Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: XlD6QbtjJTflfN2YTHz9TGI3WEfkJlnflB7KuPWQsso=
Subject key identifier: 3B:3D:10:C2:E8:AF:D8:33:57:7A:28:97:7D:24:B8:67:1E:29:E2:E2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 22B4F8255E4F5BAF72782648BEE40789F6D5102E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa
Signing time: Fri 04 Apr 2025 00:01:59 +0000
ROA not before: Thu 03 Apr 2025 23:56:59 +0000
ROA not after: Fri 03 Apr 2026 00:01:59 +0000
asID: 36530
IP address blocks: 141.11.108.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b4:f8:25:5e:4f:5b:af:72:78:26:48:be:e4:07:89:f6:d5:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 23:56:59 2025 GMT
Not After : Apr 3 00:01:59 2026 GMT
Subject: CN=3B3D10C2E8AFD833577A28977D24B8671E29E2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:79:63:8f:ea:f6:ba:17:81:1e:95:ea:a8:
1b:f1:f7:73:28:cb:48:83:1d:19:a9:67:50:ae:de:
ba:c6:04:08:36:ab:0c:f9:d8:92:50:6e:ae:39:bd:
21:f1:bb:84:1c:4a:81:65:3f:05:ca:6d:46:f5:3a:
f1:4e:e1:ba:e1:a9:6e:08:49:9e:b4:ee:3e:e7:37:
3b:72:43:70:2b:ce:34:60:6f:69:41:49:55:8a:5f:
25:0e:20:61:ca:45:31:02:43:40:a1:93:f1:f5:79:
8b:12:2f:9a:11:e9:9b:78:52:38:2e:4f:91:92:e2:
c0:66:31:bc:9b:0d:fa:b9:fe:3a:c6:97:84:3b:30:
88:af:0b:d7:b6:21:81:2a:dc:b4:a1:39:fc:35:57:
e9:99:2c:d9:d3:1b:c7:5c:02:26:b0:b2:ab:99:a2:
f6:7e:68:86:70:ad:a3:9b:63:6e:c8:69:63:ab:df:
a6:d7:55:27:68:10:d7:e6:5e:98:ab:82:26:70:3a:
88:04:19:52:b1:8f:e8:d1:6a:0d:0b:e3:0a:c8:a5:
cc:08:2e:84:c9:d1:e3:62:b5:64:44:90:9a:83:a9:
6f:d8:96:48:99:28:c4:4c:35:81:2b:52:25:f8:11:
f3:27:93:2d:eb:79:cb:ee:58:8d:92:55:1f:fb:40:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:10:C2:E8:AF:D8:33:57:7A:28:97:7D:24:B8:67:1E:29:E2:E2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e7:fb:ac:1b:75:40:5f:69:7a:4f:5d:3c:55:67:e2:7f:54:
c7:07:7d:cb:4d:34:01:80:d2:ed:a2:ec:0c:fc:bc:42:ab:60:
3b:c4:dd:01:68:0b:98:cc:ee:37:01:0f:a9:d3:e6:8f:fc:24:
d5:ae:38:bc:aa:2d:8a:df:84:66:64:f1:42:ce:77:8a:76:ed:
9e:9b:bc:e2:42:aa:e6:2a:fa:fd:2c:60:23:75:d3:30:22:8b:
15:74:99:83:3e:50:e7:f6:23:93:41:42:de:f0:0d:cb:a4:44:
41:3c:66:97:0e:26:e0:ae:49:d3:ac:5c:4e:1e:16:7f:c8:80:
de:09:49:1a:92:93:99:73:52:0a:ae:08:83:92:04:9c:bc:6d:
c3:4b:ba:fc:d9:41:e7:cc:60:33:f2:92:4a:5c:7e:77:6b:52:
14:61:7e:e4:0c:d7:ed:5c:37:73:88:63:a8:0d:64:18:d7:2a:
54:9f:e6:b3:10:7e:a7:52:64:da:0c:64:66:58:e1:f1:b1:1f:
6f:f1:22:be:45:3d:a9:49:99:fa:a4:72:e3:36:83:4a:39:1a:
b7:75:2c:39:37:af:07:6e:2a:33:be:b0:cb:de:a4:7f:d7:19:
ff:3c:6b:3f:a5:3a:9b:1e:6a:c3:21:01:8a:aa:6c:1e:59:e1:
3f:30:32:67
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUIrT4JV5PW69yeCZIvuQHifbVEC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA0MDMyMzU2NTlaFw0yNjA0MDMwMDAxNTlaMDMxMTAvBgNV
BAMTKDNCM0QxMEMyRThBRkQ4MzM1NzdBMjg5NzdEMjRCODY3MUUyOUUyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoXljj+r2uheBHpXqqBvx93Mo
y0iDHRmpZ1Cu3rrGBAg2qwz52JJQbq45vSHxu4QcSoFlPwXKbUb1OvFO4brhqW4I
SZ607j7nNztyQ3ArzjRgb2lBSVWKXyUOIGHKRTECQ0Chk/H1eYsSL5oR6Zt4Ujgu
T5GS4sBmMbybDfq5/jrGl4Q7MIivC9e2IYEq3LShOfw1V+mZLNnTG8dcAiawsquZ
ovZ+aIZwraObY27IaWOr36bXVSdoENfmXpirgiZwOogEGVKxj+jRag0L4wrIpcwI
LoTJ0eNitWREkJqDqW/YlkiZKMRMNYErUiX4EfMnky3recvuWI2SVR/7QBmHAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUOz0Qwuiv2DNXeiiXfSS4Zx4p4uIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACNC2wD
BACNC/AwDQYJKoZIhvcNAQELBQADggEBAK3n+6wbdUBfaXpPXTxVZ+J/VMcHfctN
NAGA0u2i7Az8vEKrYDvE3QFoC5jM7jcBD6nT5o/8JNWuOLyqLYrfhGZk8ULOd4p2
7Z6bvOJCquYq+v0sYCN10zAiixV0mYM+UOf2I5NBQt7wDcukREE8ZpcOJuCuSdOs
XE4eFn/IgN4JSRqSk5lzUgquCIOSBJy8bcNLuvzZQefMYDPykkpcfndrUhRhfuQM
1+1cN3OIY6gNZBjXKlSf5rMQfqdSZNoMZGZY4fGxH2/xIr5FPalJmfqkcuM2g0o5
Grd1LDk3rwduKjO+sMvepH/XGf88az+lOpseasMhAYqqbB5Z4T8wMmc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net