Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262851.roa
File: AS262851.roa (raw, json)
Hash identifier: Gwy37uMOQBrnfOJfIamNR07Sizfs9JzB7Als7uCdVpI=
Subject key identifier: B4:57:EE:D0:05:E8:03:6B:84:85:6F:E8:54:99:8F:0C:28:05:5C:B7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5C91DCB7CCCA2794118257F36FB6A3F57CDD93DD
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262851.roa
Signing time: Mon 10 Mar 2025 18:11:47 +0000
ROA not before: Mon 10 Mar 2025 18:06:47 +0000
ROA not after: Mon 09 Mar 2026 18:11:47 +0000
asID: 262851
IP address blocks: 181.214.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:91:dc:b7:cc:ca:27:94:11:82:57:f3:6f:b6:a3:f5:7c:dd:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 10 18:06:47 2025 GMT
Not After : Mar 9 18:11:47 2026 GMT
Subject: CN=B457EED005E8036B84856FE854998F0C28055CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:c8:9d:3b:80:fa:80:80:45:87:76:4a:20:
cd:29:2e:12:02:11:b1:a8:d1:d2:0c:41:b9:af:aa:
b8:7e:ec:58:17:87:ef:cd:1d:81:e3:e9:0e:76:e5:
c0:f0:13:8c:0d:67:28:56:06:04:28:8d:9f:d0:ce:
ab:cc:74:b5:6d:08:01:26:99:5b:79:5c:de:5f:ec:
b2:2f:d4:b5:f3:99:71:8d:45:15:ea:3a:64:09:31:
f4:c7:fd:3c:85:1e:f2:de:e1:88:70:d3:80:11:52:
63:86:76:45:74:d3:d7:0c:56:26:1f:06:27:6c:b3:
6e:52:1e:69:a5:27:d5:0b:99:d4:32:80:ec:08:09:
0f:38:d0:22:0b:6f:f5:f1:7b:ae:c3:84:dc:2f:5e:
95:f5:c6:af:19:8e:a5:b5:c7:ab:d9:ec:9a:79:32:
c9:9e:f0:ca:01:5d:ce:a8:cb:7a:83:45:90:c4:45:
5f:9d:85:4f:93:34:67:b6:92:a2:a4:e3:6e:a3:12:
cb:5e:dd:60:cb:df:8d:c0:97:f5:0a:8b:8e:23:d5:
51:83:73:c9:3b:99:d8:5c:97:66:05:3d:04:c7:f6:
e0:fb:ab:3a:88:f9:a9:ca:34:98:be:3f:f0:0c:c1:
86:01:de:27:2f:a2:af:55:80:3a:52:2e:d9:33:c8:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:EE:D0:05:E8:03:6B:84:85:6F:E8:54:99:8F:0C:28:05:5C:B7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.57.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:29:d3:3a:f7:0d:f4:a5:ba:80:4d:ab:d6:98:6f:b5:35:
2f:00:87:6c:0c:ea:3a:65:ae:33:e1:ca:92:44:a9:98:5e:4b:
6f:de:ba:ed:1a:9a:36:d1:a2:1c:9a:bf:5e:2c:dd:fa:29:74:
ed:0d:1b:00:13:db:ed:f5:26:1d:f0:43:d5:c9:6a:80:38:5f:
07:30:1d:fd:ac:ce:9b:4d:e2:b6:ae:f4:66:69:24:ca:c0:60:
b7:5c:4f:cc:9f:09:65:ee:75:d7:70:14:c7:54:28:b5:be:a4:
15:8b:3d:40:d7:76:2b:e8:39:31:7e:3d:49:3b:7f:f7:df:09:
bb:5d:e7:85:8b:eb:03:fc:bf:27:af:30:35:4b:4e:56:f6:2a:
7f:af:91:bd:cc:a2:25:f6:f5:2d:70:04:cd:bf:0f:d6:1c:dc:
67:67:d5:ea:a9:1a:3e:ba:77:5f:63:e3:b2:8d:9d:49:2c:32:
1b:ec:98:27:76:a3:80:04:ad:5a:d5:82:e9:74:0f:09:b6:af:
57:53:aa:ef:61:53:5a:c0:ef:66:f6:e9:65:81:26:e4:2e:56:
01:a2:24:ed:bb:f4:c2:df:41:51:46:a6:a3:d3:25:e2:5e:7f:
f5:39:66:86:5b:c2:60:e8:0e:cc:88:00:82:ea:4a:86:13:7f:
7c:de:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:46 2025 by rpki-client