Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53427.roa
File: AS53427.roa (raw, json)
Hash identifier: 0VpIdiRQiVSX1j9VlNilxhLLGsr596PN7FJ52zpO/AQ=
Subject key identifier: 41:4C:47:5E:41:29:28:F2:E5:33:24:3D:AB:20:B6:D3:5C:45:49:0C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4A9DFF04D3A17C5EB8A55790DD1F230F9AFD3C35
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53427.roa
Signing time: Fri 03 May 2024 13:32:58 +0000
ROA not before: Fri 03 May 2024 13:27:58 +0000
ROA not after: Fri 02 May 2025 13:32:58 +0000
asID: 53427
IP address blocks: 179.61.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9d:ff:04:d3:a1:7c:5e:b8:a5:57:90:dd:1f:23:0f:9a:fd:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 3 13:27:58 2024 GMT
Not After : May 2 13:32:58 2025 GMT
Subject: CN=414C475E412928F2E533243DAB20B6D35C45490C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:58:01:6d:5e:02:f4:36:8c:f7:50:51:db:
7f:58:28:b9:6c:d5:9d:aa:59:3b:db:5a:e2:87:d5:
a0:00:9a:28:e0:2d:29:03:89:7e:29:5d:79:c7:01:
1b:58:47:c8:a4:5f:78:c1:5c:42:41:63:ee:06:de:
66:ed:12:76:50:aa:b1:fb:5a:4d:f3:30:8a:b0:a7:
25:ac:40:57:85:ea:e7:d8:70:18:d9:54:e7:a7:f2:
de:dc:09:a6:99:02:3c:19:81:51:0d:bc:5a:0d:ab:
40:e0:50:e3:4d:dd:f6:0b:90:4d:d2:e4:6f:51:2d:
41:c0:8e:88:28:76:1a:0e:66:2a:aa:36:e3:cb:c7:
56:fa:97:33:2b:7d:87:32:07:55:86:30:e8:8a:e3:
c4:8c:2f:22:66:5d:55:a3:de:3f:9b:e7:ff:f7:f5:
05:42:fc:e7:66:53:d3:69:2b:0b:27:38:80:ec:1a:
9d:2a:cd:f4:34:c4:eb:42:88:00:cd:ab:04:cf:b3:
ca:64:9c:1d:c5:59:71:b8:85:2c:35:9f:03:ea:95:
ca:37:0a:52:31:ba:79:cf:40:57:c2:ef:bc:ea:0f:
b4:02:09:15:43:97:12:53:05:8d:0a:c4:d9:81:7d:
9a:74:fe:7f:f1:47:84:4c:67:9c:3a:da:91:8d:96:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:47:5E:41:29:28:F2:E5:33:24:3D:AB:20:B6:D3:5C:45:49:0C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:69:da:5f:73:39:fc:7d:24:71:67:ca:48:61:4d:77:96:6b:
53:26:59:a2:b8:e0:8d:eb:8f:da:45:b8:cd:2f:fc:ba:9b:c9:
b5:8a:ed:c4:b3:bc:bf:76:e1:41:52:a7:c9:2b:a4:71:b0:57:
c4:28:b1:f8:c7:1f:ca:42:21:45:7d:b0:1d:77:2f:60:5d:1f:
c9:0c:af:b6:76:a1:f7:54:68:b1:56:d7:12:67:db:c1:0c:1d:
7c:34:c5:60:79:62:51:54:65:eb:71:68:eb:60:36:7c:01:1d:
34:b6:c5:86:f5:14:0e:af:c0:0a:f6:54:2e:b7:e8:d7:6b:97:
bb:12:90:88:7d:5b:d5:75:ab:5f:b1:0d:84:0a:cb:e5:1b:f2:
fd:ba:e7:ce:b1:aa:7d:35:d2:e4:ed:5c:50:0a:19:ed:1e:77:
73:59:40:a3:5e:ad:1a:e4:d2:b1:7b:b4:8d:bc:7e:6b:05:45:
4a:0c:ec:42:ff:2b:37:a1:40:1e:de:50:13:fc:96:dd:05:17:
81:ab:cd:7f:05:55:2e:bf:da:3a:de:22:c6:fa:5f:3f:68:ce:
ca:c6:f7:f1:35:78:f5:42:41:36:10:3b:f4:f0:49:c7:fb:27:
76:9b:1e:6c:15:ce:d3:d4:d6:11:5c:93:ad:c7:38:e8:0a:56:
b5:cc:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:51 2025 by rpki-client