Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271942.roa
File: AS271942.roa (raw, json)
Hash identifier: PO8VkT86ZoZlRdb59Hqc3BC0e4q3yapc8wr2I+BjXrM=
Subject key identifier: C5:7D:6E:F4:D6:B4:06:7B:13:49:55:5F:E8:09:CD:B7:F8:37:49:88
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5B832FEE078EB25CF575329D9366A17BB205881B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271942.roa
Signing time: Wed 01 Mar 2023 07:08:18 +0000
ROA not before: Wed 01 Mar 2023 07:03:18 +0000
ROA not after: Wed 28 Feb 2024 07:08:18 +0000
asID: 271942
IP address blocks: 191.101.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:83:2f:ee:07:8e:b2:5c:f5:75:32:9d:93:66:a1:7b:b2:05:88:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:18 2023 GMT
Not After : Feb 28 07:08:18 2024 GMT
Subject: CN=C57D6EF4D6B4067B1349555FE809CDB7F8374988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:ba:ad:d8:fe:bf:ff:4f:f5:dd:34:aa:77:
ed:99:45:ee:46:02:fd:cd:21:dd:08:12:ed:bc:08:
44:7d:51:e9:f3:3a:1f:05:b5:57:ea:0f:f7:48:6c:
03:06:0d:e0:dc:8c:60:77:34:b5:1a:da:4a:61:f3:
2c:66:29:e8:23:8e:e0:1f:25:39:93:ae:d6:89:c6:
10:c6:cc:b7:43:0a:f7:58:a4:e2:d7:63:eb:f4:5f:
89:e3:41:50:85:2b:92:ed:3f:d1:0e:6d:b0:4b:7f:
d8:87:2e:fc:da:b2:e1:8d:cb:83:e8:28:47:e2:f6:
30:69:d4:e2:e5:80:ef:f6:50:52:66:e3:4f:02:fb:
04:50:17:17:87:f9:23:99:d5:cc:15:f8:e0:75:23:
2e:ef:18:e2:c3:44:20:b3:e8:8b:1c:1c:35:dd:47:
7a:90:b4:24:94:c4:f4:0b:3c:f8:fc:78:84:30:66:
25:c9:63:68:c3:d4:d6:9b:f1:3e:46:3e:53:3f:e8:
b7:12:da:4e:3e:b7:1c:01:f9:c4:62:27:35:51:69:
78:f6:98:ef:2d:f0:ad:9e:61:ff:9e:33:12:43:72:
4b:8e:6a:cb:8c:8e:07:6c:46:5d:dc:e2:83:47:9d:
e2:58:71:d9:c8:87:20:3a:29:ad:11:39:d9:96:c8:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:6E:F4:D6:B4:06:7B:13:49:55:5F:E8:09:CD:B7:F8:37:49:88
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fc:25:90:f9:a0:10:17:cf:b6:0f:0a:20:2f:ff:ee:05:b5:
38:a9:b6:37:e8:ac:3b:68:c7:cc:33:b3:cc:24:ed:fd:1f:1c:
88:6d:c7:f6:29:5b:5e:66:ae:1a:01:38:ae:b7:f2:d1:70:08:
63:c1:98:1f:92:18:a2:d4:8f:e2:8d:e0:9d:3a:b9:75:9d:51:
29:5c:14:a0:0c:2d:80:a8:77:4a:a2:9d:54:25:fe:2f:7b:91:
cd:5e:11:f3:ae:5c:3b:06:ce:d8:77:0c:7c:00:85:11:c5:31:
73:00:cc:c1:7b:9b:8e:93:3a:c6:af:a8:ff:df:a3:aa:d7:bb:
4f:8c:f2:45:e1:d5:55:44:02:24:93:d4:9b:ef:b6:6f:a2:14:
a0:fc:87:1f:ff:99:6f:c2:96:aa:12:b2:89:02:fc:51:c9:1f:
e6:11:91:74:b1:86:6c:0d:46:b6:ec:cc:ce:f6:fd:ff:7c:48:
3e:52:28:3d:30:04:9f:1a:ce:b7:db:ba:82:37:26:c3:3a:e3:
9b:3d:7e:cd:c6:f5:d5:14:c5:af:9d:ab:61:61:59:8d:f8:3f:
16:2f:57:c1:06:54:a7:b8:be:0e:07:ea:bf:ac:96:32:b4:9b:
82:ed:cb:7c:4c:35:b0:39:28:d2:40:67:ea:06:47:bf:14:82:
06:4e:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:12:24 2025 by rpki-client