Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: NuFBnA8uTlQC46GtEHitVyRkDeqTr7KfbowRdXDOFrQ=
Subject key identifier: 1D:0D:2F:10:89:17:4F:28:B3:1A:E1:39:1C:65:23:93:25:AE:88:65
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6A43B07FC59D40683F246410CECD3F7B84A30DF0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210538.roa
Signing time: Thu 16 Jan 2025 13:53:51 +0000
ROA not before: Thu 16 Jan 2025 13:48:51 +0000
ROA not after: Thu 15 Jan 2026 13:53:51 +0000
asID: 210538
IP address blocks: 194.105.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:43:b0:7f:c5:9d:40:68:3f:24:64:10:ce:cd:3f:7b:84:a3:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 16 13:48:51 2025 GMT
Not After : Jan 15 13:53:51 2026 GMT
Subject: CN=1D0D2F1089174F28B31AE1391C65239325AE8865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:02:2f:b2:fa:65:d9:ad:9c:70:9e:fa:08:
06:e4:ac:56:aa:bc:a2:06:f5:06:12:2a:fb:7f:03:
a7:fd:08:7e:67:cc:fd:28:45:2c:b6:48:6c:f0:de:
22:a0:34:5b:0d:04:fc:68:bf:b8:ee:4c:19:8e:1d:
ce:21:7e:63:cd:8d:43:75:44:1c:99:42:c7:70:83:
11:b2:72:87:3a:37:a2:a8:c1:85:65:4b:21:cc:fa:
38:3e:0f:19:fb:e9:6f:a5:8b:c8:a6:6b:cb:ad:7d:
ad:d6:01:04:bf:34:8f:5e:25:d4:a8:2e:47:3b:e2:
0c:90:ad:f5:0f:79:1b:f8:e2:ed:9b:2c:47:28:91:
24:d5:9b:5c:50:fa:29:35:13:55:6f:ad:64:ce:84:
15:5b:12:2e:09:3f:23:05:fc:1e:de:9c:32:48:e0:
63:18:0e:e5:dd:36:6e:4a:e5:75:e8:ec:4a:13:c1:
9b:f8:ff:f1:9e:58:d1:26:90:b6:ba:ca:e0:48:e0:
11:66:ac:fe:c6:a9:59:9a:c7:e3:ee:95:bc:cd:8c:
4f:40:37:aa:c4:13:bc:23:2a:8a:81:3e:f4:19:30:
f7:25:65:25:c5:84:77:c7:a6:0b:8f:67:9f:1c:b3:
84:f4:99:4f:57:fb:66:1c:f4:94:47:96:dd:f6:11:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:2F:10:89:17:4F:28:B3:1A:E1:39:1C:65:23:93:25:AE:88:65
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b6:78:bc:e5:da:7d:eb:f7:f9:dd:9e:4b:5c:69:25:87:e9:
f1:6c:a3:62:82:58:f5:32:12:ad:76:b2:74:16:ee:d9:1b:ea:
47:5e:ab:dd:b4:df:b9:02:f3:12:44:6f:f5:5b:7f:09:fa:c3:
1f:52:14:d5:bb:10:71:ec:97:2b:58:65:6c:ed:76:9c:9b:8f:
58:95:03:6d:df:cb:49:2c:81:e2:a4:99:c0:8b:13:bb:74:30:
f0:c7:64:b5:a1:b5:82:c1:4b:fa:e0:67:3b:91:94:b8:0c:f0:
78:a2:f6:0b:bb:0b:50:be:10:66:56:27:e1:07:4b:b3:39:c8:
1e:dd:8f:61:62:ba:73:18:b9:d8:ec:25:40:64:ec:66:2c:7f:
f4:64:2f:b1:a1:2d:c2:03:c7:47:88:5d:ab:8a:32:9d:a5:bc:
91:0d:ff:20:fc:55:eb:00:90:fd:47:50:e2:b6:c8:fe:a9:96:
2c:81:77:c7:77:0e:39:91:3c:0c:65:94:ed:15:ef:5a:15:9b:
36:d9:3a:4d:11:8e:78:68:a7:50:5f:7b:6a:06:5a:a6:50:1c:
eb:af:21:a5:74:9f:fa:0d:a7:d2:c5:97:e8:99:36:35:ed:5a:
18:37:d9:5b:5b:e1:73:39:fc:2e:14:bf:8e:3e:39:c5:1f:86:
f3:0d:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:25 2025 by rpki-client