Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
File: AS215400.roa (raw, json)
Hash identifier: 4VFVmaR1iz9sQcmnhmgT+STuOAuZ646Ow437EenitF8=
Subject key identifier: 91:61:14:15:BB:8F:C8:F8:2D:21:EB:48:93:B3:12:B1:F2:13:1D:2B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 781870AE2D9F3BDD7895F3EB49421CFF322FC8CB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
Signing time: Sun 09 Feb 2025 03:53:53 +0000
ROA not before: Sun 09 Feb 2025 03:48:53 +0000
ROA not after: Sun 08 Feb 2026 03:53:53 +0000
asID: 215400
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:18:70:ae:2d:9f:3b:dd:78:95:f3:eb:49:42:1c:ff:32:2f:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 9 03:48:53 2025 GMT
Not After : Feb 8 03:53:53 2026 GMT
Subject: CN=91611415BB8FC8F82D21EB4893B312B1F2131D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:eb:4c:1e:25:46:e7:b6:9f:81:9f:87:cd:
24:88:08:6b:22:c1:7e:74:1a:4a:ee:de:63:ee:43:
66:6c:83:4a:d3:4c:6d:91:32:0d:0e:99:35:f0:44:
dd:04:0d:56:f3:7d:1f:5f:fb:3b:fa:08:e4:36:2c:
4e:d3:0e:17:8b:fd:ba:c2:0c:a8:c4:9c:ec:40:2c:
a2:cc:3b:91:2b:c6:49:9d:85:42:59:a8:eb:f5:ec:
f9:2e:5e:ce:51:98:8c:e4:21:2c:21:95:2e:fa:ec:
90:11:b4:96:96:f7:8a:48:b4:87:05:3a:92:e8:5b:
16:33:3b:0a:fb:bf:c4:9c:91:b7:de:b5:c5:1e:f2:
f2:82:00:51:0c:2b:01:bc:72:50:89:c8:81:14:c9:
19:ea:7e:60:91:12:cf:e9:4a:17:a6:6e:72:55:ad:
2b:79:b8:5a:b3:f4:07:a2:b2:64:1c:d2:cd:63:dc:
7e:60:b1:d9:9f:8f:10:24:b4:5c:d5:fd:04:79:8a:
1a:8a:00:8a:f1:62:22:14:28:9e:24:c4:11:06:3a:
53:88:b3:74:06:c5:a0:fd:c5:cb:dc:61:cd:43:c1:
87:8f:e8:f5:15:16:4e:0f:b6:9b:4b:30:7d:0f:b1:
ed:4b:61:97:cc:e4:a5:19:47:cf:4f:3f:ba:a1:a0:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:14:15:BB:8F:C8:F8:2D:21:EB:48:93:B3:12:B1:F2:13:1D:2B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
92:eb:a0:bd:04:e8:98:37:5f:b7:d0:8a:a6:d1:68:67:9f:43:
25:5b:04:15:b8:1f:c3:a2:8e:50:e7:3a:3f:08:1e:95:6f:70:
3e:de:bf:d1:ab:8b:de:60:d9:be:da:0f:31:39:7d:24:92:09:
79:75:e0:30:95:85:04:2a:bf:ad:f8:44:f2:c5:16:1a:ff:2e:
ad:c6:7b:7a:77:18:47:a4:ba:51:24:33:fb:b5:6b:31:12:76:
42:9c:3c:ea:20:7b:32:d5:67:55:a3:7a:96:51:cb:da:a8:72:
2b:b8:61:81:2e:07:11:2e:94:ac:0f:07:08:37:12:8d:50:06:
13:6d:eb:a9:79:33:d7:3c:71:dc:25:28:22:e0:29:be:68:b9:
76:81:f4:21:6a:f3:a9:ec:b6:8d:b2:e7:5d:83:2e:1f:df:b9:
15:e0:63:29:7e:3c:1a:5e:2a:21:05:05:77:38:a2:9c:56:7a:
6f:df:7a:21:ec:cc:59:ca:6d:12:b9:3c:98:ae:88:49:4c:30:
7d:db:9d:e6:03:48:5f:e1:04:c2:b6:6b:15:d6:e7:9d:d3:be:
46:ca:5b:62:6f:ef:ee:77:bd:b5:88:67:ff:dd:14:d1:4a:d5:
f7:bb:8f:99:10:b2:8d:c0:c1:26:8c:a4:ea:ac:4c:f0:f1:c5:
df:32:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:38 2025 by rpki-client