Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: rI3GoWFCZ0F+zkRd99hhpccNUrac6E99fwH6eRzEvks=
Subject key identifier: AC:77:20:0A:34:EE:58:6D:90:E4:A2:D2:57:1E:67:1D:D8:BC:79:F3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2566CEF9943273C9419884FB44A968CEEFD1F702
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63023.roa
Signing time: Sat 01 Mar 2025 19:53:55 +0000
ROA not before: Sat 01 Mar 2025 19:48:55 +0000
ROA not after: Sat 28 Feb 2026 19:53:55 +0000
asID: 63023
IP address blocks: 45.146.82.0/24 maxlen: 24
45.158.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:66:ce:f9:94:32:73:c9:41:98:84:fb:44:a9:68:ce:ef:d1:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 1 19:48:55 2025 GMT
Not After : Feb 28 19:53:55 2026 GMT
Subject: CN=AC77200A34EE586D90E4A2D2571E671DD8BC79F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:c6:80:cc:de:2c:b8:6f:b8:d3:f9:ac:1f:
7d:dd:f9:a7:c5:f7:5d:7b:25:37:ea:0e:7d:1d:25:
be:8b:30:da:65:5c:3e:33:f7:61:05:46:97:d2:69:
75:43:01:ac:22:66:a3:a7:49:f7:9c:a4:71:da:13:
f1:37:28:02:ea:3c:fe:3e:5f:bf:ba:c0:8e:90:87:
76:60:d8:a2:21:f8:f9:8e:28:81:db:57:84:1c:4e:
b7:30:35:64:80:b2:46:80:d0:a7:e1:30:7a:9a:de:
4d:b5:15:c1:29:b5:e7:31:1b:d2:f8:f0:68:37:38:
20:34:52:a8:0c:17:3e:43:ba:49:f2:c8:da:83:7d:
94:3b:2b:03:81:d0:25:4f:c6:c4:1c:99:54:07:04:
ac:64:a3:8d:27:75:c5:97:3f:2e:75:2a:eb:f3:be:
fb:c4:a2:c1:2b:96:a3:9c:e8:96:93:75:61:3b:bb:
93:cb:97:04:15:f2:e7:45:3b:43:fe:99:d8:c0:19:
df:cb:7e:39:5b:92:13:61:ab:b9:82:78:c9:98:01:
d2:7a:8f:21:2b:23:45:62:c3:96:14:ab:7e:60:be:
52:4c:d3:b1:c9:83:6f:2f:ac:f7:ce:42:ae:8f:32:
34:ef:72:7a:4f:d5:fb:81:30:62:e8:6b:1e:e4:20:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:20:0A:34:EE:58:6D:90:E4:A2:D2:57:1E:67:1D:D8:BC:79:F3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
45.158.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:a6:2d:31:32:2e:c6:61:db:50:e8:05:19:ce:bd:4c:85:
08:f1:5c:6b:b5:d3:6d:40:a7:7a:50:62:2f:ee:d8:af:4a:dd:
58:1d:d5:96:e8:18:27:86:33:26:e5:27:20:59:0e:5f:32:bf:
77:2b:b3:f1:d2:7b:d3:f4:59:a3:81:30:1a:9f:1e:f6:f3:28:
80:a0:bc:5e:52:7c:ba:fb:a7:de:51:d9:eb:89:b7:1f:29:52:
22:6a:66:e2:25:2c:21:5f:78:a4:24:e0:be:5f:5d:d7:78:16:
fb:11:bc:30:d4:52:98:5e:05:d0:88:c1:ba:76:4d:67:00:3b:
0f:94:af:1f:02:18:4f:be:07:10:e7:e9:20:39:8f:50:ed:8e:
03:8d:2e:d1:d8:75:db:fc:ce:fd:06:b2:6e:52:b2:8b:a1:60:
d9:cc:4f:eb:5b:d3:8c:7e:a1:ef:a8:e4:2b:43:d3:bb:27:6d:
24:b0:74:b5:6b:54:5a:65:6e:41:5e:77:aa:d0:54:08:08:a5:
fe:1b:34:08:a5:bf:9b:e9:3a:51:da:5c:72:97:50:c5:43:ca:
52:c4:01:87:55:52:a4:82:e5:29:39:28:55:41:5d:1e:bc:be:
94:6f:0c:7d:67:b3:3a:eb:71:53:8c:08:53:39:54:f1:e8:83:
23:94:a7:dc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUJWbO+ZQyc8lBmIT7RKlozu/R9wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTAzMDExOTQ4NTVaFw0yNjAyMjgxOTUzNTVaMDMxMTAvBgNV
BAMTKEFDNzcyMDBBMzRFRTU4NkQ5MEU0QTJEMjU3MUU2NzFERDhCQzc5RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMcaAzN4suG+40/msH33d+afF
9117JTfqDn0dJb6LMNplXD4z92EFRpfSaXVDAawiZqOnSfecpHHaE/E3KALqPP4+
X7+6wI6Qh3Zg2KIh+PmOKIHbV4QcTrcwNWSAskaA0KfhMHqa3k21FcEptecxG9L4
8Gg3OCA0UqgMFz5DuknyyNqDfZQ7KwOB0CVPxsQcmVQHBKxko40ndcWXPy51Kuvz
vvvEosErlqOc6JaTdWE7u5PLlwQV8udFO0P+mdjAGd/LfjlbkhNhq7mCeMmYAdJ6
jyErI0Viw5YUq35gvlJM07HJg28vrPfOQq6PMjTvcnpP1fuBMGLoax7kICnZAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUrHcgCjTuWG2Q5KLSVx5nHdi8efMwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNjMwMjMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAtklID
BAAtngswDQYJKoZIhvcNAQELBQADggEBAE2npi0xMi7GYdtQ6AUZzr1MhQjxXGu1
021Ap3pQYi/u2K9K3Vgd1ZboGCeGMyblJyBZDl8yv3crs/HSe9P0WaOBMBqfHvbz
KICgvF5SfLr7p95R2euJtx8pUiJqZuIlLCFfeKQk4L5fXdd4FvsRvDDUUpheBdCI
wbp2TWcAOw+Urx8CGE++BxDn6SA5j1DtjgONLtHYddv8zv0Gsm5SsouhYNnMT+tb
04x+oe+o5CtD07snbSSwdLVrVFplbkFed6rQVAgIpf4bNAilv5vpOlHaXHKXUMVD
ylLEAYdVUqSC5Sk5KFVBXR68vpRvDH1nszrrcVOMCFM5VPHogyOUp9w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:10 2025 by rpki-client