Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205361.roa
File: AS205361.roa (raw, json)
Hash identifier: by+2n3MIlEVqwD8u0h7YsWrSvFnjTXZsROfFO06Wmk4=
Subject key identifier: EB:49:5A:E4:63:08:B3:7A:57:C9:14:18:1A:20:8D:94:19:18:00:39
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3F47AA99F63F2119CFC26CAABB1DE5ACBBBDC95E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205361.roa
Signing time: Tue 31 Dec 2024 12:53:48 +0000
ROA not before: Tue 31 Dec 2024 12:48:48 +0000
ROA not after: Tue 30 Dec 2025 12:53:48 +0000
asID: 205361
IP address blocks: 181.215.178.0/24 maxlen: 24
185.135.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:47:aa:99:f6:3f:21:19:cf:c2:6c:aa:bb:1d:e5:ac:bb:bd:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 31 12:48:48 2024 GMT
Not After : Dec 30 12:53:48 2025 GMT
Subject: CN=EB495AE46308B37A57C914181A208D9419180039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:82:a5:6e:01:2f:c1:e9:11:fa:a7:43:7a:
b3:37:c1:d8:8e:47:a2:83:2c:a5:0d:4e:0d:94:f9:
a7:0a:5a:20:c3:30:28:a8:a6:0d:fc:00:c3:38:31:
12:31:27:2d:33:ca:a9:19:6d:41:a0:8b:e4:29:e8:
28:09:5b:d2:d9:eb:1f:91:d6:ee:b8:59:85:0b:7a:
de:bb:7e:0b:f4:f8:60:b3:25:01:25:53:a1:4c:47:
63:1a:ca:bd:5c:5c:e9:c8:7c:f2:b6:5a:bb:9d:88:
ac:f3:d0:46:c4:26:d1:d8:b6:b4:f5:c5:b1:52:87:
88:34:49:cf:46:74:ac:f8:38:2b:7f:68:36:16:88:
fb:5a:05:20:40:02:b9:08:d4:07:40:bf:2b:96:e6:
08:5c:d7:6b:4b:80:6d:a9:c2:85:42:a9:d6:a1:48:
38:af:fb:52:de:0e:83:7f:9c:34:a3:e6:2b:37:bd:
c0:f9:0a:8e:6e:32:2b:e2:d8:32:fc:7f:36:0e:86:
c6:8b:c8:3e:64:10:8d:af:d9:ef:18:b7:5a:7c:f0:
ae:14:53:85:af:05:4d:b2:3f:e7:6e:01:27:37:20:
0f:89:69:21:e5:62:da:71:13:ee:7b:07:72:a8:ce:
71:5d:eb:c2:93:96:bf:24:ba:33:7a:ad:54:39:c7:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:5A:E4:63:08:B3:7A:57:C9:14:18:1A:20:8D:94:19:18:00:39
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.178.0/24
185.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f1:01:e3:9c:06:c8:83:d5:89:16:17:75:65:24:a9:ad:11:
d0:8c:e4:a6:c2:2f:20:63:55:fd:0c:9d:11:49:9a:39:cf:b2:
bb:23:50:f7:63:c9:66:1f:3e:6f:4b:46:90:e7:92:29:96:0b:
da:79:c5:e5:26:1a:dc:fe:ef:10:19:51:35:1b:b0:cc:50:ff:
00:45:a2:1c:3b:59:b0:74:74:3c:b9:75:f5:90:f0:67:ce:37:
39:12:d5:1e:12:ad:4f:e0:67:99:6d:34:46:20:38:24:fd:eb:
b1:1a:b1:f2:3e:85:8d:ba:12:9b:f5:e8:82:40:9b:45:71:07:
a8:9c:4f:13:d2:51:0e:91:3c:c5:db:2d:9c:11:f4:98:e7:e6:
35:4d:35:ad:4d:47:e5:8c:30:63:f1:24:94:e9:43:95:db:93:
fd:77:c0:7a:4a:e9:f9:f7:37:a2:ed:9c:39:28:7a:00:50:68:
33:9d:b7:c1:e2:73:19:45:46:19:07:e3:d4:fd:e5:56:9b:b2:
6e:95:82:42:3a:3b:0e:58:37:0b:9f:51:fc:45:11:44:9c:e9:
35:37:5d:d6:2c:ab:fa:79:12:21:7e:2c:58:d7:46:ff:c9:df:
69:2a:c8:4a:4f:39:56:68:68:85:bc:7c:26:45:d6:fe:23:ed:
9a:ab:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:12 2025 by rpki-client