Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
File: AS215311.roa (raw, json)
Hash identifier: QIUHSYYl6dRPwc76GTwz/p+U2HzoaEimNDfeBH125W8=
Subject key identifier: 6C:98:C3:A9:C3:DA:4D:9F:32:91:B2:5D:97:A2:4B:63:38:35:F9:D8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F7D4C20A7E436E4B8BB4234F0D94BF9C0DFEC12
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
Signing time: Mon 24 Feb 2025 20:13:30 +0000
ROA not before: Mon 24 Feb 2025 20:08:30 +0000
ROA not after: Mon 23 Feb 2026 20:13:30 +0000
asID: 215311
IP address blocks: 140.150.232.0/22 maxlen: 22
145.223.68.0/22 maxlen: 22
146.103.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7d:4c:20:a7:e4:36:e4:b8:bb:42:34:f0:d9:4b:f9:c0:df:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 24 20:08:30 2025 GMT
Not After : Feb 23 20:13:30 2026 GMT
Subject: CN=6C98C3A9C3DA4D9F3291B25D97A24B633835F9D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:a2:26:e7:ea:4b:5f:29:e5:2b:aa:4f:94:
7a:77:b7:f0:f5:38:98:45:d3:82:9a:c4:ab:1b:5e:
21:91:3c:40:0c:3b:41:1d:07:85:fa:b5:38:c3:ba:
bf:bd:9e:53:43:d2:61:6b:2b:6c:76:bb:c0:21:1c:
bd:56:d4:84:63:41:ad:a1:a3:9c:70:bd:61:0e:d1:
0b:e0:ac:f2:1a:b2:94:81:c7:57:60:25:0e:13:4a:
ba:d1:b8:c9:8d:26:e8:2e:e6:f3:ef:49:90:bc:ca:
10:b0:48:2e:f8:e8:7d:ac:fa:54:33:2f:ac:b4:a4:
20:c7:b7:e5:1d:02:a7:05:3c:7d:3e:f3:7c:e6:3e:
a5:f1:25:af:86:9a:15:3b:8f:16:69:77:f2:14:f8:
b5:ce:77:d9:3d:5a:70:4e:ff:cc:b4:92:b4:22:b1:
60:b2:83:37:bd:ac:c5:5f:b6:66:7f:a7:c8:71:1d:
46:e6:9e:42:61:51:4d:38:b0:6d:94:44:ca:77:49:
c4:2f:5e:33:fc:43:a1:77:71:47:55:c9:4f:23:2c:
2a:e6:dd:78:a6:b7:0d:f4:12:7d:c7:0d:d6:b3:25:
4e:d2:b9:69:2e:a6:ab:65:bf:f4:01:9f:62:b4:09:
22:b8:8e:bf:19:f2:b0:3b:52:9b:07:7f:19:cd:84:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:98:C3:A9:C3:DA:4D:9F:32:91:B2:5D:97:A2:4B:63:38:35:F9:D8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.232.0/22
145.223.68.0/22
146.103.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:52:03:16:20:64:79:79:64:d8:65:8d:26:34:d7:20:c3:05:
99:8c:21:cb:51:82:42:c2:8d:4c:9d:d2:cd:79:93:31:59:5d:
e7:fd:58:77:e0:c1:3d:51:c2:7a:e4:5b:8c:1d:40:ee:cc:01:
7e:14:a7:c6:0b:34:f8:4f:91:3c:e6:c0:58:15:b4:8a:b4:48:
3f:42:88:18:7f:e4:43:91:67:94:b3:4f:b3:57:1c:48:22:61:
ac:67:58:31:8e:e1:56:8f:ca:14:57:13:1b:8e:c5:7e:30:7c:
e0:e7:3b:1f:01:e1:02:c6:eb:4c:3f:13:82:f8:76:39:ff:dc:
c7:cf:aa:50:7a:8c:30:e2:a9:db:dc:22:fb:2b:e0:62:86:7b:
68:7c:60:73:ae:18:42:97:c6:98:40:0c:5d:f2:a9:50:20:c5:
c9:d8:2a:2e:65:f8:8d:1a:53:3e:9e:7a:b1:1a:05:73:d6:c1:
d1:f5:39:f4:27:6f:83:65:08:61:28:36:56:7f:ed:dc:6b:bd:
77:49:80:ea:f1:c9:0a:51:ad:48:1c:2f:7c:d3:10:4f:c5:a1:
a4:97:ec:8a:39:22:42:d3:b7:f0:be:7c:29:09:4a:e3:5a:ee:
1a:19:67:2a:68:bf:42:96:6c:6d:f2:5f:aa:ee:c8:13:17:ef:
60:1b:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:41 2025 by rpki-client