Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47679.roa
File: AS47679.roa (raw, json)
Hash identifier: hcPIJ0tOnGsEtSUat8Hyt1J7kdtIvj3f1ArLcRWtUcQ=
Subject key identifier: F1:8A:B9:58:33:90:63:79:2C:EC:31:3A:C4:FF:67:9A:0E:AB:A1:2B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3CEFDD37889D4D4E400D03B5CCE2363A2FF7B1E1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47679.roa
Signing time: Mon 09 Sep 2024 12:50:48 +0000
ROA not before: Mon 09 Sep 2024 12:45:48 +0000
ROA not after: Mon 08 Sep 2025 12:50:48 +0000
asID: 47679
IP address blocks: 191.101.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ef:dd:37:88:9d:4d:4e:40:0d:03:b5:cc:e2:36:3a:2f:f7:b1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 9 12:45:48 2024 GMT
Not After : Sep 8 12:50:48 2025 GMT
Subject: CN=F18AB958339063792CEC313AC4FF679A0EABA12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:cb:0a:8d:a6:47:c5:23:c8:f8:ae:7f:51:
b7:bf:00:c8:6b:2e:d2:f3:f4:cd:0b:48:ea:31:66:
0d:18:f1:b1:31:b2:26:6d:cc:80:e9:fc:65:4d:fd:
b7:42:37:8d:a4:3f:d1:25:a0:03:91:dd:8f:60:83:
d2:87:d8:c7:cf:f7:13:ad:93:6e:e0:67:4a:22:ef:
d0:67:b7:87:9b:6c:23:68:c1:67:3b:5b:42:51:43:
63:32:41:e3:80:c5:cd:f0:f5:be:82:bb:b3:58:59:
97:52:5f:bb:d0:0a:c8:75:d9:e7:d2:ab:69:22:71:
7d:41:62:1e:22:78:b7:1f:4a:0d:7b:28:87:ad:30:
df:17:14:b7:1f:6f:25:a4:66:a9:71:fa:76:45:cb:
5e:ea:ff:58:7f:ae:ce:3e:9b:a3:3c:c3:1c:ad:33:
f2:16:cc:83:3b:94:61:eb:f6:ea:76:da:aa:89:f5:
cf:a2:23:29:1e:81:51:94:40:b3:09:c6:64:ad:7e:
83:20:7d:4e:b6:64:d7:09:96:88:ec:4b:1c:75:5c:
c6:c5:7f:ec:d1:d4:78:13:be:0e:54:fe:4d:c0:5d:
31:e5:5a:b5:c5:d9:08:e0:29:0b:19:50:a7:d3:8e:
b1:53:f4:35:89:8b:f0:ce:ed:b4:fc:4e:ff:65:c7:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:B9:58:33:90:63:79:2C:EC:31:3A:C4:FF:67:9A:0E:AB:A1:2B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:48:00:29:1f:aa:d5:b5:23:2c:22:0c:f6:66:74:9f:6e:ca:
17:25:d5:94:3e:82:1d:20:38:a5:05:44:5e:30:16:d4:fd:d3:
e7:c0:35:47:22:84:07:cc:2b:d8:fc:25:7f:87:44:8c:eb:29:
28:ce:63:7f:af:b2:d7:39:d1:1d:34:ff:86:9e:c0:3e:4e:af:
98:50:d7:ee:b7:54:63:ac:ca:e8:ed:55:e9:4c:ed:dd:b6:e3:
1b:25:ed:96:52:4a:79:45:ea:fc:9b:9a:cd:c3:46:da:dc:70:
e1:3a:1c:36:81:06:5a:e8:98:98:a5:b0:2d:a4:5b:f1:50:f8:
ce:cd:12:9b:11:32:ff:d1:74:91:95:10:f9:21:8d:98:6a:e2:
db:5d:27:15:79:14:1e:7c:65:13:fb:8e:37:87:71:83:7a:56:
8b:19:1f:1b:d7:9b:da:29:41:e6:b7:29:a2:7f:e7:af:d6:3c:
17:85:c2:d8:e5:62:f5:ad:5a:39:79:0c:aa:fd:1d:3d:a0:f3:
20:7a:23:6b:96:df:b6:e7:ef:91:75:0f:9c:31:90:2e:ed:e5:
fa:b2:ff:f0:0b:d2:ed:c4:48:87:6b:e0:c3:17:42:47:af:f8:
55:41:32:32:d6:d5:9b:46:f2:87:2b:2a:94:c4:cb:04:c4:57:
5f:52:59:7b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUPO/dN4idTU5ADQO1zOI2Oi/3seEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA5MDkxMjQ1NDhaFw0yNTA5MDgxMjUwNDhaMDMxMTAvBgNV
BAMTKEYxOEFCOTU4MzM5MDYzNzkyQ0VDMzEzQUM0RkY2NzlBMEVBQkExMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdj8sKjaZHxSPI+K5/Ube/AMhr
LtLz9M0LSOoxZg0Y8bExsiZtzIDp/GVN/bdCN42kP9EloAOR3Y9gg9KH2MfP9xOt
k27gZ0oi79Bnt4ebbCNowWc7W0JRQ2MyQeOAxc3w9b6Cu7NYWZdSX7vQCsh12efS
q2kicX1BYh4ieLcfSg17KIetMN8XFLcfbyWkZqlx+nZFy17q/1h/rs4+m6M8wxyt
M/IWzIM7lGHr9up22qqJ9c+iIykegVGUQLMJxmStfoMgfU62ZNcJlojsSxx1XMbF
f+zR1HgTvg5U/k3AXTHlWrXF2QjgKQsZUKfTjrFT9DWJi/DO7bT8Tv9lx3KPAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU8Yq5WDOQY3ks7DE6xP9nmg6roSswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDc2Nzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZZQw
DQYJKoZIhvcNAQELBQADggEBAHpIACkfqtW1IywiDPZmdJ9uyhcl1ZQ+gh0gOKUF
RF4wFtT90+fANUcihAfMK9j8JX+HRIzrKSjOY3+vstc50R00/4aewD5Or5hQ1+63
VGOsyujtVelM7d224xsl7ZZSSnlF6vybms3DRtrccOE6HDaBBlromJilsC2kW/FQ
+M7NEpsRMv/RdJGVEPkhjZhq4ttdJxV5FB58ZRP7jjeHcYN6VosZHxvXm9opQea3
KaJ/56/WPBeFwtjlYvWtWjl5DKr9HT2g8yB6I2uW37bn75F1D5wxkC7t5fqy//AL
0u3ESIdr4MMXQkev+FVBMjLW1ZtG8ocrKpTEywTEV19SWXs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:43 2025 by rpki-client