Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210805.roa
File: AS210805.roa (raw, json)
Hash identifier: 04QkdQHRVpfNIal4slFzMlLqiqhVJhTcwUvjwIO+BJw=
Subject key identifier: 22:F8:17:42:7B:E9:CD:84:CE:D4:8B:70:50:05:5A:4F:A9:39:CF:2C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6A6663F394079FC0E6C267AEC02F5BA607C9E8E0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210805.roa
Signing time: Wed 19 Mar 2025 06:40:49 +0000
ROA not before: Wed 19 Mar 2025 06:35:49 +0000
ROA not after: Wed 18 Mar 2026 06:40:49 +0000
asID: 210805
IP address blocks: 45.95.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:66:63:f3:94:07:9f:c0:e6:c2:67:ae:c0:2f:5b:a6:07:c9:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 19 06:35:49 2025 GMT
Not After : Mar 18 06:40:49 2026 GMT
Subject: CN=22F817427BE9CD84CED48B7050055A4FA939CF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:c3:a2:c2:35:38:35:e7:9e:d4:f0:5e:bc:
b3:6f:e9:b9:0d:a1:14:cf:ba:f7:72:89:81:c2:12:
13:ee:ca:84:44:1b:44:f3:a0:f7:d3:be:ca:5e:a2:
22:49:3b:aa:42:62:8c:88:d3:6d:da:af:33:3e:0c:
b9:20:c6:5c:94:bd:4a:f0:9f:b4:30:8b:82:09:4e:
cf:55:2d:d4:b1:d8:d7:77:d5:93:e4:86:72:91:78:
cb:2b:34:18:45:53:25:76:7c:f3:8e:58:fb:52:d8:
20:e4:8f:04:ed:4d:da:f1:9c:dc:cd:f4:f1:dc:8b:
bf:bb:91:0e:98:42:6b:e7:16:6c:e5:08:cd:bd:e2:
8f:fb:ab:c9:79:b6:7a:a8:26:e2:f4:45:23:13:22:
6e:ec:7c:94:1b:4f:a7:2d:8f:65:fd:8d:40:55:7c:
29:28:8c:b0:a2:e6:9e:45:25:07:1b:3d:62:48:fe:
40:0f:5e:32:93:f2:7f:2e:82:42:71:75:40:d3:3f:
58:38:43:f6:c4:50:8b:62:76:80:eb:7d:e4:5b:4a:
5e:df:23:a3:50:bf:27:23:84:07:11:df:de:ba:92:
c8:f8:49:e4:c4:6f:af:59:57:5b:b5:b6:2c:d0:cf:
24:f8:5c:4a:d2:c6:9d:73:64:e5:f8:79:17:43:67:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:17:42:7B:E9:CD:84:CE:D4:8B:70:50:05:5A:4F:A9:39:CF:2C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6d:58:a3:3c:a7:11:3b:4f:20:c5:b4:1f:b7:d5:2e:b2:bc:
7f:f2:45:b9:71:14:50:7a:a3:41:3b:3f:64:aa:01:47:42:76:
ef:ce:40:77:32:02:62:71:3e:0f:f9:68:4f:18:4a:9e:11:cd:
07:49:c1:26:a8:27:c1:3e:53:39:6b:b8:19:24:2e:2c:ec:52:
39:bf:61:02:f8:9a:1e:2b:4a:6d:af:c0:80:89:1e:61:38:64:
01:15:b8:98:9a:a9:54:6d:c1:cb:29:dd:b7:c9:b3:9a:30:57:
b7:b3:09:72:9c:9b:e0:db:56:ca:c0:85:27:c1:3a:42:2f:fc:
c6:c4:a0:3c:7d:36:c1:96:cf:78:2f:77:6b:44:26:46:c6:ea:
34:fe:c7:81:48:74:c2:2c:3d:04:4e:4c:25:70:43:d0:da:07:
e7:4d:c5:53:ca:78:8d:a7:fe:bc:bb:d9:3d:86:64:6f:6a:de:
89:11:80:a3:98:a8:e1:3e:86:a5:fd:e5:26:1a:37:b6:08:3b:
81:33:99:b7:c4:27:d6:5f:08:04:b7:f6:4b:9d:7b:34:d9:39:
07:e5:f4:d2:a8:d7:ce:53:c8:83:8d:3d:8e:22:64:e7:37:ec:
fc:bf:2a:c8:ab:7d:65:fe:df:a6:6e:4c:9b:1c:c8:87:a7:88:
0d:de:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:59 2025 by rpki-client