Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: xx2vA8tuy+B4nAMKOAEozoG3B39ez/PR9whrlL5A03A=
Subject key identifier: 98:E1:C3:01:64:45:58:CB:4B:76:CD:2E:E6:E4:57:E6:45:8E:FE:BA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1889999F603D8D99E95B06D5F24FB5724875F616
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210538.roa
Signing time: Mon 07 Apr 2025 19:54:00 +0000
ROA not before: Mon 07 Apr 2025 19:49:00 +0000
ROA not after: Mon 06 Apr 2026 19:54:00 +0000
asID: 210538
IP address blocks: 141.11.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:89:99:9f:60:3d:8d:99:e9:5b:06:d5:f2:4f:b5:72:48:75:f6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 7 19:49:00 2025 GMT
Not After : Apr 6 19:54:00 2026 GMT
Subject: CN=98E1C301644558CB4B76CD2EE6E457E6458EFEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:94:15:51:11:aa:9b:3e:3c:aa:48:fe:03:
88:4b:08:30:5d:f2:5b:db:e5:04:ab:4e:cd:47:72:
6b:c1:24:12:a4:fd:7b:ab:1f:67:f3:fd:88:d9:31:
7a:6b:41:39:fd:d9:16:c8:2b:3c:60:c2:3e:45:10:
c1:ac:76:ad:53:3c:57:41:0b:d5:6f:a3:18:fe:2e:
10:ef:3b:d9:19:9f:b9:df:64:dd:25:1f:61:b6:6f:
00:56:24:4b:d5:45:c1:7f:c5:1e:9b:3f:04:ca:9e:
e8:df:e4:98:91:82:0d:22:e1:ef:75:2e:3f:74:85:
d3:2f:2e:1a:b1:a6:fd:0b:55:3a:aa:54:9b:7f:71:
19:10:05:82:6b:3e:8c:d5:b4:f9:5c:31:06:bb:70:
83:67:ad:af:87:ec:5a:fa:d1:82:b0:65:c7:de:38:
52:46:2e:40:09:cf:b5:e8:3b:41:6a:7f:b3:39:89:
fd:16:47:37:c1:10:f7:ae:7c:db:cd:cf:0e:e0:6e:
e0:3b:0c:73:94:5c:9f:e8:bb:7e:05:c6:56:39:7f:
8d:3a:47:29:0b:d7:1e:5e:d0:33:2d:70:d1:69:71:
bd:dc:fc:9a:28:76:99:f2:04:85:65:8e:63:ac:fa:
6e:9c:9b:1a:dc:12:0e:1d:03:e9:97:65:01:7e:fe:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:C3:01:64:45:58:CB:4B:76:CD:2E:E6:E4:57:E6:45:8E:FE:BA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ed:69:4b:34:d8:99:fd:3a:15:6c:ea:b3:cb:9c:27:2c:f1:
ff:ba:c2:cd:cf:c1:18:2b:31:0c:82:df:66:c0:5c:b8:35:5b:
e6:19:0d:20:ed:c6:2f:88:6c:a0:f7:65:68:d1:34:a7:5a:5f:
88:da:45:6d:72:24:17:a4:e9:bf:e1:5e:6f:14:61:cb:8a:b3:
24:7e:ad:d1:84:87:c3:76:a6:ac:54:f3:3e:68:5c:60:98:2c:
58:be:91:e1:17:f0:8d:93:48:ed:87:08:3a:05:69:89:fb:2e:
2a:02:85:5b:9b:0b:49:d5:db:32:5d:37:be:ff:0e:74:3d:6a:
88:aa:cc:b0:f1:c8:58:6c:7d:70:b9:9d:f3:97:ad:26:c5:bb:
76:12:da:a5:92:4c:75:9b:46:9f:88:17:64:e6:c6:ef:c0:32:
69:86:2d:2d:90:8c:0d:90:d9:54:62:14:6f:68:d0:d2:44:a6:
ee:f3:50:61:87:a8:cd:c0:23:e7:35:ef:0d:24:8d:86:2a:11:
7a:83:fe:d7:ce:7b:37:63:98:e6:d0:13:7f:de:f3:2b:a9:77:
df:91:34:1d:6a:65:cf:5f:65:56:f5:c0:dd:3c:bd:3b:a3:d9:
79:c3:e8:5c:42:3c:95:35:99:97:6e:b3:3c:e2:02:aa:35:5d:
30:2e:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net