Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: ikqlloxnzFVzvJckDzz2cktu3stJyG37/UtsQ7cVODk=
Subject key identifier: E6:3C:70:06:E7:FB:AB:DA:12:78:C4:2A:E8:B1:10:7F:D2:A8:A3:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2E321061A997676D374925691C01C15E8814EFA6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
Signing time: Mon 03 Feb 2025 21:53:53 +0000
ROA not before: Mon 03 Feb 2025 21:48:53 +0000
ROA not after: Mon 02 Feb 2026 21:53:53 +0000
asID: 53107
IP address blocks: 141.11.72.0/23 maxlen: 23
141.11.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:32:10:61:a9:97:67:6d:37:49:25:69:1c:01:c1:5e:88:14:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 3 21:48:53 2025 GMT
Not After : Feb 2 21:53:53 2026 GMT
Subject: CN=E63C7006E7FBABDA1278C42AE8B1107FD2A8A3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:cf:d8:02:8f:8d:52:98:2c:bf:ad:13:0e:
89:e4:37:6f:c3:2c:04:fc:6d:b7:79:73:a7:85:25:
9c:c4:1d:0d:36:b7:9a:03:37:88:21:b4:19:e6:2c:
05:19:f4:d1:9c:5b:1d:92:79:18:0d:53:0d:63:3e:
e3:2c:91:0d:0f:e6:6f:1c:4c:71:3c:f0:9d:8b:ef:
4d:eb:3c:e5:87:d6:d9:07:a2:db:01:92:44:f0:ba:
ee:67:fb:78:95:a5:7f:52:ce:f0:f7:eb:1c:59:68:
a6:f1:21:f2:ec:22:df:34:9a:fc:9c:d1:49:c6:76:
3e:db:9e:c3:80:8c:e4:09:bc:31:3d:e9:58:2b:51:
bc:6a:84:95:1f:2e:83:48:bc:91:6e:d1:dd:19:a6:
98:9e:65:9f:81:c2:dd:8c:a7:eb:ab:fe:e4:7a:93:
33:08:c4:f0:41:5d:ca:c6:03:02:50:57:85:0d:c7:
ce:d4:40:45:82:81:ec:b3:7c:b1:e3:f2:b5:d9:6a:
9b:70:e1:ab:9f:d0:4f:9f:93:d6:9f:86:f2:b1:0f:
ce:ea:ee:22:2c:3c:a3:ce:3a:1c:ac:eb:7c:39:41:
b2:e4:75:be:cc:84:a2:6a:17:3b:1f:a8:ac:4c:45:
28:ef:93:79:db:2e:61:0f:7d:07:ea:43:b9:fe:cd:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:70:06:E7:FB:AB:DA:12:78:C4:2A:E8:B1:10:7F:D2:A8:A3:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:f5:c6:53:42:32:74:1e:0b:a7:04:6c:1f:db:41:08:f8:18:
8f:84:29:6b:9f:0c:07:e5:90:d1:ad:1f:a1:b3:8f:b8:0c:40:
d3:2a:21:cf:b4:04:4c:0d:aa:80:0f:c4:8b:cf:c6:25:ec:5a:
5c:9e:0a:f7:8a:3f:ed:d3:2f:a4:41:10:0c:17:e5:e0:f7:f6:
48:7a:41:0f:1c:32:7a:37:74:92:76:7f:94:f7:10:d1:d6:7e:
cd:fc:31:07:84:7b:81:b1:c7:23:d2:18:ef:b8:3c:a1:9f:6e:
07:e8:73:9e:b1:75:4f:dd:41:c0:8c:17:30:1b:ce:31:7b:b5:
58:51:b1:53:02:0a:a9:25:14:71:d9:0d:d8:8a:67:95:dc:dc:
95:4e:89:b7:4c:02:ac:c0:9d:d9:fa:0c:01:ea:36:2b:a5:db:
38:f9:2d:fe:b5:9e:07:78:45:50:79:7b:19:5d:ec:d4:89:31:
7a:21:7f:bc:23:36:5a:37:4b:3e:65:ac:13:8b:71:2a:da:67:
45:5b:3c:75:21:6b:8b:bc:53:8b:61:cb:df:1a:63:58:1a:22:
85:20:4d:92:95:1d:f2:bd:cf:ae:3e:30:e6:ac:d1:ee:6a:be:
cb:a2:01:9f:04:fe:fc:01:eb:87:58:0c:3d:64:77:a7:52:12:
ee:ee:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:17 2025 by rpki-client