Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: fDI35Mr0cYOGNRXVg+CO37QONn9JriWadYaygYc6HG8=
Subject key identifier: 19:97:3A:E8:B6:BC:C6:27:74:61:7A:A8:B6:40:AD:0B:5D:C0:58:94
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3B0C00E22F30544462D16602C9120AE0AA6E3E44
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
Signing time: Wed 15 Jan 2025 04:04:14 +0000
ROA not before: Wed 15 Jan 2025 03:59:14 +0000
ROA not after: Wed 14 Jan 2026 04:04:14 +0000
asID: 215287
IP address blocks: 193.151.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0c:00:e2:2f:30:54:44:62:d1:66:02:c9:12:0a:e0:aa:6e:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 15 03:59:14 2025 GMT
Not After : Jan 14 04:04:14 2026 GMT
Subject: CN=19973AE8B6BCC62774617AA8B640AD0B5DC05894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:3f:fa:64:40:49:56:a7:73:5d:db:f8:56:
66:8e:17:04:9a:8e:53:1c:1d:09:da:dd:6d:3b:61:
ab:8d:2c:8f:e2:bf:bb:ee:d8:7d:04:b2:50:32:22:
1a:e4:2b:b5:9a:83:94:67:a2:1d:44:37:a0:5f:7c:
27:12:cf:0c:ee:01:c8:e3:ec:79:fc:1f:08:ae:09:
2c:63:5b:10:27:21:8d:4f:75:d4:c2:2c:cb:6f:65:
51:ad:84:0e:51:4c:6a:e8:89:7d:5c:6f:43:8e:5b:
7a:5c:f5:f3:60:a8:0f:79:aa:16:36:d3:aa:64:0d:
d2:b7:19:80:d7:ab:af:b8:13:5c:ca:77:9c:e0:0d:
7d:bc:4b:62:48:20:b0:72:51:ee:5b:6d:b1:f2:08:
3e:23:56:cb:c5:4c:2d:3f:ff:bc:e4:9f:df:10:a9:
61:40:72:99:5b:ee:7f:b9:6e:63:66:22:99:c2:e8:
73:d5:7f:c1:5f:1e:3c:a1:63:47:5f:67:dd:30:48:
65:ec:d6:12:21:39:fd:db:ec:8c:b3:d7:fe:c9:1b:
19:af:8f:5f:f0:85:a8:d0:4d:00:1d:38:cf:8f:1c:
c7:b5:5d:10:60:55:20:52:70:d8:9b:91:6c:13:ab:
e8:2d:f9:c3:d0:fd:6b:cd:7b:cf:0f:35:64:82:6e:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:3A:E8:B6:BC:C6:27:74:61:7A:A8:B6:40:AD:0B:5D:C0:58:94
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
90:99:9c:d4:8b:dd:04:63:c8:79:66:e9:18:b9:5c:66:39:98:
1d:78:b3:db:cb:1e:6b:31:4a:67:1a:71:bd:62:ac:3f:ad:ad:
cd:df:69:08:a2:85:42:0b:c3:3f:9c:b8:d9:95:14:82:e2:22:
cd:83:68:02:99:42:47:96:0e:68:21:24:7e:0d:aa:ae:5d:99:
10:6b:b2:c4:c3:c4:16:fd:2e:6c:33:2b:8d:41:27:a7:2f:f2:
98:f0:21:52:35:e1:78:8c:69:76:d4:d4:98:c1:c4:af:fa:f2:
b2:ab:2a:13:8a:02:0d:6f:15:e1:e7:36:38:44:70:56:55:67:
e0:20:46:b6:5a:ab:af:6b:ce:33:f8:f6:73:5b:52:e4:1e:99:
f8:58:e7:36:62:49:60:02:d9:f6:77:2b:81:8f:a4:34:1d:95:
d0:be:51:53:a8:cf:9b:57:38:4e:6e:e8:14:5d:81:8f:3d:40:
29:22:d4:3c:c8:0e:d9:a7:01:b6:0f:ee:52:d1:44:8b:71:4d:
65:e6:4b:e1:1a:65:81:58:d8:7b:48:e6:8c:d2:33:f1:01:56:
8f:be:1a:e4:ef:e1:5d:3a:9b:56:07:01:c7:da:a1:d0:a2:66:
ca:ce:e7:76:8f:f9:23:a6:4e:8a:0d:1f:1d:be:1b:0a:81:81:
5b:88:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:13 2025 by rpki-client