Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
File: AS47810.roa (raw, json)
Hash identifier: 0MES+fJuUPQ21U4Rk3omd6VbONXKhV8AkRtR08hBXc0=
Subject key identifier: 7F:82:1D:78:E9:34:18:F2:2B:53:8A:8A:D8:A2:88:19:69:73:34:E2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 64640407C3E75EB3750AC07A8BAA8A8A5880D749
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
Signing time: Wed 01 Jan 2025 08:53:50 +0000
ROA not before: Wed 01 Jan 2025 08:48:50 +0000
ROA not after: Wed 31 Dec 2025 08:53:50 +0000
asID: 47810
IP address blocks: 181.215.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:64:04:07:c3:e7:5e:b3:75:0a:c0:7a:8b:aa:8a:8a:58:80:d7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 1 08:48:50 2025 GMT
Not After : Dec 31 08:53:50 2025 GMT
Subject: CN=7F821D78E93418F22B538A8AD8A28819697334E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:16:33:ea:f2:8f:77:00:11:cf:4e:7d:f4:
0c:94:eb:46:f4:f0:89:7a:1f:2a:46:81:9c:a9:bc:
e1:24:85:8a:6b:5c:89:4f:d2:4c:f9:ea:48:46:ed:
f4:ec:46:4d:ea:63:05:ca:2e:2e:f9:50:08:58:bc:
a5:43:66:0a:06:ad:81:4f:99:e0:91:20:41:bf:a0:
ea:fe:18:94:0e:5f:51:1b:1c:1f:35:45:9b:5c:21:
37:b5:6f:c8:aa:c9:69:e2:cb:a1:78:38:73:7b:99:
90:a8:fc:c1:79:c8:7f:33:41:e1:4d:00:9a:eb:6f:
56:d4:e4:23:f8:6f:f9:10:c7:36:bd:ce:2f:18:6f:
26:5b:ac:dd:9e:6c:71:d5:83:df:07:b4:6c:47:f4:
10:35:1c:60:48:bb:99:38:9d:4d:e8:2e:d5:13:a8:
43:7b:42:b5:0a:45:ec:1a:2e:3c:a8:c6:19:b1:ad:
70:8c:bc:25:80:55:b8:7f:ab:51:6b:d6:81:06:c1:
6f:08:4f:d4:31:d2:60:66:75:a9:3e:e2:8a:81:1e:
c3:d1:8f:a1:4d:ed:8e:ce:c1:84:4c:bb:fd:88:be:
72:22:20:6a:b9:1b:6a:16:84:bc:a8:8f:bf:86:3d:
30:f4:8e:fb:8d:58:e4:94:11:16:c5:d5:2d:06:45:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:1D:78:E9:34:18:F2:2B:53:8A:8A:D8:A2:88:19:69:73:34:E2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:75:d0:c1:d9:8a:6c:3f:3b:a0:22:87:5f:ff:91:f7:56:2a:
9a:7a:87:22:6c:76:41:7b:58:75:24:c3:e8:7d:28:6a:bf:8d:
19:c4:25:da:3f:c0:4f:9e:b8:45:1b:cd:cc:66:59:1d:d8:45:
fd:20:89:a1:4a:df:ad:10:2f:f3:7a:29:c9:f9:41:83:44:ee:
6b:d4:9d:50:0b:c1:5c:d7:9e:49:b7:7f:5b:8f:c6:cb:80:ee:
2e:b0:1c:46:04:af:b4:18:33:c6:bd:22:30:c1:a1:39:7f:2f:
0d:db:4b:19:85:97:99:c4:82:4f:e1:72:38:e7:fe:79:56:5b:
10:2c:db:20:a5:43:4d:75:2d:fd:64:1e:64:29:0a:3c:bc:cf:
23:f0:f5:29:20:40:88:4c:01:d5:82:08:57:db:91:14:9e:45:
c1:a2:52:03:8b:22:1a:9b:ad:10:96:5c:6b:0d:24:16:64:27:
53:ca:26:07:85:ba:6d:91:f3:b2:2a:f1:e9:ff:b3:44:85:42:
16:17:ec:a9:f6:68:01:68:12:0a:a9:25:d2:cf:81:31:1d:4a:
3d:eb:81:f5:d0:20:ba:13:a1:a1:f6:9a:4a:46:54:03:15:f0:
aa:05:ee:7b:e4:f1:2a:7d:80:d9:ca:00:c8:9d:63:b8:b9:35:
d5:2c:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:06 2025 by rpki-client