Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: Ecu+2A2xgf+HRGJYuEUqESzW/1bOruGDZkIDnYhBS0c=
Subject key identifier: 9D:A7:D8:E0:EF:8C:88:B5:8E:F7:6D:66:51:64:65:9B:5C:98:33:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3BC270945DDE656F9494C675BA288749A061E3E9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61138.roa
Signing time: Sun 16 Jul 2023 13:30:07 +0000
ROA not before: Sun 16 Jul 2023 13:25:07 +0000
ROA not after: Sun 14 Jul 2024 13:30:07 +0000
asID: 61138
IP address blocks: 179.61.255.0/24 maxlen: 24
181.214.16.0/24 maxlen: 24
181.214.22.0/24 maxlen: 24
181.214.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c2:70:94:5d:de:65:6f:94:94:c6:75:ba:28:87:49:a0:61:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 16 13:25:07 2023 GMT
Not After : Jul 14 13:30:07 2024 GMT
Subject: CN=9DA7D8E0EF8C88B58EF76D665164659B5C98338A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:74:2a:62:07:6e:c0:bc:13:1a:8d:02:50:
4e:35:f0:d2:d8:11:d0:fc:f7:25:b0:81:87:ce:b0:
b7:70:33:cb:03:3a:ff:84:78:0d:8d:28:e8:14:9e:
e7:05:6b:8e:c8:33:a8:e5:20:8d:5b:65:3b:d8:29:
87:77:76:fe:3a:81:4f:40:27:3f:4f:2c:d4:47:c3:
a4:70:55:47:d7:d3:8a:c3:48:9d:39:aa:1b:b7:d5:
22:a9:60:72:6f:15:48:b4:d3:54:11:1a:aa:4f:e4:
1d:99:53:73:84:c8:d3:60:b9:8b:ef:6b:5a:87:9e:
65:3d:82:08:f3:a8:44:44:ee:f5:72:c6:67:68:a8:
f5:45:a8:fd:e3:ca:89:d4:c0:b5:d1:e8:f2:2d:f6:
64:08:c4:c8:69:3d:6b:2f:46:e4:ca:75:2b:4a:b1:
b5:ed:e0:d1:77:7e:67:84:90:9b:8c:22:22:b5:ed:
bc:b4:38:6f:ba:0d:a2:c0:c3:15:3f:73:00:40:25:
c9:e8:51:25:a9:b0:80:03:f6:3a:3d:2c:a4:25:91:
cb:c1:1e:9b:02:fc:85:af:c8:2d:b2:90:49:10:3d:
d2:08:f6:1b:51:47:ef:14:42:23:ea:6b:08:8c:dd:
cc:4c:97:ba:da:60:e6:16:82:7e:d2:7f:40:8a:f2:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:D8:E0:EF:8C:88:B5:8E:F7:6D:66:51:64:65:9B:5C:98:33:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.255.0/24
181.214.16.0/24
181.214.22.0/24
181.214.30.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d2:f9:e4:05:57:52:02:f2:75:4d:4d:b7:b8:20:d4:09:81:
df:e2:4e:c3:c5:d0:1c:66:5a:d5:34:42:09:bc:eb:74:45:c7:
6e:da:a0:02:8d:d8:65:50:71:fa:12:66:ef:2d:bc:47:84:01:
ea:fe:a1:95:73:b1:31:b8:0f:8e:b1:8a:44:f0:e5:b1:d1:9b:
57:55:4a:0c:98:a8:ad:a2:3b:b4:f9:da:42:4a:4f:62:bb:3e:
98:84:a8:7e:41:34:42:96:51:75:69:28:95:a2:f2:7d:b8:71:
de:38:fb:8e:03:8b:16:b9:dd:92:d1:6d:8d:80:9e:b4:23:d6:
af:f0:9b:8c:7c:fb:46:d6:e6:a4:ad:c7:44:9d:b8:1b:6e:c1:
c8:93:11:07:7e:05:2f:0f:d4:00:53:fb:d4:2f:3d:02:ba:ed:
46:94:16:ed:0f:59:7b:f7:f2:87:f0:28:5e:01:6d:be:22:f6:
eb:85:f0:8d:83:8a:19:99:3d:c1:96:6f:56:0f:de:a4:12:93:
da:14:00:e0:b5:00:bf:38:99:fa:7a:ea:b2:25:08:22:fd:0e:
c5:af:45:de:f0:ce:3b:2e:2c:2d:46:6f:c7:ae:2f:d8:43:75:
f8:f0:72:ce:3b:6b:96:eb:de:77:5f:70:55:51:40:a8:dc:d6:
0b:c3:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:45 2025 by rpki-client