Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52695.roa
File: AS52695.roa (raw, json)
Hash identifier: EDzubrTCaD2+FVSBriFzZLDM7+WNvUMKORUDKFLZoUA=
Subject key identifier: DA:59:F7:E7:37:18:5C:F7:D3:4F:DB:98:A2:5B:4B:E3:70:95:D0:DC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0B9715B22FCCEEABF585892003C22954A807943E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52695.roa
Signing time: Fri 14 Feb 2025 11:15:32 +0000
ROA not before: Fri 14 Feb 2025 11:10:32 +0000
ROA not after: Fri 13 Feb 2026 11:15:32 +0000
asID: 52695
IP address blocks: 181.214.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:97:15:b2:2f:cc:ee:ab:f5:85:89:20:03:c2:29:54:a8:07:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 14 11:10:32 2025 GMT
Not After : Feb 13 11:15:32 2026 GMT
Subject: CN=DA59F7E737185CF7D34FDB98A25B4BE37095D0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:5f:27:46:7e:76:76:29:1e:fc:70:2e:6c:
d2:43:24:8d:91:c4:e6:10:4d:36:ad:a5:03:0b:8a:
21:42:45:50:42:40:dc:b5:d6:ce:0b:44:77:16:3f:
e7:3c:80:7e:91:b2:7c:e6:aa:41:57:6c:72:d1:41:
cd:88:3e:84:98:77:ac:f8:8b:e9:69:e4:ea:92:42:
1d:a0:9c:3f:31:10:de:2e:09:e1:4e:40:6d:f2:64:
41:25:f4:8d:0b:4d:e3:08:30:b4:57:a3:da:af:a1:
d8:bf:38:84:b8:b1:4d:a7:7e:96:14:8f:48:62:1c:
51:68:6d:8c:a3:ec:57:73:23:c5:74:23:1b:e9:87:
0a:31:7b:b0:ee:51:d2:ac:e1:0e:00:d5:9a:7a:b5:
15:b9:ab:71:8d:05:36:ab:39:a8:c7:f1:94:54:d1:
49:97:1c:b0:ff:32:d6:6e:32:93:46:e2:df:60:05:
13:25:55:40:a4:ea:8a:60:77:e7:69:b4:01:3c:ed:
fb:50:04:44:ba:2d:2b:ed:82:5d:83:0c:60:ef:7a:
dc:97:3b:14:bb:c8:39:9a:e0:44:14:91:31:b4:ea:
72:28:c2:c9:c2:df:26:6c:bd:00:a7:1f:fe:bc:aa:
24:ac:47:55:50:64:8d:07:36:2e:71:7c:fe:73:f8:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:F7:E7:37:18:5C:F7:D3:4F:DB:98:A2:5B:4B:E3:70:95:D0:DC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:12:17:2c:b6:32:c6:ec:33:f6:b2:88:b8:48:8f:99:c0:a8:
41:8e:55:93:f4:32:45:25:82:07:02:6c:45:03:f9:12:a9:34:
80:fe:75:34:d1:02:14:e1:6c:b7:6b:81:ce:ee:07:00:b6:e7:
be:82:bb:1d:05:d2:b1:19:e9:c0:86:52:39:b7:70:09:e0:c0:
91:23:dc:00:34:0a:db:33:25:5f:7b:e5:7a:0c:2c:07:aa:ff:
0f:90:14:81:23:a0:bc:c9:a7:fb:9e:5e:4b:ec:7b:60:6d:a7:
d6:aa:cd:c8:73:8a:7f:d8:e2:43:84:a4:5f:e0:02:20:77:b4:
fa:0c:eb:6a:72:2a:b7:ac:bb:6e:1c:6b:5b:d7:72:7c:e3:2d:
a3:62:22:c8:2e:d2:2d:22:aa:54:fb:75:8f:2d:ad:be:b7:78:
a6:85:6e:b1:a0:f6:09:9e:c4:e8:bf:9a:76:50:cf:1e:89:89:
dd:0d:77:ba:7c:6c:60:1c:d4:f3:e6:f8:f8:23:5b:fc:b5:97:
ec:86:fa:5a:f3:f3:37:89:8c:ff:31:de:85:ba:b5:db:65:7d:
7f:73:30:20:de:e7:ed:32:9c:20:3b:ef:33:2e:6c:d0:ca:3a:
70:f4:89:fb:a4:45:03:b7:ec:57:aa:fe:95:de:f2:93:a9:af:
ed:eb:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:46 2025 by rpki-client