Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
File: AS211851.roa (raw, json)
Hash identifier: 5UTGslJ5yHoGnoa3+6vdlIaEvTXd+qFjP5a9VEYNfU8=
Subject key identifier: DB:D9:DB:17:A6:A3:A6:E4:12:C1:71:A6:01:B9:37:10:1E:22:9C:BE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 78A7B2733041C94780472AB1D7908B0BC4D19E5B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
Signing time: Wed 12 Mar 2025 22:47:19 +0000
ROA not before: Wed 12 Mar 2025 22:42:19 +0000
ROA not after: Wed 11 Mar 2026 22:47:19 +0000
asID: 211851
IP address blocks: 45.157.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a7:b2:73:30:41:c9:47:80:47:2a:b1:d7:90:8b:0b:c4:d1:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 12 22:42:19 2025 GMT
Not After : Mar 11 22:47:19 2026 GMT
Subject: CN=DBD9DB17A6A3A6E412C171A601B937101E229CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:41:9a:19:45:69:bb:42:1f:86:32:88:eb:
1d:22:72:ae:17:35:cf:90:e9:35:fb:c9:33:91:86:
44:09:b1:b1:93:d6:52:da:2b:4f:8d:67:8a:b3:2c:
9d:0c:f3:20:32:fa:b8:c1:2a:92:8b:bf:f5:a6:db:
67:8a:b9:01:bd:22:8e:c3:2c:6a:b6:07:64:e0:bc:
94:ff:ad:9b:b7:a1:e7:a8:78:9a:9c:11:38:d7:5b:
83:b2:79:7e:97:61:63:b4:79:01:53:9c:30:43:6a:
62:09:60:32:b4:7f:06:32:66:2a:7d:66:c0:70:44:
7b:ac:62:fb:15:ff:45:a8:69:00:8c:8f:17:6d:4c:
f8:31:00:fa:3d:24:14:69:97:a0:81:92:8a:bf:87:
0f:b8:9f:e8:be:ca:6d:ba:68:09:71:28:d3:a2:d4:
78:51:f8:5f:38:0b:d9:af:64:12:2e:e1:b5:18:80:
a7:7c:1c:69:4f:08:cd:63:40:96:e8:04:20:69:e8:
bf:ca:11:98:1f:86:88:3c:fa:a6:44:fc:f1:28:56:
45:56:0f:8c:85:5e:d5:a9:c4:58:a5:74:af:e4:31:
be:9e:42:7f:83:b7:92:09:07:24:fd:8f:14:60:21:
02:a0:fb:cf:af:f8:6f:5e:36:fc:1a:d2:09:fc:4f:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:DB:17:A6:A3:A6:E4:12:C1:71:A6:01:B9:37:10:1E:22:9C:BE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.16.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1d:66:06:53:f0:44:6e:b0:f2:52:16:32:d4:a6:7d:65:fb:
51:83:a3:45:7c:1c:5f:dc:5f:84:bd:48:97:05:b5:75:4d:12:
d0:80:48:b9:7d:85:6c:89:26:18:f2:dd:69:3a:c9:77:07:55:
7c:e8:25:22:d2:84:b6:77:39:e5:6f:e9:62:6a:0d:63:20:36:
93:ff:75:f2:b7:07:fa:9e:12:4a:a6:7e:af:a9:e0:b5:e2:8c:
92:b5:20:24:85:13:e3:f7:8d:da:1a:f8:a2:01:53:d5:12:81:
8c:22:4d:96:c5:33:90:d1:49:66:5c:79:cf:c3:e9:8d:4c:96:
1a:c9:b4:70:05:aa:5e:07:f9:12:f6:62:bf:12:65:fc:d1:af:
1e:67:6e:94:5f:72:a5:20:97:f8:d4:31:3c:ba:31:2f:0d:74:
66:cb:d8:9a:e0:c4:f8:3a:a8:50:ea:b8:df:a0:39:1d:b2:bf:
96:2f:53:f1:e5:de:af:1d:3d:b2:89:e0:87:57:d4:76:7e:60:
bf:ec:7a:07:22:c0:fe:c2:14:d8:d1:c7:ae:a9:f8:cc:67:4a:
09:09:7b:71:59:50:3f:73:18:37:d5:e2:44:2e:3b:79:92:6d:
9d:9b:c4:af:99:d5:6b:5b:00:b2:32:e6:d6:72:c5:55:f5:ba:
3b:e2:6d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:47 2025 by rpki-client