Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa
File: AS211373.roa (raw, json)
Hash identifier: u8pbg13z63gA15onoIV6ZgMKp9/T4F5X+QfWma8mdXY=
Subject key identifier: AB:E4:F0:E5:38:0C:47:2C:2A:CA:76:B3:8A:F8:06:C4:3D:43:7B:E6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 495C66EEA586A8E3DF214DE7515D98C421279DEF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa
Signing time: Tue 18 Feb 2025 08:53:55 +0000
ROA not before: Tue 18 Feb 2025 08:48:55 +0000
ROA not after: Tue 17 Feb 2026 08:53:55 +0000
asID: 211373
IP address blocks: 179.61.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5c:66:ee:a5:86:a8:e3:df:21:4d:e7:51:5d:98:c4:21:27:9d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 18 08:48:55 2025 GMT
Not After : Feb 17 08:53:55 2026 GMT
Subject: CN=ABE4F0E5380C472C2ACA76B38AF806C43D437BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:2d:4b:77:a4:4a:d5:e6:7b:41:ed:bf:b5:
12:3a:5f:1e:68:2d:8a:b9:53:2d:2f:5d:a3:d1:04:
dc:7b:ac:4c:0e:c8:23:2b:d9:ec:30:98:1e:e4:eb:
d5:72:aa:0b:1f:e5:ca:15:74:69:60:fd:54:d2:81:
e7:1a:4a:15:91:bb:7c:ff:45:c2:b3:9a:4d:22:27:
1f:ba:bf:fa:4f:ee:cc:d3:45:6a:38:c2:2e:57:bf:
25:33:5c:46:64:97:3f:49:02:d8:ee:8b:90:c1:f7:
36:16:0f:3a:6f:a8:df:d0:79:8d:cc:e5:c4:5f:a8:
18:29:52:0d:a5:3f:ad:75:47:66:a0:e6:25:b2:fd:
ca:5d:60:93:28:9b:0f:ae:03:cf:7b:49:59:ff:3a:
b6:cc:17:d4:60:f0:b9:9c:bd:17:39:03:56:91:d2:
1a:df:87:72:c7:d3:1e:71:a3:c3:06:9a:a3:d0:f0:
17:a4:5d:a9:81:b3:48:5c:3a:53:5f:ab:35:4c:ba:
0b:b6:e4:20:c5:8c:4c:d1:31:4e:72:7e:27:dc:31:
c1:54:97:d3:98:a0:12:06:b3:6e:18:63:d6:3d:f0:
ea:1c:16:84:14:b1:a2:80:c3:91:f0:ef:9e:74:78:
43:e3:2c:de:69:33:22:20:f3:8b:81:fc:61:36:15:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:F0:E5:38:0C:47:2C:2A:CA:76:B3:8A:F8:06:C4:3D:43:7B:E6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.153.0/24
Signature Algorithm: sha256WithRSAEncryption
35:50:b0:d7:fe:4b:fc:7f:e9:d9:87:94:19:a8:87:b2:99:c7:
54:52:d5:04:63:57:5e:71:4a:8f:c5:9c:03:3e:82:48:1b:9e:
42:99:4b:f8:4c:ac:b2:d8:24:d5:ef:47:6f:05:72:b3:aa:a0:
b2:72:7f:86:a4:cb:fd:e8:67:81:98:32:0e:38:f3:65:4a:9b:
f1:5a:13:8f:d1:25:00:88:08:95:d1:b1:01:0d:98:7c:93:8b:
33:64:66:69:6e:96:00:ff:98:57:96:8f:01:7d:c5:ed:29:45:
12:c2:14:d2:bf:76:29:f5:22:fe:7d:68:70:cb:d7:54:d4:0c:
85:21:7c:c2:e7:96:94:95:85:39:09:89:2e:cf:60:c7:ef:d1:
90:a4:2f:59:90:bc:34:bb:a0:a2:99:0d:79:92:9a:4c:11:ab:
06:81:d4:21:98:7d:e4:79:9f:6f:36:42:2b:44:79:49:89:2f:
fc:ef:d2:d6:24:76:d1:72:a8:46:8e:09:fa:da:9c:26:19:a4:
d8:5a:c3:a4:a0:16:d6:42:50:5e:cc:ca:e0:c4:57:e5:6b:26:
97:67:02:9f:a0:7c:dd:32:10:83:64:34:ef:48:f0:dd:e7:9b:
3e:cc:c4:17:bd:44:94:3b:45:ae:e4:29:74:a1:b2:73:9b:6e:
2a:6c:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:26 2025 by rpki-client on console.sobornost.net