Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
File: AS202673.roa (raw, json)
Hash identifier: +3E3DP62CHs/ity7vOVC2LlBKU+5nrxhyZCr07D+zos=
Subject key identifier: F5:D7:A8:C4:71:CB:16:47:9C:73:CD:60:33:B7:DC:40:22:7A:82:76
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6EA7C3E25F8BC835EF5E4E97DAFF7A7B177C0F55
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
Signing time: Wed 25 Dec 2024 00:00:14 +0000
ROA not before: Tue 24 Dec 2024 23:55:14 +0000
ROA not after: Wed 24 Dec 2025 00:00:14 +0000
asID: 202673
IP address blocks: 5.181.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a7:c3:e2:5f:8b:c8:35:ef:5e:4e:97:da:ff:7a:7b:17:7c:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 24 23:55:14 2024 GMT
Not After : Dec 24 00:00:14 2025 GMT
Subject: CN=F5D7A8C471CB16479C73CD6033B7DC40227A8276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:fd:95:cc:4d:98:b4:63:11:69:34:9d:a6:
ab:b9:27:d9:47:bb:98:aa:f1:0b:21:04:b2:99:fa:
a2:70:3a:a7:3f:8f:14:71:6a:20:84:f2:b0:97:11:
7e:65:9f:ef:ce:ae:e6:70:f9:64:a0:79:ee:e4:f8:
e7:78:f1:9d:6b:01:b1:f7:26:69:3d:71:40:2a:26:
4e:ac:00:a2:cf:e9:7d:f1:21:a9:b8:f6:7f:11:fe:
a1:8f:17:3f:39:16:4f:7e:65:90:d3:d9:64:d4:c9:
96:2d:91:88:09:04:95:ae:91:0c:ec:98:e1:1e:1d:
66:4b:ed:b1:8f:59:13:d7:51:2f:3a:37:8b:4b:67:
54:64:8d:b7:16:b2:cc:f1:58:cb:29:69:fb:66:57:
a2:ef:3c:fb:fa:e3:24:97:e0:87:0c:71:2a:46:e4:
99:07:3a:7b:8a:aa:10:47:82:c9:57:8b:a3:06:b2:
71:f9:90:84:55:7a:41:84:98:2b:5a:2d:ae:13:56:
59:e7:6f:00:23:36:2f:27:b5:70:8e:2f:d1:e7:f1:
7d:82:59:62:4c:8d:bc:0a:05:f1:eb:0a:00:1e:35:
90:2f:c2:8b:a3:45:be:6e:ed:22:c6:2c:ec:9d:f8:
7c:fc:e1:88:29:da:2e:be:e8:8c:86:fc:8b:ec:ea:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:A8:C4:71:CB:16:47:9C:73:CD:60:33:B7:DC:40:22:7A:82:76
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:76:31:10:88:7d:15:c6:4f:a9:77:54:db:fc:3b:fd:a7:15:
7d:a7:43:ad:7b:11:9f:61:66:2d:b2:d9:57:e1:be:55:53:ed:
d3:98:84:d7:ac:6c:b5:7f:ec:2b:4a:21:5b:8a:6f:59:a0:0e:
be:d0:22:f5:64:59:4e:8a:17:b4:ca:c2:74:ae:34:c1:1a:d9:
58:6c:62:3c:ca:87:da:da:9f:e4:c7:40:0d:6a:e6:bc:33:c7:
99:42:2a:36:65:98:48:af:24:5b:ed:c3:f0:b3:e1:a0:87:91:
80:39:5e:f5:1c:ea:fc:52:0c:be:de:1e:f8:3d:b6:e5:11:02:
62:4c:ee:ac:e7:45:57:d5:c9:cb:d3:ce:41:6e:73:cb:14:2f:
ad:af:31:3e:61:d1:2e:34:33:f9:f2:47:13:51:70:c3:88:f4:
bd:fe:ba:2b:18:4d:90:59:39:28:4c:02:fd:5a:6c:c8:92:88:
78:c3:b2:75:06:bb:fa:ab:2d:8f:b5:05:d9:55:63:82:5f:30:
35:12:31:f9:67:b0:80:03:b7:b7:67:d1:78:df:4a:16:3c:a1:
00:b8:7b:d7:ea:fe:fa:73:47:4e:07:9e:21:01:ba:d4:ba:94:
b7:c9:d9:1d:71:ac:c7:df:b0:be:99:aa:a2:69:fe:b3:c6:4f:
2f:9e:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:47 2025 by rpki-client