Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211715.roa
File: AS211715.roa (raw, json)
Hash identifier: vGYp1ZU7aHOu2/kASFE0pE8fObd2viKf/aPet8S1JHU=
Subject key identifier: 0A:AC:C8:01:67:FF:A2:AF:26:A6:F7:02:D7:E0:69:FD:2A:D9:78:7E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7E3306385A0F2F650AF4B8E578982F71D713885A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211715.roa
Signing time: Thu 04 May 2023 16:16:35 +0000
ROA not before: Thu 04 May 2023 16:11:35 +0000
ROA not after: Thu 02 May 2024 16:16:35 +0000
asID: 211715
IP address blocks: 5.252.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:33:06:38:5a:0f:2f:65:0a:f4:b8:e5:78:98:2f:71:d7:13:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 4 16:11:35 2023 GMT
Not After : May 2 16:16:35 2024 GMT
Subject: CN=0AACC80167FFA2AF26A6F702D7E069FD2AD9787E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:52:2d:e1:95:6b:fb:43:3a:32:f7:ae:d0:
b3:96:6f:0f:ec:70:10:90:a2:dc:25:24:2e:c9:4c:
bf:0c:80:cc:9f:31:80:6f:ed:93:7e:ac:03:4d:95:
35:cf:f9:0e:09:b5:98:39:a9:62:a6:a3:4a:d9:bb:
09:31:61:69:da:ab:14:c3:53:a4:b5:d8:96:c5:a5:
14:c2:2d:b2:b2:e6:9f:d8:ea:ae:53:c5:b8:ed:9d:
9b:72:e6:ea:88:8c:6a:4a:88:5d:a1:b4:8e:9b:14:
1e:cc:64:d6:58:c0:c2:af:7d:9e:fb:67:29:a9:0d:
66:fe:82:8c:2f:ff:f6:a0:47:57:31:0b:19:72:5c:
53:0c:f5:10:13:cb:94:df:05:f4:ae:d6:76:31:f3:
5a:1b:43:9b:48:01:be:6a:40:f4:b0:d8:88:1d:40:
87:aa:79:59:50:bc:13:d4:89:e6:53:e7:1f:a9:bb:
61:73:c9:63:1c:a9:78:bc:b2:63:43:bd:b0:d3:45:
bf:1b:a5:73:a8:bb:35:66:5f:b3:df:ce:ca:8f:25:
35:30:e1:07:3e:96:ce:f2:37:e1:98:86:fd:f0:53:
40:8a:71:46:8c:0e:20:70:2c:58:2d:54:01:fb:b3:
b1:2d:df:00:cd:8e:8c:ab:ac:54:87:7c:57:a1:70:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:C8:01:67:FF:A2:AF:26:A6:F7:02:D7:E0:69:FD:2A:D9:78:7E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.72.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c7:ac:d5:6b:11:25:7b:e5:66:bf:7f:f6:2e:fc:35:f2:7f:
1e:3e:39:17:4e:55:2c:3f:7c:8c:5d:86:25:af:af:b3:5b:2c:
17:02:4f:5b:79:1b:51:cb:a3:dd:ac:55:29:b4:c0:f6:18:cf:
14:7d:2c:97:9b:8f:d1:d7:be:5a:be:b8:4d:84:81:5f:7a:2c:
22:c9:7e:94:41:09:06:e1:81:9b:52:9b:2f:fb:3a:da:c2:56:
f7:d1:ac:95:3c:42:fd:66:d7:01:48:cd:eb:4b:04:60:95:fc:
2d:1c:a8:44:f2:9c:ca:aa:4a:2f:82:e2:3b:f4:3a:4f:b0:57:
89:36:3a:f3:d4:b8:b2:a7:86:30:ec:c1:dc:00:b1:5d:bf:83:
28:25:72:d1:a7:21:6c:20:f0:61:9f:32:e9:0a:9e:11:2c:ff:
ce:af:b9:ca:ac:a3:7a:5d:18:59:a5:30:42:c4:a2:12:2d:7c:
fb:b2:d0:e0:cb:f4:6e:62:9e:00:59:be:0e:50:fd:f0:67:20:
fb:38:66:56:a2:12:6c:ea:54:59:eb:b3:92:f8:a3:86:be:cd:
58:5e:d3:d7:a8:62:b1:e7:1e:71:6e:05:42:2f:bd:55:c4:5c:
31:d2:04:27:9e:bd:bc:83:9c:d3:fe:28:a2:2b:7e:1c:93:9b:
f8:71:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:45 2025 by rpki-client