Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56594.roa
File: AS56594.roa (raw, json)
Hash identifier: YK4bcFV328Sq6PrjYm97rw+XmmYs5LtiaojhQsCUxeI=
Subject key identifier: 46:19:2C:D2:63:65:3C:B8:4D:09:54:99:FC:63:7B:20:CF:CF:02:B4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 606B85BC5C5C2522B04E81679422754F2D353D0C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56594.roa
Signing time: Thu 10 Apr 2025 16:03:32 +0000
ROA not before: Thu 10 Apr 2025 15:58:32 +0000
ROA not after: Thu 09 Apr 2026 16:03:32 +0000
asID: 56594
IP address blocks: 45.158.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6b:85:bc:5c:5c:25:22:b0:4e:81:67:94:22:75:4f:2d:35:3d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 10 15:58:32 2025 GMT
Not After : Apr 9 16:03:32 2026 GMT
Subject: CN=46192CD263653CB84D095499FC637B20CFCF02B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:dc:1a:7d:fd:3e:d1:3e:c6:da:10:7e:b4:
eb:71:ee:7a:f3:cf:c4:50:45:95:1a:de:52:00:44:
ff:33:82:42:86:1b:cf:4e:26:8a:85:95:83:37:a4:
28:0d:3b:11:54:e7:3b:cf:d7:6a:cb:ca:2d:1f:4b:
f6:97:ab:1b:df:6c:7a:7b:8d:98:38:de:8c:a6:1d:
76:57:ec:70:0e:40:97:f7:09:70:4e:64:c5:39:fa:
e6:5b:df:51:93:e1:04:ed:e1:05:d1:c1:6b:a5:58:
50:94:3a:aa:33:aa:ad:92:9c:e5:86:c3:a8:98:8b:
c3:fe:e6:44:e5:8e:d6:7d:e3:1d:c1:24:0b:30:ea:
8d:a7:52:72:aa:6b:b5:38:3b:4b:f5:73:f6:f5:d2:
1e:9d:85:0e:59:c4:7a:bb:67:24:8b:3d:5d:a3:a4:
eb:fe:47:fa:c8:f3:45:79:80:02:49:8b:ca:3e:ba:
20:aa:80:ec:1b:d1:1a:eb:3a:4d:1c:23:39:50:4f:
3e:7d:8c:f4:01:a1:dd:7b:5d:f5:ae:50:e7:98:de:
d0:33:f4:60:8e:8d:f3:09:3c:14:68:d3:29:54:23:
e5:23:96:e7:97:09:8e:ac:df:7a:2c:6a:69:9f:5c:
33:0e:eb:b6:d5:e2:fc:74:2b:57:ed:e8:64:df:6b:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:19:2C:D2:63:65:3C:B8:4D:09:54:99:FC:63:7B:20:CF:CF:02:B4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS56594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d1:2a:13:ad:ed:2e:18:e7:c5:2c:ad:1e:1e:21:70:0b:3b:
35:43:5f:f9:ba:b0:0e:21:16:aa:6f:a1:63:6a:b1:6e:49:0f:
96:2e:fd:d1:8a:18:aa:56:60:7c:2f:da:0b:94:4b:84:ae:8c:
5f:ed:42:3f:d0:9a:a9:25:0e:1c:32:78:1f:6e:eb:99:cc:44:
b9:82:19:87:01:c6:cb:fb:b4:51:c0:ff:11:ea:7f:0a:72:ab:
11:21:a4:ef:2e:9b:c9:82:ab:17:f6:3c:9a:7c:96:18:0b:d6:
51:d7:ea:72:46:27:fe:b8:49:81:09:fa:c4:14:27:9a:04:04:
cc:0c:10:0c:2d:d2:ff:59:1e:3e:24:9c:b2:79:b8:6c:f6:5e:
a8:39:14:47:a8:67:fc:f2:99:d2:79:6d:26:21:3c:2b:15:32:
b7:a1:50:0c:61:ed:df:66:4a:d6:d0:85:68:74:6f:89:0b:e7:
78:46:79:7f:e8:6c:8e:25:47:d0:92:ad:d9:f6:be:ea:1b:a1:
44:97:54:90:d9:9a:d2:d7:06:be:62:00:c4:74:2c:44:96:66:
52:63:85:c5:1c:83:82:0c:e9:b5:8f:eb:1d:54:04:f5:21:bb:
db:d0:57:37:bf:91:8a:35:99:af:54:be:8b:7e:a6:b0:cf:58:
eb:c3:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net