Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
File: AS43350.roa (raw, json)
Hash identifier: h6UJsXftjHzuV1VAL9B9e2KZ1aeBvEvO0Ce5/1qKBLE=
Subject key identifier: 0C:F7:80:1B:53:37:BA:B5:FC:52:7D:95:4F:6D:31:FF:2E:58:67:E1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3BB8376076357E064DC0C69D3237F94345EEFBCF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
Signing time: Wed 02 Apr 2025 19:54:00 +0000
ROA not before: Wed 02 Apr 2025 19:49:00 +0000
ROA not after: Wed 01 Apr 2026 19:54:00 +0000
asID: 43350
IP address blocks: 181.41.194.0/24 maxlen: 24
181.214.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b8:37:60:76:35:7e:06:4d:c0:c6:9d:32:37:f9:43:45:ee:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 2 19:49:00 2025 GMT
Not After : Apr 1 19:54:00 2026 GMT
Subject: CN=0CF7801B5337BAB5FC527D954F6D31FF2E5867E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:29:62:76:e8:37:84:f3:7e:d1:5b:68:c8:
a8:3e:2a:c9:af:d7:74:56:96:46:e3:1f:dd:79:66:
c2:20:c8:00:30:95:d4:61:e8:07:09:79:12:fa:a1:
e9:be:b5:0f:cc:bb:f9:63:84:2c:0f:25:ed:83:2e:
2e:c5:b0:f2:19:6d:c7:6d:32:b5:53:44:37:3a:5b:
d4:99:0b:a6:bc:c8:70:0e:1d:de:04:92:0c:8b:fa:
3a:e7:b7:08:a5:93:20:57:b0:d7:9c:54:d6:fd:5f:
09:2a:e3:46:84:04:a5:6e:86:76:b6:2b:51:49:63:
de:60:c2:85:53:06:4b:c7:06:67:e5:9d:ba:fa:96:
67:2d:c8:a3:d4:2f:ee:03:2b:5e:ff:9f:87:fc:5c:
20:eb:f9:1a:10:10:a0:f0:2e:26:c7:2c:fd:cd:89:
75:41:0a:b8:00:83:e7:4b:f9:af:e7:8c:07:67:39:
01:fa:bb:b3:3c:78:58:f0:8c:14:17:bc:69:4a:f8:
f7:76:db:03:54:39:7e:f5:cb:f2:26:a1:4f:e0:bd:
fa:ac:4c:1a:38:7a:20:0f:72:98:86:d8:2f:82:2d:
04:bb:74:9a:aa:5f:e4:68:7d:c9:fa:70:dd:ec:fd:
82:40:87:f8:93:bb:6e:e8:d6:17:65:0f:22:a8:06:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:80:1B:53:37:BA:B5:FC:52:7D:95:4F:6D:31:FF:2E:58:67:E1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.194.0/24
181.214.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:73:11:4d:e6:c6:3c:a0:c0:80:59:b4:df:62:d8:9e:c2:b9:
63:59:a3:09:cf:54:60:c8:ba:30:ae:f5:ec:62:3e:3f:f4:f4:
da:a7:04:55:42:fb:f9:06:71:76:32:25:1a:44:fe:d0:aa:75:
ce:e3:4f:4e:89:db:db:78:23:9f:3a:8e:45:f6:87:a8:b7:15:
2f:35:d7:96:d8:2f:45:e4:f1:eb:01:ca:16:4c:31:27:26:4c:
e7:1b:51:f7:e4:0a:ce:6b:27:16:91:b4:a9:94:ac:a7:12:d4:
ee:a7:5b:25:d2:d6:c0:41:5d:2e:6b:a3:27:2c:54:41:df:7b:
38:6e:4a:7e:2f:8a:a6:50:e3:65:55:6c:f1:97:a2:c6:8d:a1:
f1:8c:cb:43:17:41:d5:a6:ca:79:bb:7c:60:2c:75:21:07:29:
3a:c0:b6:b0:61:f0:9c:aa:31:f5:f5:d8:ce:d1:1b:60:70:a8:
48:c0:36:f5:9d:a7:c5:f1:f2:da:42:15:97:87:7b:f6:6a:f2:
b8:0f:79:bd:15:fd:48:a5:d6:6a:b1:60:c5:66:8a:3c:36:f9:
bd:31:bf:fd:ce:dc:8b:7c:17:bb:88:4e:ab:68:4a:b8:fe:56:
36:0e:82:72:dc:89:3b:84:d7:f0:f0:e5:7e:6e:ef:85:a5:c5:
90:00:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net