Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
File: AS211061.roa (raw, json)
Hash identifier: KGcp6crIGegq7p7Is+hLbaEfsXQpqPnGRzfDV8MpHhI=
Subject key identifier: F8:FF:F7:44:8A:30:39:EB:42:7A:EF:70:B8:92:8F:46:A9:A8:1A:73
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 641EC4E51BA95138223AAABE88449CC6F286D6D1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
Signing time: Wed 26 Jun 2024 19:05:18 +0000
ROA not before: Wed 26 Jun 2024 19:00:18 +0000
ROA not after: Wed 25 Jun 2025 19:05:18 +0000
asID: 211061
IP address blocks: 92.242.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1e:c4:e5:1b:a9:51:38:22:3a:aa:be:88:44:9c:c6:f2:86:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 26 19:00:18 2024 GMT
Not After : Jun 25 19:05:18 2025 GMT
Subject: CN=F8FFF7448A3039EB427AEF70B8928F46A9A81A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:fd:e0:a5:7b:ed:e0:7a:a3:f7:ef:4c:cb:
87:a4:9b:3e:ab:e9:a8:3e:44:3e:20:ec:e9:5f:ac:
23:8c:bd:f1:d1:b7:3c:ff:6d:08:53:4c:d0:18:3b:
fe:2f:95:52:0c:1f:e7:3f:05:c7:af:fa:fd:ec:39:
db:da:5a:7a:c1:88:eb:73:3e:41:e9:d5:07:a0:2b:
cd:e1:34:0a:e6:fb:ed:32:79:5e:0a:8a:66:64:91:
b3:f5:ff:9d:b5:f0:70:6c:b5:8a:12:cb:b8:33:c9:
7e:f9:6f:3b:99:8a:fc:eb:af:d0:02:41:a1:3f:24:
90:60:e9:90:bb:fc:e9:bb:12:dc:5c:49:e9:79:5b:
49:cd:85:ad:7b:71:c7:e9:6e:43:16:31:37:e4:91:
9f:70:db:de:c5:1a:49:e8:62:88:36:4c:e4:b8:0c:
a7:0a:3c:ad:45:ca:fe:d2:2d:6f:05:15:d9:e4:5c:
99:42:21:a1:58:e5:ff:6e:f6:4b:5e:a7:3a:e4:4e:
09:30:cb:8b:e5:6c:e0:17:62:c6:00:da:01:5b:23:
16:9f:bd:83:9b:a8:6c:e1:f7:81:0d:96:b7:48:eb:
0e:97:f6:d0:f9:d1:64:8f:05:f0:93:37:97:13:8f:
83:c9:14:01:fa:87:44:e8:9d:d5:e1:cd:56:e4:30:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:F7:44:8A:30:39:EB:42:7A:EF:70:B8:92:8F:46:A9:A8:1A:73
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:66:40:93:8c:d7:7d:ea:87:31:88:49:b3:2d:f2:71:aa:b4:
6f:ef:bd:c2:18:05:52:2b:18:24:1f:70:47:7a:bc:75:b4:b8:
08:8a:dd:2c:ec:34:16:c7:50:3b:b9:90:b9:df:12:26:ec:d2:
a5:ea:7d:d7:78:2f:68:5a:51:89:ac:76:7b:c9:5d:46:e5:9c:
e2:b0:02:df:9e:7c:73:d8:7e:19:7f:d4:7a:d6:b0:81:8e:57:
94:df:48:b6:1a:e5:44:12:fd:18:af:d2:7e:02:fe:59:68:1d:
bb:f4:d2:94:c8:f2:57:7d:c7:69:74:64:21:57:2e:d1:81:4c:
d2:06:9d:7b:dc:20:98:79:ec:a3:cf:98:d2:e5:07:32:58:77:
42:43:eb:36:ce:7d:46:a8:0c:88:47:50:11:ec:c4:0f:8a:46:
67:0b:cc:68:84:3b:25:60:b9:66:94:11:55:95:f5:d3:94:54:
42:a2:fd:27:51:c1:9c:21:30:65:1b:8c:3c:57:33:e5:36:6a:
38:1c:75:69:b9:2e:89:2e:e2:dd:c0:af:c2:9f:a4:6c:9d:2a:
ce:83:20:17:87:a9:c4:73:fb:e4:23:2a:f2:4a:3f:48:2a:f3:
7f:e6:8b:db:99:d2:e8:82:56:22:7c:5e:07:f3:8c:20:d0:a3:
ee:6f:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:00 2025 by rpki-client