Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
File: AS136501.roa (raw, json)
Hash identifier: vcaCfgyiBtQF0gZjlVQQh7PScxBPkX/1JX5LEXNQhPI=
Subject key identifier: 56:85:D2:39:35:ED:FC:6F:AC:85:9A:FC:BB:33:95:FC:76:EA:1A:3D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7E653141B031DC908CD961025CE612602A461E14
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
Signing time: Sat 22 Feb 2025 08:20:21 +0000
ROA not before: Sat 22 Feb 2025 08:15:21 +0000
ROA not after: Sat 21 Feb 2026 08:20:21 +0000
asID: 136501
IP address blocks: 148.135.154.0/24 maxlen: 24
148.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:65:31:41:b0:31:dc:90:8c:d9:61:02:5c:e6:12:60:2a:46:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 22 08:15:21 2025 GMT
Not After : Feb 21 08:20:21 2026 GMT
Subject: CN=5685D23935EDFC6FAC859AFCBB3395FC76EA1A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:d6:51:54:74:4c:64:82:d1:b0:60:31:ea:
91:7a:8c:dd:4d:5e:94:4b:84:48:95:89:13:17:46:
f0:3d:50:1e:dd:2e:f6:ea:6c:96:03:5e:53:79:8a:
5a:d3:16:7a:da:cd:6e:7c:a9:c5:41:8a:06:7b:65:
e8:36:1b:59:ab:a4:80:10:52:05:f6:6d:dd:51:e3:
fe:23:e5:e5:6e:60:c4:c7:54:29:ed:10:ce:0d:24:
de:3e:9e:05:39:17:69:83:14:53:eb:e9:b2:42:c9:
b0:7c:6e:6c:41:05:7b:9d:fc:8f:9e:63:4b:b8:c1:
30:c1:b9:5b:97:10:96:5e:28:76:82:8f:9e:bd:e5:
e4:18:a5:55:1d:4c:a3:06:f3:bd:20:48:68:e6:18:
c2:71:0b:49:cf:e1:ff:f7:fe:59:64:ac:0e:25:a3:
e9:f2:a8:37:30:a6:8d:0c:5b:76:10:5a:83:2f:0c:
91:dd:47:d3:e9:79:d0:67:b8:4e:a0:62:c1:75:1c:
63:ae:75:c0:f3:76:e7:57:97:d5:ba:9e:4d:13:70:
fc:4d:90:fd:a3:48:09:11:d5:80:de:3a:42:8a:8f:
43:43:ce:59:b1:99:42:14:b9:c0:e6:8d:02:be:eb:
92:cd:e9:5a:89:2a:90:20:37:b5:f1:8e:4b:2a:6a:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:D2:39:35:ED:FC:6F:AC:85:9A:FC:BB:33:95:FC:76:EA:1A:3D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.154.0/24
148.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2b:11:5e:d7:19:26:48:89:13:af:6c:eb:eb:b2:b8:99:24:
27:dc:37:c0:e0:56:11:a5:90:c7:6e:28:54:9c:d5:9c:ee:6e:
d8:84:5b:39:c3:07:33:f7:1a:d6:0d:87:a9:52:e2:82:e8:cd:
cc:96:ca:b1:8a:a9:d0:12:5f:d3:27:8d:0d:64:a7:25:58:06:
cf:6d:4d:98:4c:b6:81:d1:0c:12:2d:71:67:c8:0a:32:b4:b9:
62:f2:fe:e4:85:1d:0a:91:59:f7:e5:95:fe:28:47:84:26:10:
1c:98:2f:48:35:06:08:cb:d8:83:92:a1:f6:e8:93:1d:d9:e6:
92:5c:55:9e:1d:f2:df:ef:23:14:71:9f:a9:9b:58:b8:50:b7:
5c:a9:ac:77:a0:1a:5d:d4:5e:7c:af:04:77:8c:fa:4f:76:e1:
4a:83:d5:be:01:5a:a8:a7:ad:7b:83:22:c8:03:53:ee:65:1c:
fb:19:e8:58:d0:2e:32:30:bd:b8:45:9c:4a:76:5c:75:77:1a:
29:02:e4:69:83:52:0a:26:d3:3c:cb:ba:9d:bf:61:4e:73:21:
ff:df:36:2c:5a:51:a1:a6:30:29:8a:b6:9a:17:37:95:be:b4:
99:35:eb:9a:cc:ea:4a:c0:4a:cf:5b:91:8a:5e:12:f5:6d:46:
ea:ba:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:41 2025 by rpki-client