Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134926.roa
File: AS134926.roa (raw, json)
Hash identifier: U/wmtDIlq9WDWT7oa6yocb6VGS88dHIS/XuSpMAw3ys=
Subject key identifier: BD:E9:9B:18:43:1D:E0:7D:A6:94:F0:A1:9A:7C:9F:C2:48:3A:6D:A5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7DAB06F4978FA4A3EA8390A812B94EFAB00AE39F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134926.roa
Signing time: Fri 07 Feb 2025 19:23:39 +0000
ROA not before: Fri 07 Feb 2025 19:18:39 +0000
ROA not after: Fri 06 Feb 2026 19:23:39 +0000
asID: 134926
IP address blocks: 150.241.244.0/24 maxlen: 24
150.241.245.0/24 maxlen: 24
150.241.246.0/24 maxlen: 24
150.241.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:06:f4:97:8f:a4:a3:ea:83:90:a8:12:b9:4e:fa:b0:0a:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 19:18:39 2025 GMT
Not After : Feb 6 19:23:39 2026 GMT
Subject: CN=BDE99B18431DE07DA694F0A19A7C9FC2483A6DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:7b:c4:cf:2b:9c:24:2b:5d:57:59:1a:74:
f6:d5:c4:2f:24:31:58:d7:3a:23:d2:bc:ad:b4:c0:
76:bd:e4:be:0b:9d:a1:4b:cf:e7:be:e7:01:af:a5:
dd:c1:eb:6f:d3:d5:72:c0:2a:6c:bd:4a:b6:57:ea:
87:54:f3:c2:f1:4f:0f:aa:55:59:00:66:64:db:42:
19:dc:0c:36:0a:c4:bf:12:fc:29:e3:be:82:0a:ea:
4b:2e:d3:4e:5e:52:01:de:47:8b:65:5d:02:27:98:
8f:32:c4:d9:91:06:a3:1c:b6:00:40:e5:b2:2e:9b:
3a:3c:fe:da:2a:ab:fc:2a:7c:8c:5a:a9:e6:d1:0a:
b8:1e:30:9b:9e:2e:e3:3d:f5:85:4c:33:ff:72:ed:
83:1d:0c:38:e9:2e:91:25:64:dc:68:f2:ba:c4:c3:
98:d2:80:e6:52:51:76:21:b7:fd:66:da:b8:e4:40:
17:3a:76:5c:47:37:a2:b4:4e:90:b0:ae:73:e2:46:
2a:fa:37:b9:9d:bf:ac:8f:c6:35:cd:65:17:d2:e9:
0f:7e:70:18:5b:fa:af:02:63:c1:04:f8:23:42:29:
c6:64:0b:17:bd:56:d5:a0:0b:ce:72:3e:d9:3e:24:
8d:45:64:3b:f8:67:08:05:bc:dc:5a:42:3e:82:c2:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:9B:18:43:1D:E0:7D:A6:94:F0:A1:9A:7C:9F:C2:48:3A:6D:A5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS134926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:bf:d4:6d:10:cc:ef:41:ab:17:ba:0e:0d:9b:d0:22:43:80:
e8:83:3e:7d:26:8c:96:17:7a:60:36:70:42:b3:32:9e:55:3e:
44:5e:4d:83:27:72:45:09:51:4b:d7:76:9e:a3:fb:02:69:32:
e8:87:91:81:7a:c7:3f:6b:d7:3c:ee:33:31:7d:0b:bf:22:fa:
e0:2b:53:c9:3a:20:a3:fb:8f:bc:8b:68:45:c5:55:c1:75:9d:
f5:61:57:54:00:bc:19:fd:e3:51:7c:4d:03:3d:6f:58:59:dd:
6b:51:00:12:ab:39:f8:41:a8:1f:fe:71:f6:93:18:0a:db:b4:
6a:12:80:15:29:73:a7:d2:6f:92:d7:25:f5:3a:2b:69:bb:d2:
34:10:9e:87:d5:90:eb:82:a4:43:b8:e8:80:6e:b6:cf:fc:ba:
1e:89:e0:ce:70:47:ff:32:81:04:0b:03:d7:eb:be:91:ea:f8:
53:f8:50:a9:80:79:ab:cf:0b:45:a2:1f:6a:db:b3:1a:9f:50:
15:6b:f7:47:c7:7d:87:a0:93:ce:eb:58:79:6a:f6:34:52:85:
69:64:c5:42:9d:3e:2d:de:e9:73:27:66:90:fe:f9:98:86:cf:
f3:48:7c:7e:57:04:3b:4d:7d:b2:dc:3f:86:62:e9:38:94:e7:
62:7a:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:01 2025 by rpki-client