Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
File: AS267507.roa (raw, json)
Hash identifier: Jo815uH90QDQ8OCefXwpfQsLT4T6x/aofy0CYzeMuDI=
Subject key identifier: 47:04:55:90:9D:70:DC:5E:B4:2F:00:99:10:12:6C:64:40:65:72:D9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6DF6DAC21D7359967F7F64CDC9468A2A03D63E71
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
Signing time: Tue 02 Jul 2024 14:37:42 +0000
ROA not before: Tue 02 Jul 2024 14:32:42 +0000
ROA not after: Tue 01 Jul 2025 14:37:42 +0000
asID: 267507
IP address blocks: 191.96.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f6:da:c2:1d:73:59:96:7f:7f:64:cd:c9:46:8a:2a:03:d6:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 2 14:32:42 2024 GMT
Not After : Jul 1 14:37:42 2025 GMT
Subject: CN=470455909D70DC5EB42F009910126C64406572D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:8e:c8:2f:74:f8:50:a2:20:d0:66:f2:b5:
1b:7a:5d:43:7f:18:b4:2d:39:3d:fb:be:31:8b:23:
b2:ee:c6:2a:46:85:b1:b5:49:18:9d:c9:35:78:45:
41:3a:8a:14:6a:8b:77:ea:eb:59:4e:0e:27:89:56:
c5:75:f1:23:7d:61:d9:60:6a:0c:99:06:46:da:14:
8e:81:b3:db:3b:1b:42:39:4a:64:9d:21:d2:2b:f9:
f3:55:fc:b3:82:95:e1:02:de:a3:ca:9b:77:b6:10:
d8:34:ef:c5:a8:dc:24:3a:ec:1a:e1:f0:14:cf:7f:
03:6f:2d:7b:d5:4a:bb:11:08:4e:1f:ee:ba:7c:cb:
c4:bc:48:30:8c:99:44:18:73:3b:8c:fd:36:85:b2:
6c:14:ce:65:b1:a7:90:4d:f6:16:16:59:cb:76:3e:
99:69:e1:fd:a2:b5:3d:ef:31:73:50:d2:20:00:d8:
13:54:49:99:31:0d:ba:01:20:54:91:34:2a:2f:a5:
f7:1f:b5:11:dc:b5:21:4c:c6:0e:b7:64:35:d1:9c:
5d:99:8f:80:40:ba:cd:ee:75:b8:2a:aa:a5:7e:6f:
4e:76:64:61:97:fc:2f:7b:0b:3f:31:3c:e6:b4:19:
42:1c:47:8a:9c:76:a2:46:34:28:82:0a:8c:64:f5:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:55:90:9D:70:DC:5E:B4:2F:00:99:10:12:6C:64:40:65:72:D9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.14.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3d:cd:92:e5:d1:e8:3c:0a:76:0b:72:bd:48:db:69:30:e9:
e4:c0:2d:8d:eb:2a:94:0f:5b:c9:83:8a:bf:8c:4b:84:67:a5:
55:ac:00:30:32:bc:8a:1c:29:37:05:8e:33:87:b6:b5:b9:18:
9c:20:63:6c:fa:dc:60:95:52:e2:18:16:3e:f3:80:6c:16:5d:
33:a7:0f:43:a7:de:c8:a4:3c:0b:18:c1:c1:ee:1a:d5:7b:19:
4b:73:26:87:14:59:52:db:be:59:4b:f1:d3:23:17:08:2d:ce:
0c:28:84:d3:4e:79:39:86:7f:74:38:67:06:51:ca:da:fd:bf:
37:c7:d8:5e:b7:12:dc:5b:86:91:ed:80:00:ff:b9:e3:04:46:
17:30:79:b4:8e:5c:51:04:be:72:e2:8b:91:9d:68:a0:09:8a:
0b:99:a9:a1:1c:68:a0:de:09:21:a6:52:61:ba:10:ef:91:19:
b3:28:a5:1d:7c:70:af:64:28:47:be:27:43:7f:aa:8b:13:cf:
5f:12:e0:5a:1a:da:eb:ed:e4:e6:fe:e9:50:dd:66:a1:54:68:
38:5a:10:94:d1:9f:0e:4c:f6:97:41:3d:22:01:70:53:03:fb:
43:e6:b6:c2:8d:9c:24:42:9a:84:7f:95:15:0f:67:a7:a0:5b:
cf:54:62:79
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbfbawh1zWZZ/f2TNyUaKKgPWPnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA3MDIxNDMyNDJaFw0yNTA3MDExNDM3NDJaMDMxMTAvBgNV
BAMTKDQ3MDQ1NTkwOUQ3MERDNUVCNDJGMDA5OTEwMTI2QzY0NDA2NTcyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/47IL3T4UKIg0GbytRt6XUN/
GLQtOT37vjGLI7LuxipGhbG1SRidyTV4RUE6ihRqi3fq61lODieJVsV18SN9Ydlg
agyZBkbaFI6Bs9s7G0I5SmSdIdIr+fNV/LOCleEC3qPKm3e2ENg078Wo3CQ67Brh
8BTPfwNvLXvVSrsRCE4f7rp8y8S8SDCMmUQYczuM/TaFsmwUzmWxp5BN9hYWWct2
Pplp4f2itT3vMXNQ0iAA2BNUSZkxDboBIFSRNCovpfcftRHctSFMxg63ZDXRnF2Z
j4BAus3udbgqqqV+b052ZGGX/C97Cz8xPOa0GUIcR4qcdqJGNCiCCoxk9cD3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQURwRVkJ1w3F60LwCZEBJsZEBlctkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjY3NTA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2AO
MA0GCSqGSIb3DQEBCwUAA4IBAQCWPc2S5dHoPAp2C3K9SNtpMOnkwC2N6yqUD1vJ
g4q/jEuEZ6VVrAAwMryKHCk3BY4zh7a1uRicIGNs+txglVLiGBY+84BsFl0zpw9D
p97IpDwLGMHB7hrVexlLcyaHFFlS275ZS/HTIxcILc4MKITTTnk5hn90OGcGUcra
/b83x9hetxLcW4aR7YAA/7njBEYXMHm0jlxRBL5y4ouRnWigCYoLmamhHGig3gkh
plJhuhDvkRmzKKUdfHCvZChHvidDf6qLE89fEuBaGtrr7eTm/ulQ3WahVGg4WhCU
0Z8OTPaXQT0iAXBTA/tD5rbCjZwkQpqEf5UVD2enoFvPVGJ5
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:28 2025 by rpki-client