Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: tX4OesRQwA+HGbfiNK7Ri/B54ZiZHCRIFU/+wm9JvWk=
Subject key identifier: CE:EC:4A:10:95:03:CC:60:80:08:E6:AF:5D:97:56:8E:4C:00:A9:A8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 09E2A6B0E0D117EE80E07A378BF6933347A631B1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa
Signing time: Fri 24 Jan 2025 11:53:52 +0000
ROA not before: Fri 24 Jan 2025 11:48:52 +0000
ROA not after: Fri 23 Jan 2026 11:53:52 +0000
asID: 55720
IP address blocks: 5.181.132.0/24 maxlen: 24
181.215.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e2:a6:b0:e0:d1:17:ee:80:e0:7a:37:8b:f6:93:33:47:a6:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 24 11:48:52 2025 GMT
Not After : Jan 23 11:53:52 2026 GMT
Subject: CN=CEEC4A109503CC608008E6AF5D97568E4C00A9A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fe:a2:7b:9e:05:73:b9:91:df:e2:06:ca:bd:
5c:e9:d3:3f:34:ac:b3:b6:74:12:3c:69:19:6a:3b:
60:88:d7:b5:e1:f2:3f:05:e0:2f:3f:ce:bf:f3:87:
60:af:f8:e5:20:7e:8e:4b:25:d4:b4:1d:28:81:b6:
60:d4:66:bf:ee:c1:a2:5d:ba:d1:fb:94:14:0a:66:
b0:89:06:9a:a5:86:45:55:67:ed:ff:84:bb:ce:1d:
af:53:ff:d2:c0:28:24:42:2c:a6:df:3e:33:9c:02:
a3:ed:31:e1:73:19:9d:8b:1f:94:19:d6:f6:5d:72:
b5:99:92:28:39:39:ea:8d:92:0c:4c:79:c6:0d:cb:
94:89:c5:7e:ca:49:54:96:00:d8:06:e4:3c:50:73:
5b:ff:e9:b0:86:71:9b:d8:b3:3f:95:2b:40:54:d6:
48:fb:6b:30:61:a6:fb:9e:be:9a:e1:99:b5:16:a4:
d5:2f:08:0a:9f:c6:a4:58:58:3b:fb:18:22:fc:7f:
9b:4a:02:ab:0e:fb:42:e5:73:d9:63:c3:6b:ba:d3:
2a:23:14:34:d8:00:5f:4a:08:d0:77:46:87:1a:50:
7c:87:64:9e:71:66:77:8f:31:42:e2:42:6c:03:fb:
f1:83:96:0e:e2:15:60:13:f4:93:a2:0a:27:0e:f5:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:4A:10:95:03:CC:60:80:08:E6:AF:5D:97:56:8E:4C:00:A9:A8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.132.0/24
181.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:22:37:d0:4f:0e:c8:a5:70:01:03:fc:ea:b5:92:09:8d:64:
e1:86:b0:35:ca:07:dc:74:ef:4b:78:42:25:c2:4c:1e:f5:17:
af:25:b6:17:35:9b:b2:fc:46:35:05:09:b2:4c:4a:d5:dc:dd:
73:0c:9a:27:f6:81:b5:a4:0a:f9:9e:6b:71:0d:b9:bb:42:77:
c5:cd:d2:a6:a6:4c:f5:07:d1:ef:55:47:08:46:4d:ea:1e:bb:
ce:c2:32:43:78:ac:14:2c:48:19:3f:0a:e3:8d:18:e5:fc:78:
14:06:04:8e:4e:f2:23:fe:c3:0b:f2:71:0f:6e:19:dd:2f:31:
14:c1:8e:e5:1f:92:17:fd:8a:0b:2c:82:ca:8f:ab:4c:88:af:
4d:1e:1e:cf:ec:3c:59:ed:43:73:c4:2c:e1:97:0c:46:b2:6c:
a9:4f:fb:79:3a:14:0c:27:d1:ed:db:54:dd:54:59:09:59:42:
e9:ea:73:62:6f:7f:3b:fe:1c:89:93:b5:6a:81:40:b9:8d:49:
1c:25:0d:5e:28:d7:48:67:b1:60:9c:0a:65:e8:4d:4a:84:0f:
61:8a:56:95:42:33:bf:3a:b4:50:5f:06:4e:31:c2:cd:d0:ca:
18:1b:17:b0:5c:ac:57:3f:47:5e:8a:37:62:23:11:6d:f7:30:
49:75:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:01 2025 by rpki-client