Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa
File: AS200784.roa (raw, json)
Hash identifier: 2SDs/7ygp2DeW1yg6ClhHhzupBXZ2bYhwKN1xHRZqoA=
Subject key identifier: EF:00:F2:E7:B9:39:CC:7F:03:FE:5E:7D:FD:2C:54:7B:F4:BD:90:56
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A7847FB3D9CE4A81EC4D255962EEF341A027EE9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa
Signing time: Thu 13 Feb 2025 16:28:09 +0000
ROA not before: Thu 13 Feb 2025 16:23:09 +0000
ROA not after: Thu 12 Feb 2026 16:28:09 +0000
asID: 200784
IP address blocks: 150.241.212.0/24 maxlen: 24
150.241.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:78:47:fb:3d:9c:e4:a8:1e:c4:d2:55:96:2e:ef:34:1a:02:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 13 16:23:09 2025 GMT
Not After : Feb 12 16:28:09 2026 GMT
Subject: CN=EF00F2E7B939CC7F03FE5E7DFD2C547BF4BD9056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:ab:36:2b:49:f5:3d:2f:df:53:99:43:ce:
d3:c7:11:39:a3:7a:9f:87:72:ae:78:d9:57:3e:05:
55:d7:0f:ce:b0:47:99:d9:8c:4e:03:63:5c:51:9a:
31:3a:ce:e4:75:fb:9d:50:32:be:91:37:31:a1:a9:
78:52:71:17:43:9a:06:b2:1a:3e:e0:a2:a0:cf:0d:
de:05:76:23:48:5d:53:05:71:67:2f:82:2d:e4:e9:
2e:b7:33:d8:77:92:2b:f4:f6:ad:24:9d:5d:2a:90:
1a:23:d0:a7:3d:c0:63:a1:e3:be:a1:f8:27:a8:d2:
3a:3e:5d:c6:97:c2:e4:19:e5:a9:ce:e4:c4:74:11:
62:57:66:93:51:37:5b:f5:22:e5:0d:3a:db:97:ff:
96:86:23:75:e2:47:66:a8:42:e2:c7:02:d1:07:8a:
93:74:43:2e:d9:9b:0b:1d:ae:cd:cc:70:bb:6d:4d:
8b:d7:19:2a:92:94:c4:a4:32:03:06:25:7f:fb:ac:
5a:db:51:43:b5:e2:d5:00:7d:b7:88:02:26:5e:dd:
e4:ed:34:f5:61:29:9e:3e:46:79:c8:fb:dd:94:a3:
d0:30:12:8a:c5:1e:17:44:6d:6a:43:c4:2e:f2:c7:
62:31:b6:2d:4f:1b:bc:37:9e:41:cd:89:2b:c4:a5:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:F2:E7:B9:39:CC:7F:03:FE:5E:7D:FD:2C:54:7B:F4:BD:90:56
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.212.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c0:db:b5:c8:b1:78:00:83:c9:36:2a:3a:b0:90:97:f4:7b:
f8:46:db:a5:f8:ca:71:1a:6e:1c:08:94:ac:9b:95:81:af:da:
20:c7:08:8a:5b:1d:71:61:73:0f:e6:9e:0f:e5:f9:86:26:e4:
c2:96:a9:5e:e6:13:88:87:b9:9d:35:00:dc:d2:0d:8d:c3:14:
36:70:cb:e2:29:7f:9b:90:e4:5c:a1:e6:c1:b4:e9:fa:bb:c2:
a2:e3:28:4e:45:d3:8a:c7:9d:4b:29:e9:49:2d:c5:c7:1f:a1:
80:05:47:06:bc:b6:17:90:f7:df:af:2d:90:00:ab:70:46:f3:
a7:33:2c:ce:ae:50:7b:71:17:56:e7:e9:be:c5:1f:4d:c3:51:
7e:07:78:f2:48:aa:77:11:ba:f5:e4:1e:fa:06:28:00:2a:f6:
7a:9d:42:c1:7d:56:68:80:c6:e2:a5:e6:79:9d:90:1a:b7:95:
f0:3a:2b:4a:e4:e1:66:b6:af:00:ec:79:e3:93:1f:f7:20:c5:
80:ba:59:e1:cc:35:8a:f0:8a:dd:4e:8c:8c:4f:a6:8d:b7:72:
7a:a8:a3:34:ec:93:e7:83:d5:d3:a9:05:63:18:4e:e2:10:a7:
93:04:41:69:ae:c5:ff:e8:92:c1:94:e2:b1:a9:f5:19:a4:d8:
d4:ac:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:08 2025 by rpki-client