Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200239.roa
File: AS200239.roa (raw, json)
Hash identifier: PfDPEfNoVRC4C3kVfLgLaSgjsxhC+c7rVBL8HbxrBk0=
Subject key identifier: 3E:4A:3C:87:8B:77:2C:F3:97:88:90:DB:D7:02:A6:2E:8F:5F:18:42
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E8E560DF417AD00D588662233D56E00648BB652
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200239.roa
Signing time: Mon 24 Feb 2025 16:41:53 +0000
ROA not before: Mon 24 Feb 2025 16:36:53 +0000
ROA not after: Mon 23 Feb 2026 16:41:53 +0000
asID: 200239
IP address blocks: 148.135.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8e:56:0d:f4:17:ad:00:d5:88:66:22:33:d5:6e:00:64:8b:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 24 16:36:53 2025 GMT
Not After : Feb 23 16:41:53 2026 GMT
Subject: CN=3E4A3C878B772CF3978890DBD702A62E8F5F1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:71:be:99:d7:7e:a4:9f:e0:fb:2c:21:93:
13:b4:7b:0b:4c:34:3c:44:7a:29:b2:b0:80:49:2c:
17:56:e3:89:2c:b9:1e:a0:d4:c5:81:e6:f8:fa:1f:
69:7f:9a:e5:8b:b6:aa:c4:d0:b9:15:5b:f6:b1:9d:
31:45:5d:83:33:44:91:fe:bd:3c:ee:f8:bd:c8:fc:
90:bb:d3:c9:c5:e9:f6:96:83:7c:0f:7d:a4:f6:cb:
67:5c:58:cb:67:82:c0:74:a4:f5:fd:65:ca:d2:50:
e4:87:bd:a1:63:7b:cc:db:1e:d4:c2:7d:5f:e5:18:
3c:ce:f2:86:48:a0:24:8d:af:97:c0:a9:dd:9d:c9:
f8:f5:51:30:08:c1:23:64:87:93:a5:25:d7:09:f8:
df:55:66:37:d9:8b:01:89:a8:8b:41:91:da:1e:fd:
0a:ed:2d:55:ee:2b:80:6c:e8:da:cc:b2:80:67:7e:
51:dc:c4:75:ee:c8:ca:53:3d:82:e6:7b:e3:70:2d:
f0:22:ab:9c:cc:24:50:a5:0a:e5:d7:bb:05:9d:78:
dd:b1:71:2b:4a:f6:8c:8b:59:78:d1:5f:58:e7:f9:
f2:20:0f:67:ac:26:31:8d:ea:a9:29:d3:00:0f:d6:
70:55:28:6f:ea:c7:ad:1b:dd:10:94:9d:f0:63:34:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:3C:87:8B:77:2C:F3:97:88:90:DB:D7:02:A6:2E:8F:5F:18:42
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.175.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4e:15:d2:0d:98:16:96:81:33:95:d3:73:f0:13:51:a0:20:
82:b3:d0:81:92:59:20:a5:26:93:3d:50:60:e0:b5:3e:62:53:
a7:06:50:24:65:e8:44:55:9e:43:85:ef:b1:a5:aa:1d:7a:34:
db:fe:c3:ad:3f:5c:8a:ee:40:a3:36:f8:d1:63:fe:51:55:d7:
80:8e:95:fa:6d:6e:a3:73:5f:27:21:79:36:43:08:34:fa:c6:
0f:a6:d5:d5:b9:14:38:9d:56:4d:4d:f8:0b:c0:ae:7d:7b:31:
31:02:ff:c6:54:c5:51:ac:92:ac:cc:9e:88:9a:c7:51:e2:82:
47:a3:df:a2:f9:bc:35:5d:36:66:df:fc:de:bf:1a:95:e1:fc:
f3:a8:fa:5c:db:f8:19:39:34:a3:43:a9:e2:62:09:15:1c:4f:
56:95:fe:19:f2:09:d1:f4:5c:18:5a:8e:ac:7e:e4:00:f8:ab:
2b:b2:61:3a:c3:dd:52:82:5c:30:db:84:e0:8b:9e:bb:8f:45:
49:11:a6:b9:98:6e:00:c6:f6:f6:44:e0:df:f6:9b:16:31:42:
22:03:7e:f9:db:48:16:8d:31:f2:92:2f:e4:44:f1:4f:fc:1a:
84:b5:2d:b4:8c:0c:5e:24:cf:fc:e5:7d:46:bf:c2:13:2f:f4:
ef:f1:18:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPo5WDfQXrQDViGYiM9VuAGSLtlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTAyMjQxNjM2NTNaFw0yNjAyMjMxNjQxNTNaMDMxMTAvBgNV
BAMTKDNFNEEzQzg3OEI3NzJDRjM5Nzg4OTBEQkQ3MDJBNjJFOEY1RjE4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvr3G+mdd+pJ/g+ywhkxO0ewtM
NDxEeimysIBJLBdW44ksuR6g1MWB5vj6H2l/muWLtqrE0LkVW/axnTFFXYMzRJH+
vTzu+L3I/JC708nF6faWg3wPfaT2y2dcWMtngsB0pPX9ZcrSUOSHvaFje8zbHtTC
fV/lGDzO8oZIoCSNr5fAqd2dyfj1UTAIwSNkh5OlJdcJ+N9VZjfZiwGJqItBkdoe
/QrtLVXuK4Bs6NrMsoBnflHcxHXuyMpTPYLme+NwLfAiq5zMJFClCuXXuwWdeN2x
cStK9oyLWXjRX1jn+fIgD2esJjGN6qkp0wAP1nBVKG/qx60b3RCUnfBjNGGFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPko8h4t3LPOXiJDb1wKmLo9fGEIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAwMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIev
MA0GCSqGSIb3DQEBCwUAA4IBAQCYThXSDZgWloEzldNz8BNRoCCCs9CBklkgpSaT
PVBg4LU+YlOnBlAkZehEVZ5Dhe+xpaodejTb/sOtP1yK7kCjNvjRY/5RVdeAjpX6
bW6jc18nIXk2Qwg0+sYPptXVuRQ4nVZNTfgLwK59ezExAv/GVMVRrJKszJ6ImsdR
4oJHo9+i+bw1XTZm3/zevxqV4fzzqPpc2/gZOTSjQ6niYgkVHE9Wlf4Z8gnR9FwY
Wo6sfuQA+KsrsmE6w91Sglww24Tgi567j0VJEaa5mG4Axvb2RODf9psWMUIiA375
20gWjTHyki/kRPFP/BqEtS20jAxeJM/85X1Gv8ITL/Tv8RjD
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:29:56 2025 by rpki-client