Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: 6ogdHUQCjFZ3kr5jtgj6KYLP8lLYu4psXD06k0HjxRU=
Subject key identifier: B5:99:5F:7F:4A:4F:C5:97:22:CB:92:72:0A:4B:ED:2E:E3:F1:DF:AB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 542D71AF0AB73C110DE770717FF431899ECF5C6D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
Signing time: Sun 12 Jan 2025 11:47:57 +0000
ROA not before: Sun 12 Jan 2025 11:42:57 +0000
ROA not after: Sun 11 Jan 2026 11:47:57 +0000
asID: 21859
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2d:71:af:0a:b7:3c:11:0d:e7:70:71:7f:f4:31:89:9e:cf:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 12 11:42:57 2025 GMT
Not After : Jan 11 11:47:57 2026 GMT
Subject: CN=B5995F7F4A4FC59722CB92720A4BED2EE3F1DFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:1a:7b:80:16:eb:89:f7:f5:5e:0b:f4:02:
ad:83:7d:e3:11:d2:ff:23:72:85:93:ca:19:12:f8:
7f:07:f8:a2:6a:02:4a:b9:61:66:a4:89:0c:10:7e:
51:c8:f8:d7:3c:e4:5c:58:e5:de:dd:67:3e:48:05:
40:85:ee:bf:4a:be:6b:a0:2e:ef:d2:6f:d2:dd:56:
48:d4:ff:3b:52:7b:5c:ab:64:06:45:1c:7b:80:fd:
bf:d9:82:f1:8e:b4:01:52:61:62:0c:a2:1c:a8:55:
92:2e:05:06:e6:11:4b:b0:7e:96:32:58:3b:4d:6e:
e7:03:b9:ce:67:0c:17:27:3b:4b:59:63:51:b0:22:
9c:73:87:f7:4c:fa:4f:81:92:94:ef:cf:94:df:42:
ec:76:d3:b9:fd:a3:d6:8e:aa:ed:0b:dd:72:43:f3:
e1:3a:52:a8:1b:12:b2:d3:1f:6d:fd:2c:f7:d0:15:
a7:34:1b:0b:de:03:48:56:89:57:9b:5e:3b:aa:de:
a3:4c:2e:af:f3:44:ab:19:cb:6b:93:85:8b:ac:bd:
39:64:07:4c:6d:0d:f0:2e:ae:f1:d2:0e:a1:20:3c:
d2:50:37:98:7f:3e:75:37:3d:09:51:88:14:30:05:
50:f0:08:c8:12:eb:ef:9f:50:d5:ca:58:24:9d:fb:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:5F:7F:4A:4F:C5:97:22:CB:92:72:0A:4B:ED:2E:E3:F1:DF:AB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3d:1f:e8:91:1c:a0:7a:cf:15:2c:11:b1:ca:1a:31:0f:78:
40:bd:31:a2:46:00:5d:c0:1f:14:03:fb:4f:aa:5d:7f:be:99:
7b:78:9b:b5:83:84:a8:2a:02:6a:63:41:29:77:74:98:cf:4d:
f7:2c:b9:79:6a:92:d1:6b:d2:f9:eb:c6:ed:6a:d0:0d:3d:c2:
a1:30:c9:99:7e:af:a8:cf:c2:88:b3:dd:ec:22:8b:30:53:93:
35:0f:11:c8:75:ae:90:4a:5f:4f:3f:3d:ec:fc:67:73:b8:51:
aa:be:aa:b9:b1:f1:64:cf:5b:d3:54:50:91:33:e1:b7:d3:87:
39:e6:d0:f7:f6:e0:ba:d9:7a:73:9e:99:fa:32:d9:e7:47:47:
9c:77:0c:2a:dc:51:c1:d7:2f:5c:5a:79:9f:32:b7:d0:23:8e:
54:8a:1a:ab:8a:92:0b:43:64:90:5b:19:8c:3b:4d:a4:ff:68:
a0:77:16:b8:9a:c7:85:3d:3a:2d:54:69:e9:44:97:99:9d:54:
fa:21:f3:fb:41:02:52:f8:64:e6:a2:a0:b6:dc:8a:f0:a5:b9:
17:4c:ee:c2:56:b0:61:ff:86:26:cf:60:ad:d4:7f:b0:ca:b5:
97:1e:d4:d4:98:53:d4:b3:15:c9:76:9c:8c:7f:0e:39:44:f9:
04:0d:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:11 2025 by rpki-client