Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
File: AS60542.roa (raw, json)
Hash identifier: qV7A2q5DBGnpPZidXalepXHlzX/3n4cKuDNtIEsOvKE=
Subject key identifier: CA:F3:3A:06:25:73:E8:12:99:5B:D9:8E:F6:7D:90:1F:BA:CE:21:94
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4DC30871792962760DAF729CA12B334A6A0CEBBC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
Signing time: Fri 21 Mar 2025 01:53:58 +0000
ROA not before: Fri 21 Mar 2025 01:48:58 +0000
ROA not after: Fri 20 Mar 2026 01:53:58 +0000
asID: 60542
IP address blocks: 191.101.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c3:08:71:79:29:62:76:0d:af:72:9c:a1:2b:33:4a:6a:0c:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 21 01:48:58 2025 GMT
Not After : Mar 20 01:53:58 2026 GMT
Subject: CN=CAF33A062573E812995BD98EF67D901FBACE2194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:22:02:37:ec:a7:ed:b8:52:15:b6:91:07:
33:fb:49:c1:fe:bb:42:e4:66:ff:a8:24:c3:55:94:
30:20:75:92:bc:2c:a0:53:19:45:a8:91:8d:94:36:
5c:21:ed:bd:40:40:d3:31:e2:e6:54:6f:d4:cd:a2:
b9:39:e4:37:a3:82:ec:46:49:85:db:ff:a3:1f:d5:
e1:e1:ac:a1:ab:b1:ae:67:7c:81:06:eb:13:59:55:
94:c5:06:0c:55:b0:c1:d4:09:18:6d:7f:9c:be:4f:
65:84:91:83:02:66:76:51:0f:96:46:e7:86:4e:06:
92:10:99:aa:61:1c:61:a1:2a:14:34:a5:4b:3e:53:
16:85:d6:77:35:a2:cb:e1:41:c4:52:2e:78:94:8f:
5b:50:dc:7d:66:08:a2:e3:39:54:d3:9d:26:7c:10:
b0:02:d2:41:d0:ad:e8:ba:ce:fb:1d:e2:7f:1d:23:
77:d1:54:1c:59:e4:6f:ac:51:66:d9:f1:38:97:ed:
cc:ec:ed:f4:b2:44:91:b7:df:92:8f:1d:32:fa:33:
16:60:6f:fe:a9:bb:48:3b:ea:64:e1:f0:a1:2f:b7:
5f:03:26:5b:b2:ae:46:cd:ca:96:48:36:03:c1:13:
0a:f5:d3:d6:5f:f4:09:fa:c1:f0:c0:43:e0:19:9d:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:3A:06:25:73:E8:12:99:5B:D9:8E:F6:7D:90:1F:BA:CE:21:94
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d5:9e:8d:c7:9f:5a:13:36:87:71:9f:da:92:47:10:77:83:
6c:8f:0d:ef:d6:34:b5:d3:d1:67:e2:df:49:b1:14:3d:ce:0a:
8c:57:50:b5:ce:8c:66:25:fd:5b:83:88:4f:da:4f:31:e2:c7:
75:42:db:e2:49:6c:8d:3c:1b:85:b6:5c:b7:64:68:a2:f7:1a:
85:98:0a:98:66:c7:08:35:76:2b:62:9b:ad:f6:68:62:b1:b9:
35:82:2e:50:56:f8:e3:d0:fe:7a:ad:29:df:b1:8d:c6:aa:24:
ce:a7:b1:5c:cf:95:ca:f0:e4:56:1b:ac:ef:03:9c:22:4a:fb:
3c:cc:c7:0b:1d:6c:55:96:f1:1c:24:60:e7:9f:d3:7d:fb:64:
61:25:3c:43:75:b0:db:1c:8e:2c:7a:fb:3e:8c:be:fa:83:cb:
1d:a9:0a:77:56:21:ed:2e:75:ae:25:f3:e4:ae:d8:3d:1a:78:
e5:19:4a:0f:30:4a:61:5e:60:a3:cc:d3:6b:0b:11:44:44:a8:
9b:05:b8:21:5d:12:56:ff:6d:d9:7f:eb:0a:5a:04:d3:0b:db:
3b:b4:52:eb:a5:65:5f:0d:dc:8c:62:0a:6a:78:fa:5d:ab:cf:
06:49:d7:e1:58:54:23:d9:ce:7a:02:fd:12:d1:d6:48:b5:53:
35:55:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:00 2025 by rpki-client