Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12876.roa
File: AS12876.roa (raw, json)
Hash identifier: D0Qk1mxT/U25RWqn+IZF0p99JtV8IK+4xCy3APhKyT8=
Subject key identifier: 7A:F1:73:79:83:62:D6:AD:ED:A5:37:06:A6:F5:2B:76:82:98:E8:F7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 42408893331B567927A56DC616C7594081719B4F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12876.roa
Signing time: Tue 03 Dec 2024 12:21:41 +0000
ROA not before: Tue 03 Dec 2024 12:16:41 +0000
ROA not after: Tue 02 Dec 2025 12:21:41 +0000
asID: 12876
IP address blocks: 148.135.147.0/24 maxlen: 24
148.135.150.0/24 maxlen: 24
148.135.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:40:88:93:33:1b:56:79:27:a5:6d:c6:16:c7:59:40:81:71:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 3 12:16:41 2024 GMT
Not After : Dec 2 12:21:41 2025 GMT
Subject: CN=7AF173798362D6ADEDA53706A6F52B768298E8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:b3:75:c5:1a:8f:e5:4d:ee:c5:dd:1e:b8:
e2:e1:6e:4c:a9:fe:0f:5c:94:7b:53:9d:60:4a:25:
a2:d7:ab:6b:e0:49:90:37:91:dc:dc:6e:91:c7:8c:
30:94:ff:de:61:b4:dc:92:0b:df:b7:d5:71:5b:ae:
35:1c:8d:a1:2e:b6:c3:05:5a:aa:a8:1c:ec:1f:2b:
62:ca:5c:8e:a8:8e:fe:ba:5c:5f:af:73:8a:93:3d:
bd:0e:e9:90:40:5c:67:b1:ab:53:6d:0c:50:17:d0:
98:b3:c9:1d:7c:16:65:d6:04:15:17:bf:d9:4d:2a:
98:36:16:a4:a3:95:dc:aa:49:2b:96:cd:8d:46:f8:
51:2c:28:33:ee:6e:74:0c:a8:6e:53:52:6b:50:0b:
b0:cf:90:6a:99:77:34:57:cc:79:7b:ab:8a:1a:e7:
6d:ef:7e:f1:c9:a4:18:c5:ab:3d:1c:00:35:03:b0:
c7:f3:ad:66:25:43:de:2d:8c:80:e4:c3:6d:82:45:
61:a3:ff:87:da:86:c6:2d:5c:04:45:f4:fb:4a:16:
3d:7e:da:19:0b:de:87:2b:15:76:5a:3d:1e:1b:9c:
70:57:34:30:ed:f4:30:b2:f7:6c:85:06:b6:cc:d5:
58:20:80:d5:e1:10:31:f9:d7:0a:61:19:60:fc:c2:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:73:79:83:62:D6:AD:ED:A5:37:06:A6:F5:2B:76:82:98:E8:F7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS12876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.147.0/24
148.135.150.0/24
148.135.159.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6b:e3:96:a3:83:83:77:07:70:8e:70:b8:c9:e9:7d:1c:a2:
6a:ce:b2:27:33:dc:de:ca:c1:f6:c2:b2:da:c1:f7:88:e9:18:
bd:26:89:86:e8:a5:fa:0c:ca:50:f1:ad:97:e3:be:ce:59:df:
d2:c7:52:cc:29:5e:8d:b5:03:fa:9d:47:ce:8e:e2:32:11:40:
94:1d:05:50:2d:f6:ca:61:ff:10:cc:f7:e3:19:e7:4a:1e:19:
22:2b:7c:d4:56:45:5c:4b:40:6e:31:45:e7:bb:16:a2:b6:30:
3f:86:37:e3:7b:7e:5b:a2:0f:ad:9c:85:1a:fd:19:fa:f5:44:
37:d5:71:bc:94:dc:99:71:9a:61:e5:dc:62:00:ef:60:47:24:
e1:40:54:2b:ec:11:85:4e:b4:05:14:96:ce:ca:c2:b0:30:33:
e8:e8:c2:2c:bd:53:78:65:0d:b6:9c:48:d6:79:49:62:04:41:
4f:b4:21:9e:b5:6b:fe:2c:24:b6:57:e8:9c:72:c1:e6:3f:84:
b7:73:99:38:83:8a:5a:d9:1c:5c:76:f1:02:6c:7a:8e:00:f8:
e9:1e:c5:7f:c7:8f:ba:f2:22:66:9c:44:b7:cd:16:2c:79:e5:
72:57:6a:95:e5:ef:fe:a4:74:b7:30:ca:8f:d6:24:7f:0b:dd:
22:b9:bf:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:20 2025 by rpki-client