Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa
File: AS30475.roa (raw, json)
Hash identifier: cxI9qH84elO0tZTbglhgHKch2mnvroL5o0rbg2Ap88w=
Subject key identifier: 83:87:67:AD:F0:52:8C:8C:64:20:AA:77:3E:8F:EB:1D:E2:A5:00:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DAF4020C0DA0DB7DC44634626517BE977BC4F4F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa
Signing time: Thu 20 Feb 2025 19:53:55 +0000
ROA not before: Thu 20 Feb 2025 19:48:55 +0000
ROA not after: Thu 19 Feb 2026 19:53:55 +0000
asID: 30475
IP address blocks: 45.95.15.0/24 maxlen: 24
185.170.40.0/24 maxlen: 24
193.7.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:af:40:20:c0:da:0d:b7:dc:44:63:46:26:51:7b:e9:77:bc:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 20 19:48:55 2025 GMT
Not After : Feb 19 19:53:55 2026 GMT
Subject: CN=838767ADF0528C8C6420AA773E8FEB1DE2A5008A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:62:2e:98:29:4a:1c:31:92:2e:1e:2a:aa:
89:f1:26:95:4b:f9:ff:12:f1:15:4b:c2:83:38:b0:
4a:cc:58:f1:f5:d3:19:37:ac:6b:c9:0e:ee:10:f1:
5d:0a:87:5b:fc:d0:69:d2:95:09:72:55:e4:60:00:
8d:c6:0e:26:97:26:f7:73:02:61:27:de:45:42:2b:
43:70:29:a6:16:d4:61:a9:b6:fd:67:fb:bd:ab:cb:
b9:91:d1:1c:f0:c7:b3:a6:9d:fc:42:ca:7b:c7:c8:
6d:1a:f3:72:cf:8c:b9:f1:ab:6e:d8:8d:5e:5f:0c:
7f:80:ef:f0:0c:6c:09:be:db:f4:b8:92:b3:29:9e:
4a:08:e3:fb:dd:b1:73:45:bb:7b:53:cf:f0:5e:60:
1e:65:d2:a3:31:c5:ce:ca:50:ec:b5:db:31:05:89:
8d:73:16:f1:2d:95:39:a1:92:95:2c:17:0f:35:2d:
4e:89:32:ae:95:3d:64:68:42:15:23:9e:e5:f7:f9:
1e:f4:4b:ee:9e:71:1e:2d:c9:f9:4c:4d:7f:34:e9:
ec:bc:59:b0:b7:0f:2d:cd:92:7a:c9:27:7d:cf:e1:
b7:91:86:8d:b0:2c:72:6e:7a:fa:ed:82:96:19:80:
1b:98:57:dd:d4:f3:53:8c:03:ab:af:b1:50:39:76:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:67:AD:F0:52:8C:8C:64:20:AA:77:3E:8F:EB:1D:E2:A5:00:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.15.0/24
185.170.40.0/24
193.7.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cd:58:be:79:9a:ac:96:cb:93:8e:22:b3:b6:a4:bf:45:2e:
f3:ff:fb:68:5a:a2:79:5a:2f:a3:64:dc:a6:d6:01:df:6a:f9:
29:12:96:0a:39:44:c1:ca:ca:90:18:83:ae:e3:14:b0:77:71:
6a:a1:ff:74:95:37:fc:36:6f:1d:fe:10:38:96:4e:20:ec:77:
91:27:59:2c:45:ef:37:42:a5:16:dc:94:a6:12:de:15:09:3f:
7f:a0:de:a8:93:d1:17:2f:86:3a:64:78:0f:1d:8f:7b:2a:8d:
a3:20:a8:7a:77:fa:c7:70:06:7e:a1:c2:87:17:4a:ae:a4:4e:
d7:e8:17:07:63:61:59:09:c4:1a:40:15:1f:09:89:2a:a5:c8:
bc:7d:b0:a0:20:23:4c:22:57:6f:60:61:bf:fa:06:69:43:01:
44:19:89:5e:91:ab:ab:8c:df:94:4b:e7:ce:87:81:5b:74:46:
c2:12:03:72:8c:8b:fc:fd:0e:8c:b4:37:e3:fd:84:1e:04:cb:
4a:31:50:bf:de:c6:1f:5c:05:39:c2:7c:6e:69:56:1c:09:fa:
c1:17:79:de:6a:fd:f4:ac:2a:65:fb:58:1b:43:eb:51:0d:ca:
33:57:06:62:b9:ce:9b:9d:e2:ad:38:e2:40:4d:cc:ac:53:40:
0d:86:db:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:11 2025 by rpki-client