Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
File: AS812.roa (raw, json)
Hash identifier: 0lXK/xEzwurumbkG/vPNnJ2y140XX6ZC5xA08f331xE=
Subject key identifier: 87:F5:51:14:F7:5D:AF:33:F7:F1:DA:50:0C:AF:BF:13:E3:92:C8:D1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 50977CEF5D674611687B0B75F89AB6D4EB38FC0D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
Signing time: Wed 19 Feb 2025 12:39:20 +0000
ROA not before: Wed 19 Feb 2025 12:34:20 +0000
ROA not after: Wed 18 Feb 2026 12:39:20 +0000
asID: 812
IP address blocks: 2a0a:9f00::/29 maxlen: 48
2a0a:ba00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:97:7c:ef:5d:67:46:11:68:7b:0b:75:f8:9a:b6:d4:eb:38:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 19 12:34:20 2025 GMT
Not After : Feb 18 12:39:20 2026 GMT
Subject: CN=87F55114F75DAF33F7F1DA500CAFBF13E392C8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:78:81:12:60:70:7c:82:2b:89:03:83:53:
40:60:48:01:ab:f9:86:af:01:d5:40:f9:9c:c7:c7:
96:1b:c9:94:25:25:a8:ff:32:41:df:c5:da:b1:0e:
3f:13:ee:33:c2:75:af:3e:4e:4f:f4:5e:24:1d:9a:
50:0e:fa:42:c4:65:97:9c:fc:38:b4:93:a3:b1:a7:
14:92:80:25:a1:af:94:0d:ef:17:76:f5:5f:8e:c7:
49:0d:bd:bd:65:37:2e:d4:a5:90:7d:8c:db:f3:d7:
dc:80:78:99:84:63:92:09:ba:c4:1d:59:f8:6b:05:
77:58:f9:2b:be:be:90:69:2d:48:f8:dc:53:01:3f:
0d:4f:3b:91:54:95:4a:41:24:03:e0:6b:bf:40:3d:
46:7e:d3:a9:29:0c:b8:a1:bb:ee:53:51:1e:fd:8c:
90:c8:91:61:dc:92:79:2e:50:e7:eb:6f:45:e2:01:
8b:e8:97:eb:27:50:6c:34:0d:7a:9e:1c:cb:8d:3c:
88:05:2a:f1:e5:26:a3:75:0b:50:b7:3d:3c:05:43:
bd:41:5f:df:09:8c:e0:3a:c3:6f:00:17:fb:ec:16:
5b:5d:69:2b:fb:f0:f6:68:05:e1:1f:58:57:e2:5c:
19:59:ec:7c:c2:e6:9c:5b:33:b9:95:fe:63:69:d0:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:51:14:F7:5D:AF:33:F7:F1:DA:50:0C:AF:BF:13:E3:92:C8:D1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:9f00::/29
2a0a:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
25:69:78:6a:99:5d:28:bd:5f:f4:a9:cc:be:90:5b:38:c7:9c:
72:c9:d9:95:d0:14:7c:52:db:df:79:c4:e4:62:e2:ce:15:93:
d6:d0:83:a8:ee:e1:32:e2:46:aa:74:54:d5:4c:a4:06:a4:62:
f4:58:99:33:01:5a:65:be:e7:dc:2d:05:1b:7b:22:b1:0d:ab:
17:45:53:6b:21:f5:0b:51:a3:23:72:75:c5:98:5a:43:c5:0a:
fa:36:9a:05:d7:50:0d:3b:d4:17:01:55:20:e8:de:6a:5c:9a:
f3:94:1d:ed:85:0e:ed:d0:34:fe:6e:f1:f2:82:f2:c6:3b:81:
bc:f7:06:3d:52:b1:4e:b3:bd:91:11:8d:27:e1:87:dd:4d:2f:
05:8e:31:b0:fb:70:78:5f:e4:06:9e:a2:d0:b4:ee:a5:d5:32:
35:0a:db:02:7d:94:c5:17:8e:28:9c:57:ac:95:88:3b:1c:d1:
4a:aa:64:b0:2b:35:2c:78:8c:5c:bc:a6:65:8e:ff:e8:b0:f0:
ae:71:9b:23:51:48:5f:00:24:d3:4a:06:12:25:9b:ac:07:04:
35:83:69:5c:5f:7f:3a:3a:a6:41:89:7a:ad:dc:1c:7b:79:c0:
4e:36:d1:a0:95:97:97:db:d7:7e:e6:e4:5b:36:c1:9b:18:66:
a6:ba:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:05 2025 by rpki-client