Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
File: AS149981.roa (raw, json)
Hash identifier: /8fY1vQXUxztpLqSVMjFhhlVM1VfQQL5VNPicCUw6oo=
Subject key identifier: 03:CE:10:93:33:7B:B6:D7:E1:82:D8:40:F4:91:3B:E1:A7:27:97:19
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C6E63CDE6582233491B3C5FE3C10ECEEE221041
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
Signing time: Fri 14 Feb 2025 08:54:00 +0000
ROA not before: Fri 14 Feb 2025 08:49:00 +0000
ROA not after: Fri 13 Feb 2026 08:54:00 +0000
asID: 149981
IP address blocks: 82.27.188.0/24 maxlen: 24
82.27.189.0/24 maxlen: 24
82.27.190.0/24 maxlen: 24
82.27.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6e:63:cd:e6:58:22:33:49:1b:3c:5f:e3:c1:0e:ce:ee:22:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 14 08:49:00 2025 GMT
Not After : Feb 13 08:54:00 2026 GMT
Subject: CN=03CE1093337BB6D7E182D840F4913BE1A7279719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:be:a3:c1:6f:b8:74:02:fa:20:e3:59:52:
71:79:2d:90:64:3e:f7:81:7e:65:d4:c3:ab:2e:43:
fc:db:27:05:97:40:ef:60:1b:66:94:11:92:1c:75:
c0:2a:66:27:b4:6b:02:6a:2c:09:82:30:ca:94:b4:
a7:6e:1c:36:a2:5f:4b:fb:67:cc:fe:66:e0:41:cc:
fe:05:7b:9b:45:5f:5c:21:71:ee:ba:73:dd:77:41:
6e:09:7e:2c:6f:73:59:c3:5a:3e:ce:ac:4f:e2:48:
d3:6f:d9:db:a6:eb:8f:42:b4:58:c0:c8:b7:13:f0:
ca:09:55:0f:ef:52:00:dc:ef:3f:a4:51:82:e3:7e:
86:85:28:9d:01:4b:49:c8:de:e4:60:a5:3b:39:93:
a6:fc:d3:40:4b:83:9a:35:ac:de:38:64:0b:2a:51:
c9:ea:cb:0a:f1:ce:99:30:03:ed:99:b1:a5:54:07:
f0:34:c1:3e:e1:63:18:9a:66:d1:85:b5:48:0c:f7:
e4:a4:bf:e5:8a:c3:89:8a:c8:c6:e7:ff:58:11:72:
95:53:9d:05:1b:26:8f:8a:8b:3d:b8:41:31:3d:0b:
28:40:5f:bb:e8:c7:05:bb:af:64:70:9c:67:bc:ca:
be:dc:6c:54:f8:90:29:9e:12:1e:f6:fe:82:be:38:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:10:93:33:7B:B6:D7:E1:82:D8:40:F4:91:3B:E1:A7:27:97:19
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:13:e3:67:d7:f9:ab:70:61:00:3a:4b:8f:be:39:31:04:b0:
25:c5:cd:27:09:07:b3:1b:1f:4d:f0:9a:34:23:c6:9e:24:77:
a2:af:c3:37:c3:84:35:ac:63:dc:5b:a9:da:4a:42:6c:08:a6:
d2:02:6f:54:4c:f1:8f:a9:a7:fc:25:43:ca:b8:b5:f8:7d:b3:
0b:81:96:6d:dd:ba:13:b5:cd:6c:62:65:70:33:11:25:9f:2e:
16:33:53:09:eb:a4:09:91:32:5a:e2:2a:07:1a:79:bb:53:02:
34:58:d0:bb:c0:97:f2:9d:53:a1:29:11:2b:85:e2:bb:e8:69:
98:8f:2d:fd:3d:00:fb:2f:e8:ed:78:85:de:0e:e5:b2:09:df:
cb:96:b7:02:40:68:b8:c4:e4:ba:66:19:bb:fe:b7:34:55:f5:
70:41:85:cc:eb:0b:0b:d0:e2:7e:a8:12:0e:04:db:4b:6e:83:
84:b0:2c:ef:f5:b0:6b:e2:4d:9f:7c:c2:62:1f:54:bb:15:92:
37:52:18:07:89:7a:ab:05:d0:75:0f:00:ae:45:23:ec:9a:3b:
40:ad:23:f3:c5:2e:ae:ae:7a:e8:46:fb:be:39:54:97:e9:04:
35:23:ff:25:b9:ce:43:b6:d2:1f:ed:92:07:f8:39:19:63:b4:
d5:76:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:11:23 2025 by rpki-client