Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
File: AS213690.roa (raw, json)
Hash identifier: N9ITWvCwP0wfmaZL4y3A1JjLtFEwv38E/8Z687Lvh+U=
Subject key identifier: 48:85:7A:1C:59:3A:5F:F0:4B:27:F8:CB:FD:49:16:5C:4A:10:C6:EB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73F958DF5E25BFF70BCCC3CE87CB6873D5DDE710
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
Signing time: Fri 21 Feb 2025 13:28:23 +0000
ROA not before: Fri 21 Feb 2025 13:23:23 +0000
ROA not after: Fri 20 Feb 2026 13:28:23 +0000
asID: 213690
IP address blocks: 146.103.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f9:58:df:5e:25:bf:f7:0b:cc:c3:ce:87:cb:68:73:d5:dd:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 21 13:23:23 2025 GMT
Not After : Feb 20 13:28:23 2026 GMT
Subject: CN=48857A1C593A5FF04B27F8CBFD49165C4A10C6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:f3:77:55:64:4b:26:2e:f7:b3:90:52:f8:
3b:9b:48:a8:73:ee:72:b8:04:93:5c:c5:8e:29:6d:
f6:8e:96:a7:08:6d:23:82:21:a1:d6:76:a2:de:85:
60:31:48:17:af:7c:73:6c:4c:4f:15:91:43:5b:50:
89:aa:dd:46:b8:64:a5:5d:d2:37:63:bd:dc:44:ed:
2a:1f:89:e9:76:a6:56:cb:51:55:fa:25:c6:18:87:
1f:f9:85:9b:72:a9:f2:d5:9f:54:37:fa:4e:b4:72:
1f:86:76:83:fe:4f:fc:4f:4b:5b:d0:ca:87:8e:39:
9d:b3:e3:56:af:94:c2:6c:c2:74:cd:d6:2a:f7:e2:
1a:95:3d:c4:2b:17:ba:97:8e:1c:a0:85:a5:d3:1d:
17:98:74:35:63:cd:cb:81:4f:64:96:a1:ff:4c:d7:
b8:dd:72:69:e0:22:b5:2b:44:85:5f:1e:0d:84:53:
6d:86:80:e5:b2:b5:e1:c3:c8:4a:e9:98:0e:6a:9d:
17:66:b5:56:5c:b5:73:7a:9d:d0:71:e0:49:fb:82:
8d:11:65:e3:c6:82:cd:ab:f5:69:be:7a:cc:1a:c7:
b6:98:69:a6:ba:c0:31:7d:87:73:4b:07:81:f2:5f:
0d:ff:b7:fc:40:8b:7c:53:d0:35:02:64:b4:c2:bc:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:7A:1C:59:3A:5F:F0:4B:27:F8:CB:FD:49:16:5C:4A:10:C6:EB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a1:d0:2a:24:3c:4a:eb:5b:5c:c4:59:66:76:f5:eb:e1:a0:
64:a1:3f:08:cf:6f:59:dc:24:64:0e:49:a0:de:56:0a:a5:f4:
e2:a6:7f:b6:f9:4d:8b:bc:e9:57:7c:2b:57:20:cf:0d:bf:49:
07:1c:9f:54:37:0b:d9:77:43:01:bb:28:6a:3c:be:0d:98:73:
52:e2:22:e7:50:bb:84:b8:de:1d:d5:1a:cb:26:87:57:72:17:
51:6a:d6:c6:99:ba:8e:de:92:1c:b8:e6:c6:49:29:d6:c6:4e:
ec:48:8e:93:70:a3:47:da:a2:5a:df:aa:e2:8e:35:c1:55:4f:
5e:d3:cf:e8:ac:8e:b0:47:e4:89:98:38:de:4e:ca:a1:d1:9f:
78:e9:16:35:df:f7:ef:b6:59:eb:b7:99:c3:d8:d3:0a:ba:ea:
04:3f:0b:bf:68:54:dd:de:cb:b0:ff:ac:e6:1d:f1:ab:9f:96:
6e:6c:db:ee:8d:79:9a:81:2b:0e:0c:92:df:a2:41:62:c8:7e:
9d:e5:23:71:37:f5:58:b9:6d:b1:57:f6:96:f7:f5:60:d1:2f:
b5:d2:5d:ce:be:b1:9a:f2:47:3c:9b:27:8a:89:2d:90:02:93:
bb:ab:34:52:8b:f3:45:f8:45:92:01:8a:26:9a:b0:c7:56:f6:
1a:d9:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:09 2025 by rpki-client