Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: kQ5VGXkcwQkJaT51WSPOFuEb1dkYiI4UIYPn0eXuVbA=
Subject key identifier: 0F:F2:DE:E5:F9:82:54:8F:00:0F:1F:12:BD:56:63:51:18:36:0B:AF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 68974B553D2EBC8CDF7F30BCF93B09D136F39032
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa
Signing time: Thu 30 Jan 2025 13:53:52 +0000
ROA not before: Thu 30 Jan 2025 13:48:52 +0000
ROA not after: Thu 29 Jan 2026 13:53:52 +0000
asID: 211439
IP address blocks: 45.231.207.0/24 maxlen: 24
181.41.209.0/24 maxlen: 24
181.214.172.0/24 maxlen: 24
181.215.24.0/24 maxlen: 24
181.215.54.0/24 maxlen: 24
191.96.2.0/24 maxlen: 24
191.101.143.0/24 maxlen: 24
191.101.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:97:4b:55:3d:2e:bc:8c:df:7f:30:bc:f9:3b:09:d1:36:f3:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 30 13:48:52 2025 GMT
Not After : Jan 29 13:53:52 2026 GMT
Subject: CN=0FF2DEE5F982548F000F1F12BD56635118360BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:f7:48:bf:ec:d7:0b:fe:d3:05:8a:80:9f:
1c:fc:fe:e1:06:79:00:0b:40:ec:9e:f0:ec:c5:98:
5e:04:da:1f:4b:7c:c0:53:cc:ab:e6:6a:45:f6:fa:
04:43:d9:b7:f6:3c:27:2e:2e:86:2b:a9:10:e6:5e:
2b:f7:fb:20:3c:c5:3d:e9:eb:de:e9:aa:74:23:5e:
59:1f:91:06:d9:f8:bc:41:e3:3b:47:c3:cf:db:5a:
33:d4:b2:e8:5e:0b:e9:90:a4:f5:13:fc:ac:8e:13:
ee:d0:1c:cc:4a:10:84:e0:02:62:d8:15:4e:b3:fb:
bb:0e:ec:e7:92:22:73:d2:e7:9c:75:53:af:30:14:
2b:ef:1f:7b:b3:4a:30:14:a0:f8:ba:bd:df:61:32:
4d:74:fc:bf:03:18:8c:06:ce:ba:12:bb:07:ef:cf:
55:a0:71:19:32:ce:8d:ad:e9:52:3e:eb:25:0c:55:
ee:fa:da:d4:a0:14:1c:74:95:60:e0:f4:ae:d9:94:
7a:9a:7b:07:fe:fa:d6:1e:d3:1f:83:97:a0:43:1c:
ec:a8:c0:fb:f6:3b:49:3a:b0:a1:f1:23:92:a2:a8:
32:60:2a:15:24:2b:c4:2e:bf:f6:5e:1b:77:be:15:
a7:d7:3e:d1:23:5a:d9:3f:a5:30:fd:3b:df:84:cb:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:DE:E5:F9:82:54:8F:00:0F:1F:12:BD:56:63:51:18:36:0B:AF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.207.0/24
181.41.209.0/24
181.214.172.0/24
181.215.24.0/24
181.215.54.0/24
191.96.2.0/24
191.101.143.0/24
191.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a8:b5:74:c7:1e:dd:c2:6f:b7:2d:b8:55:bf:88:c3:ef:60:
4e:74:ac:fc:be:1d:89:76:39:9e:d0:04:94:62:25:15:f0:66:
5e:b1:e9:42:ba:dd:e1:b6:4e:48:05:41:fa:b5:9e:f0:8d:62:
d8:b6:43:3d:37:1d:fe:92:ab:8a:aa:d6:85:fb:6f:82:96:c9:
ad:4d:d5:62:7d:0a:09:4b:5c:ba:96:a7:39:3f:0d:64:35:da:
89:84:46:f0:ab:c9:60:f9:55:68:f3:9c:58:a5:8d:09:7d:29:
61:ef:dd:30:57:2b:8b:9f:d6:30:32:a3:27:e5:c7:ca:4a:88:
4a:34:d9:1c:3e:6f:52:f6:80:ef:16:86:0b:3a:a6:8c:f3:52:
f3:ef:1d:59:b1:a8:7e:34:07:46:db:d6:23:84:84:80:20:40:
ec:01:87:bd:91:fd:f2:92:88:42:80:a7:d1:e1:38:b7:6a:93:
83:24:bb:d4:14:42:9c:7b:47:fb:75:5c:4f:2f:e1:2b:51:98:
12:7e:3a:b3:98:b9:3f:ed:16:5c:7d:83:3d:d5:7a:05:ba:93:
62:28:89:02:02:51:f9:b7:27:96:bd:56:7e:6c:92:ab:58:89:
89:39:a3:a7:90:6b:c8:7b:b1:5a:dd:a3:a6:ac:8a:d7:5c:e0:
ab:30:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:45 2025 by rpki-client