Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
File: AS151544.roa (raw, json)
Hash identifier: +dE4epH1fEiEx+UzKzD0QTuxgmJEqltkR7nRU4ZTcnI=
Subject key identifier: 0E:00:DD:86:C5:01:35:73:C8:F5:AF:7F:54:FF:F0:A5:77:12:F0:95
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 61DC3184CB154ED4FE7FAC56E67093E6CE26952B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 151544
IP address blocks: 2a14:7581:f10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:dc:31:84:cb:15:4e:d4:fe:7f:ac:56:e6:70:93:e6:ce:26:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=0E00DD86C5013573C8F5AF7F54FFF0A57712F095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:52:5b:e0:d5:1b:d4:7e:55:7d:56:f4:64:
8b:15:cf:8e:a1:33:82:1c:2f:e4:7c:0f:6e:9f:5c:
4d:43:88:0f:fc:3b:11:fd:a2:dd:7b:ca:a5:f0:66:
e0:b5:1f:3d:3c:9d:78:43:6d:02:e3:22:a6:6d:f9:
7d:2c:6c:68:b3:8a:c3:a5:3c:cf:12:07:0a:91:fd:
bc:5f:b1:8a:5f:44:09:a5:87:58:c5:db:79:b3:e4:
74:e0:26:41:4a:a5:ed:ff:04:a0:64:75:58:97:d3:
68:57:83:e0:4f:81:2c:c5:38:35:06:84:46:0c:39:
0b:e6:54:34:d1:ff:bd:67:c6:3b:90:44:2a:1b:2e:
78:f1:2a:66:59:e0:bb:52:63:ae:10:0f:85:78:3c:
63:0a:c0:e9:67:31:dc:64:67:39:41:74:dc:af:73:
21:7d:76:58:35:6b:0c:24:14:4e:cd:d8:e7:1c:3d:
eb:75:0d:80:79:92:83:17:49:7b:91:c6:d2:64:ee:
16:82:c8:82:ee:b0:55:5e:3b:2d:c7:ea:40:24:b2:
be:e2:39:b6:ff:3d:58:92:58:7e:39:7b:06:4a:78:
ab:fc:d0:34:83:a6:43:45:f9:99:11:d2:c7:d5:69:
2b:4a:80:95:18:2a:8d:5c:b1:68:e2:86:5d:46:79:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:DD:86:C5:01:35:73:C8:F5:AF:7F:54:FF:F0:A5:77:12:F0:95
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS151544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f10::/44
Signature Algorithm: sha256WithRSAEncryption
9e:5f:63:44:c8:74:c2:aa:21:6c:35:23:8d:f0:d6:76:c5:f1:
d2:69:88:cf:81:3b:95:12:9c:7c:fd:ac:5b:48:19:ed:69:50:
00:ff:c6:c5:71:42:05:bd:3b:2c:84:8f:f2:54:61:b5:19:77:
e1:1a:f4:0a:ba:c8:0b:8c:18:87:ff:76:e3:2e:62:0e:85:17:
7b:dc:20:1f:52:c0:25:11:bc:d1:87:37:77:b0:13:46:3c:10:
8f:bd:01:d9:92:50:5b:66:da:9d:82:c4:e0:41:46:91:6c:11:
d7:98:03:18:55:33:17:2c:9a:bb:a2:17:01:aa:28:fb:5b:ef:
d7:dd:d1:23:00:e8:37:ae:38:83:68:1d:89:67:40:f5:8c:2b:
fa:18:72:d9:fd:9e:96:0d:dd:6f:4c:f2:09:13:1e:27:ab:42:
ce:ce:71:b5:f7:2d:92:01:9b:81:6b:83:21:59:90:79:c1:07:
09:ab:64:2c:52:3e:93:ae:8f:17:61:bc:6b:75:91:44:d1:f6:
ad:da:57:40:a9:dc:39:fb:08:6c:b7:ff:1a:01:60:27:ff:bb:
c5:16:fa:7f:2a:63:48:df:f7:46:1f:bc:5b:7e:44:68:1f:a2:
cc:08:cd:eb:48:cf:3b:a5:ac:a4:3d:7c:d1:82:5a:47:67:1f:
81:51:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:56 2025 by rpki-client