Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197071.roa
File: AS197071.roa (raw, json)
Hash identifier: Mm0FoAI1e3NBv+VjazuRndSZpQbUyntBFc1PWHiE3B8=
Subject key identifier: C3:AB:75:0D:E1:3D:A6:24:F2:E1:60:65:E6:C6:6E:1B:74:4D:3C:35
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6F30260B4C15F792935248D954284DE1DF9AA826
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197071.roa
Signing time: Wed 09 Apr 2025 18:59:25 +0000
ROA not before: Wed 09 Apr 2025 18:54:25 +0000
ROA not after: Wed 08 Apr 2026 18:59:25 +0000
asID: 197071
IP address blocks: 141.11.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:30:26:0b:4c:15:f7:92:93:52:48:d9:54:28:4d:e1:df:9a:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 9 18:54:25 2025 GMT
Not After : Apr 8 18:59:25 2026 GMT
Subject: CN=C3AB750DE13DA624F2E16065E6C66E1B744D3C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:40:2e:e7:6f:68:fe:a1:db:cf:7a:2b:04:
46:13:99:c5:f8:d5:a3:03:f1:de:cf:f2:40:4b:35:
44:9c:e1:ea:35:a2:af:28:f1:ef:4d:95:8b:d3:cc:
9c:a2:2a:1a:6d:da:c2:e0:56:d9:d8:8a:2b:fb:59:
41:f7:68:ce:56:53:4e:91:26:73:9b:93:6b:13:12:
89:c4:f6:b7:40:e2:f7:db:2c:02:3f:5d:a9:af:12:
3f:63:1f:bb:69:63:69:32:5b:bf:85:ea:61:75:fd:
47:9e:77:c5:23:de:c8:17:86:13:8c:3c:9c:3e:fb:
fe:0b:65:95:de:a9:f9:79:06:96:3f:ae:07:d3:0c:
31:cf:5d:cb:ce:80:8d:40:68:5c:8e:89:44:c6:73:
f3:21:5e:17:a2:9d:11:0c:66:3d:fc:a6:2d:73:51:
af:65:f7:85:10:95:f0:49:08:5c:3f:4f:78:32:3c:
95:0f:aa:28:f3:6b:7d:a0:31:87:b2:cb:ee:d4:33:
4c:71:d5:cc:58:32:70:de:b8:fc:ca:9c:e4:80:cb:
6b:84:da:30:fc:28:53:99:19:c6:dc:a2:76:3e:ab:
f7:81:ca:0c:3f:59:9e:70:79:dd:84:33:38:04:20:
78:b8:94:37:1e:f0:8e:61:1f:81:8a:7e:5a:3a:90:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:75:0D:E1:3D:A6:24:F2:E1:60:65:E6:C6:6E:1B:74:4D:3C:35
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.26.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b0:63:09:28:1c:c4:d8:94:47:ed:73:35:e0:e4:61:90:1e:
bb:0e:2e:e5:9d:81:ad:c2:c1:0c:f4:7c:8a:93:ce:09:42:f4:
11:bc:b7:d9:41:91:ba:9d:71:98:30:be:f8:30:a9:03:e7:ed:
34:55:52:26:a6:cd:2e:d6:2f:12:dc:7e:ae:0e:01:37:15:38:
9b:f6:05:a2:6f:4f:34:2d:d3:2c:d0:f8:a0:8b:4f:08:69:73:
02:50:ca:4d:74:58:62:9a:19:be:8f:31:10:72:3d:80:77:43:
d6:13:7b:37:99:37:00:f3:81:72:5c:01:61:35:e3:ae:83:47:
70:5d:aa:90:aa:33:0d:ab:c1:12:49:61:9f:01:fe:8a:4b:0f:
b1:86:a6:7b:19:e7:a8:46:c2:59:db:8c:6e:98:b1:06:2b:a7:
c1:20:2f:fd:1f:5c:69:31:f1:25:10:be:b0:50:3c:71:3b:de:
b7:c4:b5:ec:27:70:74:b8:58:97:50:e4:ae:d5:0d:da:84:1c:
ca:80:0d:ab:1b:7b:6f:39:ce:5f:77:96:f5:13:03:35:9d:60:
89:b7:97:b0:a9:3c:15:e9:3b:f6:88:93:01:b4:91:42:b6:0a:
a2:75:8e:02:89:d9:57:c1:a8:3a:30:24:ff:b5:ec:62:78:78:
f1:af:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net