Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197538.roa
File: AS197538.roa (raw, json)
Hash identifier: CGx41zt+rppvq5xFayO7tIvTxJJaPW9PmLGMEyYNAX4=
Subject key identifier: C0:5C:3C:F8:C8:0A:68:D9:F3:F8:29:5F:98:82:A4:19:FC:4A:E4:5E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 01C1647A4411EE341A6823FB46CD5CA55382B6F3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197538.roa
Signing time: Fri 24 May 2024 08:18:11 +0000
ROA not before: Fri 24 May 2024 08:13:11 +0000
ROA not after: Fri 23 May 2025 08:18:11 +0000
asID: 197538
IP address blocks: 179.61.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c1:64:7a:44:11:ee:34:1a:68:23:fb:46:cd:5c:a5:53:82:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 24 08:13:11 2024 GMT
Not After : May 23 08:18:11 2025 GMT
Subject: CN=C05C3CF8C80A68D9F3F8295F9882A419FC4AE45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:bb:63:45:4f:81:a5:39:ae:aa:9a:d8:7b:
22:b2:08:2f:96:14:d7:0e:b0:1d:a8:27:68:6a:1c:
22:8c:08:e5:82:21:26:31:eb:cd:e8:d6:b4:e8:3a:
ce:8b:20:ae:d0:26:b9:d3:83:4b:19:ef:e4:42:6d:
1a:9d:c2:0d:5e:ce:ed:3e:da:8e:bd:97:a3:12:a5:
bf:5e:eb:18:21:d2:57:47:70:aa:66:e9:49:43:1e:
ea:09:40:08:a7:1b:1a:2e:98:a2:55:26:a7:55:2d:
06:64:25:c7:dd:af:c5:84:7e:66:c2:00:a0:1c:04:
58:4d:14:9b:70:7b:77:cc:e8:01:4c:9c:25:5c:af:
49:9c:4c:28:c8:ea:ef:7c:ef:14:70:87:7f:b1:3f:
ba:49:60:79:93:15:e2:97:a3:f2:0a:b8:46:6a:78:
a1:68:48:28:7a:6b:99:6f:6d:a1:31:f9:20:4a:39:
42:3c:cb:51:91:08:bb:30:48:9f:b6:89:6b:fd:6f:
54:2b:68:f2:67:4c:74:a0:81:c5:77:1c:79:4e:27:
8a:30:a3:cb:06:f5:81:74:2b:a6:d5:5a:ca:92:6f:
b3:b1:18:2c:54:e7:f9:73:d0:5c:a7:c8:42:ee:d6:
f4:6f:fa:3e:e3:67:bc:2f:73:92:92:a7:2c:77:9c:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5C:3C:F8:C8:0A:68:D9:F3:F8:29:5F:98:82:A4:19:FC:4A:E4:5E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.157.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b3:b0:f0:b8:4f:d8:7f:ca:a2:68:6c:de:e0:c3:5e:d4:00:
76:79:1e:c9:53:d0:6b:bd:79:04:f9:cd:f5:22:50:0d:fd:a8:
0b:0f:73:2c:1d:f4:6c:89:5f:66:4d:ee:6c:08:5a:1b:8c:f3:
4e:0f:85:d9:5f:de:0a:db:59:69:e1:21:f3:5e:34:5c:48:dc:
eb:be:50:21:ed:4c:c9:22:5c:7e:10:08:6b:e9:92:0e:ce:09:
60:fe:31:b5:c0:f4:9c:5f:c2:3d:d2:f0:b8:0f:c4:06:26:cb:
8b:f2:ad:58:42:b6:c8:4d:10:b6:a4:e3:4f:f5:77:7a:ab:42:
80:52:6a:c3:32:2e:b5:5d:e1:0a:a1:b6:d8:48:fe:cb:ba:8a:
62:eb:45:14:eb:db:a1:fb:e8:ae:74:6e:e7:16:92:95:f2:7b:
85:ca:09:bb:e3:ff:51:15:ee:1c:b9:31:b0:fb:bd:70:ec:09:
ba:78:be:2e:54:3d:3e:ba:da:74:d7:98:c8:e5:96:f8:23:19:
e8:29:3d:fc:98:a8:6e:c1:ef:cb:6b:0b:65:d9:01:98:f6:60:
55:52:6d:78:e6:28:69:f4:a9:0b:e5:a3:8e:ef:9d:c1:dd:b2:
6c:b5:14:2a:d5:0a:74:c6:45:dc:c6:1f:4a:d1:e2:92:7f:7a:
7b:3b:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:37:19 2024 by rpki-client on console.sobornost.net