Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa
File: AS51043.roa (raw, json)
Hash identifier: aWrKHook+6FbJIKvhtAEdISKS2vLHZYDvPbVHYq87V0=
Subject key identifier: 80:C6:3B:1F:19:9B:80:56:8D:6D:59:B7:B3:F3:6A:1E:FD:1A:43:6F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 474D70B616636B36A00A8905ED0C1215227D282F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa
Signing time: Wed 01 Jan 2025 08:53:50 +0000
ROA not before: Wed 01 Jan 2025 08:48:50 +0000
ROA not after: Wed 31 Dec 2025 08:53:50 +0000
asID: 51043
IP address blocks: 45.88.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4d:70:b6:16:63:6b:36:a0:0a:89:05:ed:0c:12:15:22:7d:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 1 08:48:50 2025 GMT
Not After : Dec 31 08:53:50 2025 GMT
Subject: CN=80C63B1F199B80568D6D59B7B3F36A1EFD1A436F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:4b:1c:2b:65:03:16:76:76:41:02:d8:b1:
c8:10:74:45:8e:07:93:6a:84:a9:7f:88:c7:70:12:
45:c8:cd:f3:b0:ce:56:83:14:a7:e9:12:1d:9c:b0:
43:80:06:f9:45:0a:21:43:f5:13:c9:f8:d0:0e:b5:
ff:02:d6:e4:f1:85:28:70:a3:be:3c:ca:76:3f:db:
83:6e:48:39:b5:6f:22:f8:84:da:21:ef:c8:12:68:
6b:93:70:32:d3:e2:22:21:c0:ad:b9:aa:4b:54:15:
f2:2a:95:99:bd:0d:b9:c1:ab:ce:e0:ed:19:ac:36:
82:37:3f:37:2a:c9:b6:59:54:3a:1e:8a:12:f9:5c:
73:f6:77:31:29:fb:db:6c:cb:ce:d9:c4:6d:ba:97:
c6:db:55:95:87:f1:2e:70:9f:b1:0a:e4:5f:39:cc:
f4:82:49:33:97:24:d7:0f:32:7a:e4:1a:90:3e:81:
df:eb:25:de:80:1d:8a:7c:be:e9:f4:92:32:c9:f0:
52:40:bd:ae:78:f5:27:be:3c:87:91:d0:0b:22:43:
77:d9:a9:95:ef:29:b5:94:36:fb:1a:33:e1:d7:bf:
5a:90:2c:ad:db:09:df:61:af:b5:c9:7a:ff:a5:d8:
8b:49:ed:b0:1a:60:7c:6e:b8:07:c4:de:15:16:50:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C6:3B:1F:19:9B:80:56:8D:6D:59:B7:B3:F3:6A:1E:FD:1A:43:6F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.98.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5f:f8:c7:8e:30:df:f8:dd:68:35:b5:b9:3b:d3:13:30:ed:
0b:03:9b:d0:4d:ac:36:87:5e:72:10:01:e7:db:b9:20:cb:eb:
76:5c:17:d8:14:b5:92:89:00:c9:4e:20:c8:bb:46:3b:b4:06:
f9:40:87:24:80:50:8d:d3:a9:4f:73:65:8e:e0:fd:ae:f3:99:
33:05:d5:92:7d:f4:7b:3c:c3:5a:90:96:eb:d6:0a:c0:86:f3:
c2:88:b4:5b:d1:34:f4:bb:05:43:62:a4:59:23:4a:de:5e:96:
38:c0:47:4b:79:7f:82:1f:16:14:aa:0c:1d:80:fc:bf:d6:81:
bc:b9:2f:89:04:20:10:05:c1:8a:69:58:01:92:83:bd:75:40:
59:df:b5:be:25:8b:0f:8e:ce:6d:dd:df:b1:21:04:cb:32:4c:
64:20:2b:c9:8c:3a:c4:9a:61:ef:c0:c1:7e:0a:b0:de:7d:07:
29:1a:c0:6b:d8:25:98:b6:19:cb:e4:b7:dc:5f:c7:c6:7a:06:
b1:ce:7e:36:96:3c:c1:7a:46:41:18:3a:15:a0:3e:ad:cc:d5:
b4:3b:7e:db:95:7e:b7:3c:46:16:eb:e3:a5:1f:36:0a:07:e4:
63:92:20:3b:27:bf:9f:89:2f:8b:77:69:18:3b:2d:af:2d:b3:
e3:e9:e6:39
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUR01wthZjazagCokF7QwSFSJ9KC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTAxMDEwODQ4NTBaFw0yNTEyMzEwODUzNTBaMDMxMTAvBgNV
BAMTKDgwQzYzQjFGMTk5QjgwNTY4RDZENTlCN0IzRjM2QTFFRkQxQTQzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77UscK2UDFnZ2QQLYscgQdEWO
B5NqhKl/iMdwEkXIzfOwzlaDFKfpEh2csEOABvlFCiFD9RPJ+NAOtf8C1uTxhShw
o748ynY/24NuSDm1byL4hNoh78gSaGuTcDLT4iIhwK25qktUFfIqlZm9DbnBq87g
7RmsNoI3PzcqybZZVDoeihL5XHP2dzEp+9tsy87ZxG26l8bbVZWH8S5wn7EK5F85
zPSCSTOXJNcPMnrkGpA+gd/rJd6AHYp8vun0kjLJ8FJAva549Se+PIeR0AsiQ3fZ
qZXvKbWUNvsaM+HXv1qQLK3bCd9hr7XJev+l2ItJ7bAaYHxuuAfE3hUWUGfTAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUgMY7HxmbgFaNbVm3s/NqHv0aQ28wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTEwNDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWGIw
DQYJKoZIhvcNAQELBQADggEBADBf+MeOMN/43Wg1tbk70xMw7QsDm9BNrDaHXnIQ
AefbuSDL63ZcF9gUtZKJAMlOIMi7Rju0BvlAhySAUI3TqU9zZY7g/a7zmTMF1ZJ9
9Hs8w1qQluvWCsCG88KItFvRNPS7BUNipFkjSt5eljjAR0t5f4IfFhSqDB2A/L/W
gby5L4kEIBAFwYppWAGSg711QFnftb4liw+Ozm3d37EhBMsyTGQgK8mMOsSaYe/A
wX4KsN59BykawGvYJZi2Gcvkt9xfx8Z6BrHOfjaWPMF6RkEYOhWgPq3M1bQ7ftuV
frc8Rhbr46UfNgoH5GOSIDsnv5+JL4t3aRg7La8ts+Pp5jk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:04 2025 by rpki-client