Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30456.roa
File: AS30456.roa (raw, json)
Hash identifier: X1evEeuI3gB7LBDJMKrCWKwqUCWHqBTVEDtmiO8Uycs=
Subject key identifier: DA:32:89:44:89:56:C9:4A:64:78:7A:89:9F:7C:75:03:21:4C:49:FF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 78D261B791C0B326DE0C67F6C3F061DED079A80D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30456.roa
Signing time: Wed 26 Mar 2025 00:53:59 +0000
ROA not before: Wed 26 Mar 2025 00:48:59 +0000
ROA not after: Wed 25 Mar 2026 00:53:59 +0000
asID: 30456
IP address blocks: 185.135.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d2:61:b7:91:c0:b3:26:de:0c:67:f6:c3:f0:61:de:d0:79:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 26 00:48:59 2025 GMT
Not After : Mar 25 00:53:59 2026 GMT
Subject: CN=DA3289448956C94A64787A899F7C7503214C49FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:87:61:69:3b:a2:93:92:f0:31:8e:5d:d8:
b8:bc:e3:92:04:3b:a5:c2:2a:2d:2f:cd:a4:1c:1b:
70:58:5a:68:94:ff:f3:60:db:f5:60:78:73:c8:7f:
e0:a5:32:21:82:5b:1a:71:9e:4f:0b:38:60:c0:2b:
07:4a:00:85:fc:95:46:30:ff:b3:4e:29:af:02:8b:
5a:c4:25:ae:ad:b6:eb:af:d1:1a:cb:3b:e4:9a:48:
ad:a6:1f:61:91:94:dc:94:b2:f8:7d:4d:9f:28:87:
fc:d6:4d:e1:b9:30:65:f8:83:59:21:87:a5:80:ca:
34:3f:d3:ab:ae:df:11:f9:5c:74:d9:6f:cb:9b:d6:
e2:8c:5b:22:d3:ac:d0:ca:84:d0:6e:11:a8:4b:1e:
b8:6c:ab:90:1f:1f:43:ba:04:cf:36:18:8e:ec:18:
f0:8d:53:ac:bd:25:42:31:b5:f3:eb:46:e0:12:33:
3d:af:c8:f7:9e:bb:c5:80:5a:91:21:ea:a9:4d:3b:
13:05:d7:91:0f:69:b3:b3:0c:9c:cd:64:57:af:c8:
90:9f:7f:ba:48:92:48:25:cf:a5:c7:2b:b1:d5:ee:
42:c2:84:fd:c3:5c:2a:aa:15:a8:c8:ca:26:fc:12:
7c:85:14:02:f4:77:72:18:73:cf:e8:66:a3:8d:9e:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:89:44:89:56:C9:4A:64:78:7A:89:9F:7C:75:03:21:4C:49:FF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.158.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:bb:d4:71:9d:8c:79:73:fd:b0:77:16:46:a0:31:2f:29:
11:eb:cb:a8:65:f8:25:db:12:97:01:3b:9e:9c:c8:2c:78:15:
b3:df:5f:3a:3e:a5:13:46:be:a5:c1:75:53:dd:5f:7e:8d:ca:
05:42:6c:71:1d:0c:03:38:c4:ba:df:d4:92:c6:77:83:16:ef:
fb:97:33:bd:03:d9:f9:95:96:d5:59:b0:58:c1:3a:33:7e:fe:
94:9c:16:b3:d1:37:03:c0:cd:ff:a9:07:50:4e:69:a7:86:0f:
6e:c5:eb:23:b4:60:f8:7f:a2:30:af:2c:de:e9:2f:06:d9:98:
de:a3:66:5f:08:74:d8:20:e9:fb:84:36:18:79:01:ac:f6:2a:
62:76:25:81:e5:72:69:ff:f5:a6:1e:7e:fc:84:b4:43:65:64:
42:3e:ff:6c:c1:c1:23:64:5a:ab:96:ec:9b:1f:ab:4d:f2:60:
f2:40:c8:31:f0:53:ee:af:24:22:9d:6f:0f:c9:ac:9d:0e:1e:
8a:01:c4:ef:72:54:52:3a:38:74:67:94:35:78:47:ca:21:1d:
14:68:21:54:0d:3c:8b:05:6d:e4:53:94:b8:4b:3a:5f:7d:44:
97:a4:58:9c:6a:60:21:44:49:12:80:71:c7:d4:15:1f:2f:fc:
02:02:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:05 2025 by rpki-client