Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: FVjjlKcumdBWQou+7kTcBm7lc6ibVgUE0jUu8pZQzn8=
Subject key identifier: 17:F3:11:F9:82:8E:A7:F4:4D:50:1E:CF:03:D2:FF:73:6C:EA:E7:31
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 14E4EBB2A320307246BFC822E182AFDA5B503CB8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207459.roa
Signing time: Mon 24 Jul 2023 00:00:10 +0000
ROA not before: Sun 23 Jul 2023 23:55:10 +0000
ROA not after: Mon 22 Jul 2024 00:00:10 +0000
asID: 207459
IP address blocks: 181.214.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e4:eb:b2:a3:20:30:72:46:bf:c8:22:e1:82:af:da:5b:50:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 23 23:55:10 2023 GMT
Not After : Jul 22 00:00:10 2024 GMT
Subject: CN=17F311F9828EA7F44D501ECF03D2FF736CEAE731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:83:f6:e0:a5:af:f5:b8:90:15:bf:36:1d:
ae:96:ff:fc:25:cf:0e:05:99:10:bc:8f:de:7d:1d:
b3:f3:91:16:f9:3f:57:f1:c1:3c:41:18:0b:f9:98:
18:88:f2:f9:2f:82:7e:93:1e:7b:38:44:56:6a:27:
1c:0c:f5:7f:e1:a9:e4:0d:6d:e7:df:2e:26:c5:41:
21:24:66:a9:73:3c:ba:98:3e:c1:0a:e8:7c:db:93:
b1:15:21:01:26:52:84:57:d9:92:eb:56:a4:de:9e:
27:9f:a6:92:79:2d:7b:47:a2:40:93:e5:64:6e:11:
00:25:93:ee:bf:c7:67:a9:9b:d9:4c:ad:da:e4:fa:
27:b9:29:28:ec:4a:b9:23:dc:5d:9f:e2:d7:15:7a:
4c:e2:58:51:8c:f0:ff:9e:13:9f:bd:88:d9:c5:d6:
89:07:e2:fe:d8:26:d3:23:03:99:57:7d:1e:81:32:
63:d3:1a:ac:3b:c3:52:aa:34:e4:51:d8:6a:df:03:
83:2f:28:f1:5c:74:a3:2a:9a:f5:24:31:ee:a0:8c:
09:be:d0:f9:73:29:5b:f7:95:46:62:b3:46:05:e6:
24:f7:53:28:bd:10:33:f5:e1:60:16:89:00:78:ac:
4e:62:93:33:90:2f:ab:39:c3:2e:5a:3f:c8:d8:38:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:11:F9:82:8E:A7:F4:4D:50:1E:CF:03:D2:FF:73:6C:EA:E7:31
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f3:b1:6c:77:cd:f6:77:d3:82:ac:10:54:26:91:f2:bd:d6:
95:02:49:9d:4f:d9:41:73:5a:d2:03:f6:90:f9:4d:95:1f:72:
54:bd:d0:be:48:18:56:3e:cb:e6:cc:33:47:20:27:05:40:2f:
88:45:b6:f2:86:47:65:92:c1:ab:13:57:94:b3:dc:f7:dd:25:
58:43:31:6a:f6:7b:42:13:15:07:aa:42:fa:36:b6:81:1a:9c:
08:28:4c:f2:02:2c:f2:21:07:eb:f2:3b:d5:44:5e:1d:3f:e7:
9c:ac:95:97:0a:15:c2:d2:79:6e:78:b0:01:42:c8:09:97:fd:
28:ab:24:b8:13:a5:d3:1a:90:ae:21:26:85:25:e4:a0:7a:f0:
4c:d7:8b:eb:95:97:b0:e8:2d:c7:55:dd:3e:a3:9d:ee:ad:2b:
0f:1e:8e:6f:52:c5:5a:3a:72:d7:84:a1:22:00:4e:bb:07:69:
e4:db:8b:fb:08:eb:12:39:f3:05:32:c3:68:2e:39:7e:a0:c3:
4d:44:c9:22:7c:b3:d9:aa:1a:72:b3:7a:ae:46:3f:e1:a7:c7:
75:3b:16:50:ec:b5:8e:1b:ad:14:89:c7:99:57:68:0d:64:2e:
14:47:e0:9d:33:cb:cf:1a:9d:23:b5:45:3c:52:9a:af:8f:13:
d8:e5:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:08 2025 by rpki-client