Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: l6Km6kjurJtO1aBu8J8ekw8DsoqLct7NR+rII4L7aY4=
Subject key identifier: 7D:C2:3F:BC:6C:8B:2C:49:93:44:DB:D5:B7:D1:D3:14:A9:E8:F0:D4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3C25D33B8058B008D1BCE4304F95EFD02E670A04
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS62240.roa
Signing time: Tue 10 Dec 2024 00:53:48 +0000
ROA not before: Tue 10 Dec 2024 00:48:48 +0000
ROA not after: Tue 09 Dec 2025 00:53:48 +0000
asID: 62240
IP address blocks: 45.158.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:25:d3:3b:80:58:b0:08:d1:bc:e4:30:4f:95:ef:d0:2e:67:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 10 00:48:48 2024 GMT
Not After : Dec 9 00:53:48 2025 GMT
Subject: CN=7DC23FBC6C8B2C499344DBD5B7D1D314A9E8F0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:8c:7b:16:a5:1a:c7:4c:37:c2:0e:61:b5:
a5:29:78:ec:73:8f:e0:e0:75:74:35:b1:21:8f:c7:
ed:c4:fa:62:1b:a8:a4:b4:76:a7:bb:47:cd:78:7e:
f2:89:65:09:80:30:fc:61:fa:11:a7:8e:7e:87:aa:
86:cb:93:0a:f3:5c:81:92:1c:ad:cc:49:a8:48:b7:
39:8f:35:da:80:7a:14:75:95:c8:28:8e:ff:d2:97:
11:b0:31:d6:09:19:92:94:b1:2e:96:2e:94:87:9e:
e3:9d:a7:53:ba:26:13:e1:72:1e:bc:97:bf:c7:9d:
2b:88:b4:e0:76:f4:fe:ae:ac:06:30:5c:cd:28:82:
75:7e:3c:8f:5c:92:28:7b:c7:c5:89:e5:aa:82:de:
fe:52:bb:10:00:f5:51:42:32:ff:ce:b4:58:3c:b6:
43:d9:76:33:b6:f6:40:4a:04:c8:2e:da:24:0b:23:
99:91:a7:9c:d1:bf:56:4e:1b:0b:7c:2d:ad:c2:8e:
7f:43:a0:45:af:03:f8:c9:6c:d2:bd:f6:c2:3a:b2:
2c:3c:4f:31:cc:0b:01:d7:80:0b:98:4f:66:cc:77:
20:28:2c:91:39:0a:ad:b9:81:24:26:db:64:de:b9:
8b:91:e6:9f:d1:e2:95:4f:60:bb:bd:88:c3:0e:a8:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:3F:BC:6C:8B:2C:49:93:44:DB:D5:B7:D1:D3:14:A9:E8:F0:D4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ca:70:95:ec:6f:79:c1:0d:69:4e:67:43:8c:d8:df:ce:2f:
00:f3:eb:d5:91:55:71:b6:33:00:c3:b8:46:5e:e3:47:f2:f0:
11:fd:da:59:27:81:c6:ae:1f:8f:fb:b1:19:d2:19:96:ae:45:
3d:e0:d5:f1:ae:b4:00:58:82:ad:89:ba:31:a2:c4:db:cf:e3:
80:4a:23:2c:26:ee:c2:93:c2:f3:53:74:e8:15:89:c8:bb:36:
0c:50:c2:74:25:bc:7c:43:68:2c:b3:96:9a:a6:4c:e3:e7:23:
0f:97:90:46:77:0c:8d:64:6b:98:16:13:e7:ec:8c:f0:0d:0a:
96:b4:3f:5f:3a:00:bb:8e:4e:ff:80:bc:93:3a:fd:d2:2f:65:
db:30:d4:8e:07:5c:29:9d:01:8e:17:50:45:60:f7:08:24:d9:
82:bc:fb:d9:c9:b7:79:08:51:23:e3:8d:06:36:90:79:f6:bc:
43:49:11:7f:86:65:8f:c4:5c:4a:a6:1b:5e:f2:bd:dc:6c:f8:
f3:10:f0:34:23:7f:98:49:01:f5:77:29:0b:f8:2f:2e:d4:bc:
9b:b1:eb:41:aa:6c:dd:3f:9b:19:97:be:49:ec:b9:41:8f:62:
5e:03:b9:a1:b6:e7:c9:43:ec:d4:75:5c:8e:92:b8:77:5b:ab:
3f:0b:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:59 2025 by rpki-client