Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213637.roa
File: AS213637.roa (raw, json)
Hash identifier: DVbk+CQD5GmqE90LP9GaRh43nuI8C9nazELWCHyEZMs=
Subject key identifier: 7D:95:B2:E4:BE:7D:2A:C7:FD:89:A9:22:4E:92:8C:C7:FA:70:80:B7
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5D2203900750D4EF8A38E64B91907D5F9220BFF3
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213637.roa
Signing time: Tue 18 Mar 2025 10:47:33 +0000
ROA not before: Tue 18 Mar 2025 10:42:33 +0000
ROA not after: Tue 17 Mar 2026 10:47:33 +0000
asID: 213637
IP address blocks: 193.17.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:22:03:90:07:50:d4:ef:8a:38:e6:4b:91:90:7d:5f:92:20:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Mar 18 10:42:33 2025 GMT
Not After : Mar 17 10:47:33 2026 GMT
Subject: CN=7D95B2E4BE7D2AC7FD89A9224E928CC7FA7080B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:6f:7a:a3:c1:de:92:39:ea:6d:65:bc:ef:
93:54:de:24:ed:89:25:fb:56:d2:1e:43:b3:aa:c5:
db:c9:b9:f2:af:4e:81:55:12:eb:97:fc:fd:b1:2e:
2a:ca:21:d5:a9:a8:b7:de:30:4e:eb:51:aa:89:0e:
26:14:91:17:db:bc:c0:2e:72:5a:e8:e7:82:b7:45:
bc:c8:49:9e:7c:6b:db:6f:25:5f:d6:ba:3a:fb:fb:
f4:d4:d3:46:69:32:40:f3:b4:ee:e1:50:ae:31:92:
24:06:38:18:92:ff:70:7b:13:60:96:2f:ff:d0:cc:
ab:cc:7b:aa:c0:68:a0:d2:59:c1:e8:7e:08:d5:0c:
6a:52:c5:c6:fb:e6:ae:d5:56:46:b9:3d:2b:d9:8b:
28:a6:90:a3:c9:8d:04:7f:f2:c4:83:b2:f0:4a:40:
e7:61:3c:de:b0:2c:d8:84:1c:17:88:9f:23:d4:ce:
a6:65:3c:b9:eb:83:b9:2b:ec:2d:2f:9c:89:07:09:
1d:09:b1:41:d3:02:27:50:5f:f5:29:e4:57:28:60:
e3:f2:da:e1:39:2b:6d:44:d5:b8:d2:9a:6e:ef:43:
6a:e9:f2:ad:b3:52:a4:1f:be:bc:ce:3b:50:76:9b:
3d:31:64:10:56:81:7f:1e:d9:b8:a3:2a:72:ca:33:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:B2:E4:BE:7D:2A:C7:FD:89:A9:22:4E:92:8C:C7:FA:70:80:B7
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1b:55:87:4b:b1:c7:38:23:02:b4:3b:d4:fe:7a:0d:b6:2c:
34:03:e3:e8:af:02:f5:a0:b3:4d:91:7f:64:d9:47:c2:f9:cc:
b6:e0:da:87:72:68:cb:1c:2f:b4:58:7e:57:58:12:e8:1e:de:
3c:c9:00:3f:1f:9d:5d:83:60:e3:09:82:72:8e:9e:67:0d:f4:
96:16:c1:62:6c:e8:07:bd:b7:34:93:c4:62:ea:d8:d0:53:7a:
ff:62:7f:be:54:29:05:d3:1f:a8:00:a5:5b:e9:67:c9:65:30:
9c:8f:e9:5f:bc:77:21:af:bb:1e:2e:31:4d:b5:ac:3a:5a:68:
ca:ac:15:a7:c9:3d:19:4f:b5:77:21:5e:95:4f:56:ad:f7:27:
40:d0:98:91:8a:e0:aa:ec:59:c8:2d:35:e3:e0:08:45:61:58:
37:9d:fd:44:3e:40:43:8a:ed:01:9e:af:0f:66:b9:71:bd:b1:
ac:44:0b:74:02:33:ea:2b:71:ea:41:fb:ae:b3:e5:24:c6:77:
f8:69:9b:2e:19:97:91:14:7b:b7:7f:b9:10:17:15:d0:6c:2d:
a8:13:d9:23:9f:fe:f7:28:1f:70:be:67:dd:a9:83:bb:f9:2d:
7a:92:5d:68:3f:eb:6e:64:8f:b4:bd:88:fe:69:5a:b5:80:aa:
9c:83:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:00:43 2025 by rpki-client