Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
File: AS210977.roa (raw, json)
Hash identifier: SJB2vjXbRQ+ybFwkMXY0Ft5ztllLe3AJrBjZs9lCnek=
Subject key identifier: C0:04:1E:7D:24:15:2E:B6:B2:11:28:18:B4:47:0A:A7:A3:1E:73:9A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 786D5051F33486C816ACDA0852D12632380D7827
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
Signing time: Wed 01 Jan 2025 08:53:49 +0000
ROA not before: Wed 01 Jan 2025 08:48:49 +0000
ROA not after: Wed 31 Dec 2025 08:53:49 +0000
asID: 210977
IP address blocks: 191.96.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6d:50:51:f3:34:86:c8:16:ac:da:08:52:d1:26:32:38:0d:78:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 1 08:48:49 2025 GMT
Not After : Dec 31 08:53:49 2025 GMT
Subject: CN=C0041E7D24152EB6B2112818B4470AA7A31E739A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:45:e7:88:91:59:96:3d:99:b8:e6:90:51:
7b:dd:d7:bb:2e:3c:4d:1a:82:5d:43:a3:e8:b1:6c:
b6:e4:8c:81:76:0a:47:34:ce:e2:82:21:7b:68:4c:
46:28:a4:22:ce:36:b0:42:96:44:4f:de:96:96:73:
99:d7:19:e9:50:66:c7:83:5e:97:0b:0c:73:18:0c:
f2:9b:f0:c0:b0:f8:7e:e6:9d:f3:27:ce:14:3a:b8:
83:19:8c:9a:53:58:8b:c1:0a:22:37:d2:a1:8c:f4:
a0:a9:58:bd:a8:79:cd:dc:91:6c:ef:94:b5:10:07:
a9:c9:b9:21:50:86:a8:2f:f6:7f:73:95:6a:81:83:
2e:e9:c2:89:92:8a:65:ad:2c:e6:a9:53:1a:1d:eb:
22:41:64:4f:b0:bf:99:68:05:0e:92:4a:7b:86:16:
09:e7:c8:8c:a0:74:fb:dd:49:94:10:6c:aa:dc:84:
b1:21:0a:db:1b:d9:79:bb:0a:aa:0f:73:f3:74:14:
d0:70:f9:35:10:a9:c2:cc:51:d8:e9:86:a5:68:d5:
90:fa:bd:2e:7d:81:5e:c7:bc:ba:bb:24:7d:e7:59:
97:29:d6:87:16:c2:d3:e0:12:cd:68:59:14:c0:13:
bf:2b:68:25:1e:4c:63:3a:50:ff:bf:f0:35:60:d9:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:1E:7D:24:15:2E:B6:B2:11:28:18:B4:47:0A:A7:A3:1E:73:9A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:60:c1:a7:8f:92:1b:23:14:d8:24:7d:94:cc:9b:c2:07:8c:
46:40:a9:1f:88:50:94:c1:30:55:46:72:fd:32:89:19:81:14:
9d:53:5b:52:a1:eb:8d:ee:4b:4e:95:12:17:2f:bf:48:98:82:
03:ec:d7:71:0e:06:5b:1b:2c:ea:61:04:35:c0:fa:56:cc:fb:
48:e9:c9:7c:4f:84:2f:3e:e5:f5:74:64:db:37:2a:86:60:ef:
64:91:1a:20:0e:bb:1c:7d:a8:eb:08:a7:f2:73:b2:1d:2c:6d:
b2:38:46:0b:f3:6f:bb:ba:42:e3:38:bf:28:d2:a1:2f:63:bd:
af:6b:f8:12:69:2a:3e:9a:70:b2:1d:79:07:44:a2:cf:8b:21:
52:55:79:5e:97:39:a0:1e:8d:61:cd:d2:62:ef:b6:46:d1:a3:
6d:10:12:69:0d:91:78:cf:b8:58:06:74:6a:1c:d4:64:e3:f0:
23:ea:e6:b9:63:de:af:65:f1:b6:27:0c:d6:fc:15:53:1f:5e:
f9:31:bb:2e:38:4a:07:e6:b7:10:c2:1f:01:53:f2:0f:4e:e9:
d7:21:a4:f5:50:55:07:7a:06:a4:5e:2d:14:f2:65:de:9d:6c:
65:1e:7c:d9:20:d8:2b:68:04:62:88:af:ad:2d:8f:f0:da:ab:
ea:ee:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:34 2025 by rpki-client