Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4826.roa
File: AS4826.roa (raw, json)
Hash identifier: 8QcXWUNi27HlurfN7g93WLAhK3XUCaQ20f9Ol8kqKYE=
Subject key identifier: 2A:8D:11:8C:32:08:F8:E0:7C:DF:47:04:6A:3D:E3:51:3E:3E:5A:C1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 612AB59E31FAB9E3A8782B0BE19776FFD15E7582
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4826.roa
Signing time: Sat 10 Jun 2023 11:37:01 +0000
ROA not before: Sat 10 Jun 2023 11:32:01 +0000
ROA not after: Sat 08 Jun 2024 11:37:01 +0000
asID: 4826
IP address blocks: 181.215.170.0/24 maxlen: 24
181.215.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2a:b5:9e:31:fa:b9:e3:a8:78:2b:0b:e1:97:76:ff:d1:5e:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 10 11:32:01 2023 GMT
Not After : Jun 8 11:37:01 2024 GMT
Subject: CN=2A8D118C3208F8E07CDF47046A3DE3513E3E5AC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:c6:d7:01:96:7e:ba:7a:f8:1d:8c:9b:63:
8f:0e:04:8a:dd:98:d2:69:a2:a8:2e:a1:ef:a2:69:
48:9c:d5:4f:5b:33:eb:e7:03:4a:d6:7f:eb:98:83:
7b:22:e2:b6:2e:10:f3:5c:c9:75:35:f1:4d:d2:f3:
22:a1:59:18:78:8e:cc:92:8f:e9:1c:98:a8:ad:d7:
8e:27:40:28:48:38:c4:17:6d:f5:6a:99:aa:cf:2e:
5d:48:60:01:69:8a:3c:2f:1b:6c:04:a9:f6:3c:78:
a8:13:3a:3a:4a:d0:87:1a:4a:98:49:a4:79:c2:59:
1f:bb:12:00:18:1e:87:98:0d:4c:71:9b:1d:6a:d0:
4d:22:39:7c:3e:18:d5:12:f8:b2:22:25:50:e4:e4:
b4:d7:c1:ba:30:4a:a0:f3:24:10:9a:25:44:cf:dc:
70:46:6d:5a:38:3c:8f:ca:ce:f5:4d:be:8a:8c:9d:
13:2a:d1:8c:3c:c5:57:40:cd:42:8d:bf:15:d8:02:
1e:27:23:92:d8:5f:82:6e:a5:c9:87:c7:f2:9c:42:
ad:7a:ce:25:7e:e3:a3:63:7c:f5:4f:7f:1b:72:84:
ad:ee:23:ce:d9:34:4e:8b:7a:28:5a:17:17:98:7b:
65:37:79:1f:59:78:62:ae:c6:9e:48:18:d0:68:10:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:11:8C:32:08:F8:E0:7C:DF:47:04:6A:3D:E3:51:3E:3E:5A:C1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS4826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:a9:e7:30:b8:33:8f:40:03:38:9f:e7:8e:97:f1:c8:eb:ad:
36:e9:63:b8:6a:84:98:ff:9a:42:d3:8c:87:37:e3:2d:0f:71:
81:45:73:b1:c2:17:38:b9:81:f2:16:7e:7f:dd:f4:24:0d:7c:
69:c0:9d:ba:8c:4d:9d:38:82:1a:f6:2f:d7:10:cf:0a:26:48:
e3:87:c9:5f:4f:2e:92:64:31:9f:42:31:cd:44:c9:2c:f0:ac:
da:ec:18:5d:79:7d:11:a3:d2:da:66:a7:5a:08:c4:64:f1:83:
a6:5e:07:a1:c9:4f:ba:bc:55:01:cc:fa:c4:d8:76:34:75:9a:
ab:40:d1:58:4e:93:da:5a:f8:f1:30:f7:bc:6e:87:13:6b:b5:
7d:cd:85:3a:3c:75:2c:6a:54:79:f0:b1:c8:d4:7a:a5:82:67:
50:25:a8:9e:2d:a0:e6:b5:21:97:09:a0:76:79:f5:78:83:88:
3f:03:eb:cc:b6:90:a3:51:a2:e9:02:58:2f:04:79:1d:63:24:
fa:57:f2:25:90:11:98:a6:8f:5a:bb:12:9a:ff:62:49:5e:15:
73:7f:c7:0f:80:cc:e5:80:f9:56:5d:7f:4c:87:81:71:ec:cf:
16:c6:81:aa:36:fd:15:e2:23:06:4f:52:37:d9:52:7d:31:73:
0b:d4:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:10 2025 by rpki-client