DF9292631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:c9:e7:92:b0:94:67:cc:1c:35:1c:55:ae:
5a:82:20:6c:f9:29:00:e8:f9:9b:39:64:d1:1c:92:
fb:0a:33:20:84:b7:5f:b5:00:de:78:53:ae:bb:2f:
6e:d6:bd:9c:1b:2c:93:2b:34:6d:92:25:54:26:16:
1c:18:b6:8b:ce:dc:92:e3:b4:46:d2:b3:68:b5:4f:
45:ca:82:51:ed:3d:f0:2d:19:5d:ed:72:25:ea:b8:
e6:9c:db:73:14:a0:ad:4e:fd:46:65:ef:83:b8:81:
87:c1:07:ef:1d:ca:fc:2b:67:e9:fb:9a:06:84:0a:
5f:4b:a3:9f:ef:7c:96:9b:ee:de:f3:f6:e8:a2:c5:
81:5b:44:c0:3e:f0:11:65:42:9b:b8:c7:d9:3a:27:
21:6c:e7:e0:d4:a2:9a:19:25:b7:96:38:d5:c2:52:
07:44:c6:33:cd:da:75:b7:e0:a0:93:b5:d0:d6:67:
00:6e:7e:92:72:d4:0a:48:65:d4:94:6f:31:06:bd:
51:5b:69:c3:f3:5d:64:76:a4:4a:3b:d2:f4:24:40:
67:c2:d9:2a:c0:38:d9:03:4e:36:29:09:3b:f6:74:
fb:d9:7d:f5:ae:ec:03:67:06:5c:ae:34:9e:80:18:
1e:e2:a7:41:74:04:e9:b3:e5:0c:08:05:ce:e9:ff:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:23:A2:89:D7:FD:04:4E:3E:A6:BF:E1:93:E4:5D:F9:29:26:31
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.46.0/24
181.214.135.0/24
181.214.197.0/24
181.214.214.0/24
181.215.141.0/24
191.96.229.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c2:62:01:7e:cb:70:cd:db:62:23:b9:10:74:df:fd:64:0c:
60:4f:e5:1d:7e:86:de:fa:59:f6:46:2b:3c:02:b0:88:e6:80:
5f:d1:ca:06:5c:46:7c:84:5d:2e:3e:fa:92:18:0c:55:db:35:
8e:af:8b:d3:af:f3:0b:b4:e2:80:5e:db:d8:5f:11:b1:08:16:
40:83:5d:b5:1a:66:06:72:ff:16:70:28:7d:85:da:fe:aa:e6:
0f:54:40:6e:7f:41:42:cf:a8:97:6a:ea:4d:e9:b4:29:68:aa:
fb:45:8a:c2:c6:82:a8:00:c1:de:f4:91:e5:ec:a2:b9:26:9b:
19:01:00:db:03:f6:e8:77:fd:a0:55:82:df:a7:e3:11:cf:b2:
9b:9b:25:81:27:34:95:66:9c:6a:75:45:f0:09:c2:7b:d7:6b:
85:2e:1d:5c:d5:be:13:74:2e:88:23:e4:ae:b1:7d:6d:b6:93:
7e:55:43:98:59:48:c1:6b:7c:d9:0a:eb:86:be:4a:ed:58:9c:
92:e4:e5:50:45:9a:ba:91:d5:be:16:fa:51:b2:cf:ff:41:bd:
dd:7c:70:a2:c4:07:45:65:27:df:7d:5e:b3:e3:fd:19:09:a4:
62:03:00:69:33:6b:fa:a5:67:25:19:a0:81:92:be:39:43:55:
a2:34:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:03 2025 by rpki-client