Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: XZQitHeEM0DTv/S2qrj8Ke1v90YKVQkRJorl0Zzzw3o=
Subject key identifier: 0D:39:07:8C:7E:20:CF:8A:38:02:E0:AA:87:3B:6E:24:E3:E7:6A:73
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 619809668E0DDFA1B2E22CBB87371E9E3D76BB05
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59432.roa
Signing time: Thu 26 Dec 2024 19:21:37 +0000
ROA not before: Thu 26 Dec 2024 19:16:37 +0000
ROA not after: Thu 25 Dec 2025 19:21:37 +0000
asID: 59432
IP address blocks: 181.214.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:98:09:66:8e:0d:df:a1:b2:e2:2c:bb:87:37:1e:9e:3d:76:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 26 19:16:37 2024 GMT
Not After : Dec 25 19:21:37 2025 GMT
Subject: CN=0D39078C7E20CF8A3802E0AA873B6E24E3E76A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:b3:a7:da:f1:f9:8b:a5:9e:3f:bb:e6:85:
1a:98:24:73:50:a5:92:5b:41:92:8a:eb:b9:47:3f:
b9:23:63:b4:09:d8:9e:ee:47:64:7c:d6:a4:3d:7e:
92:11:40:f8:18:1c:c6:ad:4e:17:7b:24:9f:de:94:
b9:9f:81:74:a8:ce:c8:c2:15:45:60:f1:7e:dd:bd:
02:bd:62:97:8e:22:e9:8a:d9:c1:2b:3e:76:96:29:
0d:93:4d:5c:4a:20:0b:6e:43:2c:0a:00:fc:b8:cf:
ce:f0:d8:fe:a8:40:fb:fb:b9:b3:15:26:0d:6f:17:
b2:9e:44:9e:fa:78:e9:ec:79:86:c8:bd:d1:b8:4e:
cc:6d:70:83:c5:65:43:97:b0:2e:d2:80:75:4f:ff:
27:89:97:c7:7e:35:93:4e:56:3f:ef:db:25:7d:d4:
00:43:1a:fd:03:f8:1a:f9:e2:b6:eb:d6:20:a8:93:
c1:73:78:81:3f:92:86:bc:83:9d:48:98:ce:1e:fb:
84:89:44:a9:b1:3b:2a:01:6e:f8:79:4c:1a:26:70:
0b:fd:85:39:5a:99:1f:6b:b4:b2:47:ff:0a:8b:06:
17:a1:34:8c:e2:26:03:26:f8:7a:4b:a2:2c:8c:47:
cb:b8:89:e7:4d:25:b1:cf:91:55:98:cc:e9:7a:b7:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:07:8C:7E:20:CF:8A:38:02:E0:AA:87:3B:6E:24:E3:E7:6A:73
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:df:00:04:b8:8e:ea:1e:c5:f9:5e:1b:88:aa:52:9f:af:62:
1b:12:06:80:06:0f:dd:f1:c1:c0:77:5f:6a:0d:73:76:fa:1f:
fe:7a:60:0b:6d:79:91:a0:0f:a4:5b:77:4b:15:38:09:a6:1f:
b7:4c:4a:fb:a3:24:4b:6c:47:1d:99:7b:52:bd:42:35:82:5e:
6b:1d:64:d6:1d:89:84:5c:a7:e7:4f:56:e2:4b:c5:64:56:af:
60:1c:e6:b7:7a:6b:1c:6b:be:51:a9:a0:04:98:ab:c3:12:c2:
41:6c:ee:5f:fe:c2:35:9e:bf:24:e8:c4:82:ff:d2:c0:6c:28:
31:7b:e5:71:bb:5c:80:fc:74:4a:28:e5:7d:40:10:d5:dd:6d:
2e:c0:27:bf:39:81:14:92:6e:a1:2d:e9:76:b6:c0:0b:b4:cb:
ab:6d:c6:8b:b2:2e:ba:96:4b:e6:4f:69:3e:b9:74:5c:da:73:
87:60:bf:c9:24:b0:91:7c:91:c2:b3:9a:f2:4d:70:a3:5a:6f:
92:ca:c7:06:58:41:9c:08:c5:99:65:76:0e:84:5a:9c:49:dd:
40:3f:f9:44:02:ab:c9:39:0f:eb:82:da:5d:68:89:c0:95:d4:
2c:fe:f9:f3:fc:59:ca:8f:8d:8d:d5:9f:ec:1a:52:98:1f:db:
71:c7:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:41 2025 by rpki-client