Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa
File: AS56367.roa (raw, json)
Hash identifier: tLgNFZTrthr5sCkdOMxftxi+/2O30iaNPKKMixIkc4I=
Subject key identifier: CB:9B:C6:F0:FE:B7:32:A2:E1:45:51:54:79:F9:67:55:1C:27:4F:18
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 01AC1EAD5C747C26CD0DF7FD5E360D30F546828E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa
Signing time: Fri 21 Feb 2025 16:41:15 +0000
ROA not before: Fri 21 Feb 2025 16:36:15 +0000
ROA not after: Fri 20 Feb 2026 16:41:15 +0000
asID: 56367
IP address blocks: 141.11.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ac:1e:ad:5c:74:7c:26:cd:0d:f7:fd:5e:36:0d:30:f5:46:82:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 21 16:36:15 2025 GMT
Not After : Feb 20 16:41:15 2026 GMT
Subject: CN=CB9BC6F0FEB732A2E145515479F967551C274F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:3f:f9:34:8f:8c:7d:d2:9d:67:b2:e2:f0:
a1:a7:0b:de:73:ee:96:76:20:81:28:64:5c:de:9a:
51:8d:a5:c3:c9:33:de:41:bb:7b:b3:ce:89:cf:dd:
8e:68:f0:df:a1:3d:e1:0b:3a:eb:2f:2a:87:bd:7d:
54:06:a4:0e:ab:a8:46:18:c0:ae:92:a8:8b:06:80:
7a:74:a1:3e:86:86:df:bd:c2:a8:f3:8d:ee:3b:75:
b3:36:f6:56:2e:7c:25:48:e5:61:f6:88:c0:1c:8c:
f0:35:3e:54:a0:fb:36:19:ca:d4:3d:ea:71:e7:4d:
16:8e:5d:17:57:10:4b:4f:85:17:d0:f1:35:d7:2f:
f3:2d:9a:2f:fe:3c:30:cf:5d:1d:59:89:42:f0:d6:
9c:b8:b8:aa:f6:0f:37:2f:8b:f4:c2:aa:93:32:60:
81:6f:5b:0d:05:7f:f7:15:85:b4:31:c2:49:91:c8:
b5:22:e7:ea:75:75:b4:eb:fb:27:99:66:5e:83:12:
bb:15:57:db:ed:9e:76:b0:f9:2f:88:08:b8:e4:0c:
1e:7d:d7:b6:6e:62:c6:f1:e4:60:95:c3:81:da:78:
6a:33:1b:19:84:3a:ab:60:c9:62:6a:a0:fc:47:ff:
a8:3c:18:3f:c2:7b:d3:52:11:35:f3:59:5c:c8:8f:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:C6:F0:FE:B7:32:A2:E1:45:51:54:79:F9:67:55:1C:27:4F:18
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0b:de:96:94:e6:d9:02:86:f7:c6:82:c9:56:82:0d:4d:2e:
86:bb:c0:ef:d2:0b:c3:83:2b:f1:84:83:23:98:8e:23:ff:2a:
f3:0b:55:f4:46:e7:22:dd:ed:39:40:14:36:d1:a5:99:8b:3f:
5e:27:57:5f:1f:f2:ff:8f:58:4a:1d:51:6f:5d:99:01:a5:ca:
ec:89:47:1a:7e:79:ed:9c:07:15:24:4c:7f:da:11:c4:1b:2b:
bb:03:7a:d9:f1:85:8d:e3:64:98:ce:bd:94:2f:f2:72:da:99:
db:45:85:5f:ed:4c:88:95:b6:43:ab:5a:00:1d:05:6f:f2:e1:
46:84:f0:e6:8f:14:20:9c:2c:7b:8d:5f:dc:4e:7d:49:84:28:
79:93:26:b5:f2:22:9f:2e:7b:e3:99:ed:e4:cb:ba:17:3a:c0:
fd:2e:da:4f:50:35:b0:fc:24:84:25:4b:1a:8d:26:f3:09:f8:
98:9a:8b:7d:98:27:f0:c2:a0:a6:3a:3b:10:f8:8b:cc:f7:6b:
1e:83:fa:9d:3c:20:39:88:c5:57:88:8a:91:04:8c:54:a2:d5:
40:56:df:86:a4:61:d3:7c:02:30:8c:a2:c6:ab:27:bf:81:52:
f8:ae:a2:87:b1:00:07:8b:72:19:fd:6d:6f:5d:5b:57:d2:db:
b3:ef:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:22 2025 by rpki-client