Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: nn94KTNxiIHSEZ/fmhzckdOxncy+nNpOJV8qQEa5Wrc=
Subject key identifier: 3C:35:3B:2E:2F:6F:45:C8:F5:B8:BB:3E:C0:BA:2C:C1:7B:B9:02:36
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6AD6BCC20A03904E0093B93CBD91864B33A5F63C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
Signing time: Mon 24 Feb 2025 13:11:53 +0000
ROA not before: Mon 24 Feb 2025 13:06:53 +0000
ROA not after: Mon 23 Feb 2026 13:11:53 +0000
asID: 135402
IP address blocks: 5.181.130.0/24 maxlen: 24
193.31.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d6:bc:c2:0a:03:90:4e:00:93:b9:3c:bd:91:86:4b:33:a5:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 24 13:06:53 2025 GMT
Not After : Feb 23 13:11:53 2026 GMT
Subject: CN=3C353B2E2F6F45C8F5B8BB3EC0BA2CC17BB90236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:4e:c1:2e:ce:72:0c:ab:9b:93:8e:74:2a:
f5:d3:d8:5b:38:67:00:53:0f:fa:80:d5:8b:69:28:
29:3e:05:68:14:be:97:3b:ee:bb:bf:d8:0f:e7:04:
ff:73:c5:cd:64:0b:c3:a1:ce:95:e7:45:32:37:90:
5f:08:dd:f0:6c:94:fc:57:a4:b4:c1:7b:f6:1b:85:
03:90:95:f1:61:7a:d9:75:eb:b4:00:7d:03:c8:70:
95:80:4a:ad:1c:54:6c:29:ba:7c:28:0e:3e:cb:06:
14:93:7d:58:eb:b4:ab:e3:2a:dc:fd:73:d8:6b:e8:
81:27:77:94:e3:22:52:6c:b5:2b:3d:63:f7:0e:9a:
d8:b8:cb:c8:9d:94:51:bb:8b:ee:36:74:2c:ad:75:
92:19:fe:d7:8a:c2:12:91:81:c9:c8:25:4b:6c:e9:
de:52:c6:2d:57:c8:6c:2e:ea:5d:7e:d3:a4:d1:42:
a0:e1:60:60:f9:da:78:08:4e:07:52:14:a6:58:2b:
f3:b5:ea:bc:0b:4a:01:39:00:fb:26:3e:ef:81:3c:
cc:e3:3c:0c:76:a6:b2:c4:cb:7e:b5:bd:0c:9c:30:
a5:9b:79:b2:6a:25:58:31:87:dc:d8:b8:67:95:5d:
cf:e1:36:c4:4f:f8:6d:6e:46:df:3c:17:d9:9d:11:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:35:3B:2E:2F:6F:45:C8:F5:B8:BB:3E:C0:BA:2C:C1:7B:B9:02:36
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.130.0/24
193.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0c:c3:bd:60:de:b1:ff:f2:10:00:f7:cc:cd:fe:ef:36:7d:
f8:c1:81:83:60:1a:8a:b6:97:bd:dc:6b:ed:74:40:54:76:0d:
f6:2e:f8:74:83:be:bb:de:f7:0b:22:21:de:c0:1a:cf:0a:76:
5c:c7:7a:cd:de:8e:39:08:91:fc:40:fd:e6:96:ab:da:31:7d:
f3:86:25:3d:81:c2:31:b5:9b:82:8a:13:d9:12:2e:22:fb:3e:
47:cc:dd:ef:7c:91:b0:27:11:ea:0c:56:89:4b:93:46:0f:c7:
44:82:4b:ce:a4:72:9d:b6:51:32:9e:a2:45:a1:a7:26:f2:63:
31:87:a9:af:a8:5f:d0:d6:64:84:92:47:52:1e:c3:01:72:25:
8c:a8:5b:b5:da:9b:77:69:20:ea:b8:69:d3:51:47:b1:ad:63:
4b:7c:dc:71:e8:58:5b:d5:e0:5b:a8:34:1d:6b:6e:7d:54:dd:
56:f3:3e:55:d6:01:e8:6f:ed:57:6f:56:ec:a0:46:fa:ce:67:
b0:38:3f:dc:d9:34:cb:2f:cf:3d:dd:09:dd:9a:1b:04:3c:2b:
54:7d:93:0b:7e:49:5a:f5:0e:b4:15:2c:84:80:6f:e5:46:f4:
89:46:79:8f:0c:74:1d:ab:52:6e:17:e9:27:b3:56:68:5c:e7:
34:66:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:24 2025 by rpki-client on console.sobornost.net