Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208949.roa
File: AS208949.roa (raw, json)
Hash identifier: BbbMc3D0g9Ou/bXVWa5fjxdHDuyQ2rItQJ3eA5441Qk=
Subject key identifier: CC:48:9E:C5:78:5C:17:8D:AF:54:E3:F4:65:A3:6D:E8:76:59:C7:C2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 54C6AF4B6EEA3461933D1C375857DC5695EEBB08
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208949.roa
Signing time: Sun 06 Apr 2025 00:54:00 +0000
ROA not before: Sun 06 Apr 2025 00:49:00 +0000
ROA not after: Sun 05 Apr 2026 00:54:00 +0000
asID: 208949
IP address blocks: 181.215.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c6:af:4b:6e:ea:34:61:93:3d:1c:37:58:57:dc:56:95:ee:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 6 00:49:00 2025 GMT
Not After : Apr 5 00:54:00 2026 GMT
Subject: CN=CC489EC5785C178DAF54E3F465A36DE87659C7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:b1:d6:99:31:e3:23:e3:66:0b:89:2d:1a:
8c:24:b5:48:44:57:9e:21:91:2c:b4:f2:fc:59:d5:
f0:32:d6:e0:82:8f:26:47:79:5e:4a:61:ff:f1:f4:
5c:19:f2:a0:47:c9:b8:02:52:6a:2b:56:5b:8f:6b:
57:34:d1:0c:9a:17:ef:a3:a9:41:01:47:fd:25:dd:
c9:3b:da:27:23:72:8a:0b:52:2d:76:b1:ae:75:ff:
62:04:8b:4b:b3:9d:d2:f5:9a:e9:79:e1:84:a4:ff:
0c:b9:cb:2b:b2:12:d8:3b:4f:81:08:ad:da:00:f8:
30:63:ba:1e:0d:c5:52:4f:63:c6:5a:8c:19:7a:ed:
2c:72:31:f5:8a:f8:48:d0:cb:d9:b9:6f:eb:49:2f:
39:db:a4:6c:e2:e6:e2:e3:e8:47:95:46:98:f1:a9:
5b:3a:bb:4d:c4:51:b1:84:2a:48:81:9c:84:50:9a:
0e:87:ef:9a:be:2b:99:20:69:da:21:d0:67:ae:05:
03:5f:eb:44:73:43:b4:ff:5f:36:ae:d4:cf:db:f9:
1b:90:a6:97:87:ef:50:bc:01:87:fa:74:e0:5a:84:
d7:41:c4:3f:01:b7:82:10:26:b7:2b:51:20:d7:d8:
fe:9a:47:d3:c8:3c:1b:cf:3b:33:20:19:69:0e:e5:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:9E:C5:78:5C:17:8D:AF:54:E3:F4:65:A3:6D:E8:76:59:C7:C2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS208949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1d:5a:36:b1:54:8b:1e:3a:09:68:a6:9a:96:93:02:37:1e:
49:e6:ba:55:4b:35:86:82:17:2d:2c:4f:ae:31:0c:ad:e7:f1:
0a:e7:19:88:ec:32:99:e9:bf:08:a8:4d:5b:e9:70:79:c6:88:
f2:3b:56:3c:b5:1a:f5:93:a7:85:78:4e:3d:11:e3:c9:fb:c6:
8e:90:ca:61:0c:52:fc:0a:b0:a0:30:62:7d:72:e2:6d:a0:85:
51:52:18:34:7d:7e:19:9c:bc:15:89:64:02:05:c8:fa:c1:c5:
24:20:59:c0:76:a6:09:b5:87:02:85:09:05:0c:41:84:cc:6e:
27:78:48:69:d1:3c:a5:08:46:c6:f9:2e:a2:03:3f:ff:e8:13:
0a:49:ee:95:b1:0d:ef:06:26:d6:90:e9:56:d0:1b:92:3d:d7:
79:22:3c:7f:33:27:c0:62:39:eb:ef:bc:64:0b:4c:7a:53:d1:
3d:94:e5:5c:00:04:27:14:83:82:8a:82:aa:d5:85:8d:5a:a4:
75:0b:1e:99:38:0c:61:1c:ba:25:94:2d:b0:93:43:7e:ba:18:
11:8c:de:7a:ff:43:69:8a:db:6b:73:1b:d4:9f:4c:d5:1e:44:
b1:3a:d8:70:79:4b:c6:7b:57:36:18:55:de:d8:f5:4c:c6:d0:
8a:03:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:26 2025 by rpki-client on console.sobornost.net