Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58061.roa
File: AS58061.roa (raw, json)
Hash identifier: +rwzMYky/WDGWs3jTnuwFjMX3UpMoEhZwG2Wtfgiv2c=
Subject key identifier: A3:ED:F5:84:B5:E1:25:CE:68:84:B6:79:7B:C3:2E:BA:77:EC:91:E2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 47727618E797FBE37217E0127D60E241A8F8AA45
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58061.roa
Signing time: Fri 11 Apr 2025 00:01:57 +0000
ROA not before: Thu 10 Apr 2025 23:56:57 +0000
ROA not after: Fri 10 Apr 2026 00:01:57 +0000
asID: 58061
IP address blocks: 181.214.180.0/24 maxlen: 24
185.139.3.0/24 maxlen: 24
185.158.105.0/24 maxlen: 24
191.101.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:72:76:18:e7:97:fb:e3:72:17:e0:12:7d:60:e2:41:a8:f8:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 10 23:56:57 2025 GMT
Not After : Apr 10 00:01:57 2026 GMT
Subject: CN=A3EDF584B5E125CE6884B6797BC32EBA77EC91E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:bb:ee:e0:41:40:83:cc:ae:13:e9:5e:c6:
56:07:16:ba:c6:0c:15:aa:08:5f:0f:0f:60:51:0d:
1a:19:72:00:80:9f:24:74:07:20:3a:cd:ad:95:ff:
7f:da:ec:83:f9:79:35:7b:06:3b:2e:42:0b:63:b1:
3d:13:97:f5:a4:da:dd:43:85:60:55:74:27:8c:fb:
2d:43:8a:0d:c5:95:01:40:9e:85:80:3d:de:5f:6c:
76:ad:4b:c2:b5:7c:98:a6:f0:94:6f:73:65:e0:5b:
bc:cf:08:7f:e5:a1:64:8d:6a:5f:05:d3:d2:3b:4b:
0c:d5:27:e9:a0:69:e6:f1:15:02:03:a4:fe:4f:94:
cf:65:85:f4:47:b6:6f:ee:46:e7:a0:22:6c:46:e2:
a6:28:1e:3c:3d:cf:79:b0:16:bb:e3:c9:9d:16:a1:
66:1b:43:92:06:8f:e6:ac:f6:50:7d:b0:90:c5:2f:
ce:87:d8:1f:c2:cf:04:f6:3d:f2:a5:93:e9:4d:dc:
08:ae:d7:df:c5:ad:7d:a8:e8:28:88:c5:f7:de:d4:
fe:4d:d1:2b:43:f0:77:29:e2:9d:14:a4:91:37:a4:
b6:9f:58:8e:d8:c4:1b:76:e4:fd:61:23:c3:e3:14:
36:d9:37:c3:42:22:9f:ec:ec:30:99:cd:3b:f2:21:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:F5:84:B5:E1:25:CE:68:84:B6:79:7B:C3:2E:BA:77:EC:91:E2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.180.0/24
185.139.3.0/24
185.158.105.0/24
191.101.112.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c6:0b:61:6c:c1:7b:73:de:31:95:14:39:37:c1:88:d6:ce:
9b:e2:28:5e:f8:f3:11:de:49:c7:f0:5d:d2:63:0c:00:ee:01:
63:ea:04:cf:ea:8f:e9:35:3e:1d:bd:f7:3b:28:2d:f7:8e:f6:
76:52:e9:9d:2f:f3:a9:31:58:6e:65:2c:c5:62:43:96:55:cd:
70:17:da:be:24:5c:d6:0a:a3:33:fc:8f:f9:93:8d:d2:8c:d1:
22:0d:d8:36:bb:56:0c:74:44:a6:6c:da:53:d5:33:77:44:01:
77:b2:c4:18:d8:a7:ba:ad:91:90:47:5f:ba:61:ee:cc:79:11:
9f:32:eb:72:d8:b3:cb:eb:6f:d7:9c:80:f8:b4:33:fe:cc:d1:
34:1d:2d:ed:eb:a9:2e:d5:76:58:0a:d7:e9:9b:21:e8:a1:aa:
bd:fa:b5:20:2a:81:dd:a4:db:1b:a2:77:04:41:6d:c8:83:35:
81:9d:0a:51:7a:39:c6:4a:6c:06:9f:26:f5:77:4d:4d:f9:c2:
ed:b7:0d:ff:30:34:e6:d1:41:05:86:78:c7:7a:c2:63:e2:b4:
c4:20:78:7d:a3:17:8c:87:25:6d:8c:ea:c8:b7:84:ef:bd:66:
6f:92:de:0e:5f:90:95:32:38:57:74:e2:71:d3:dd:7c:0e:9f:
ca:52:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net