Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: IrtSxredmgxK34MCAvMabT3purbJHSMm1DDh2tXRjb8=
Subject key identifier: 90:FB:30:A7:22:3B:02:96:56:CA:3C:A3:3A:74:B1:9A:F6:BF:72:61
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1CEF262C75613F89325F47EAB9EBA38025E228FC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS23470.roa
Signing time: Tue 21 Jan 2025 10:00:03 +0000
ROA not before: Tue 21 Jan 2025 09:55:03 +0000
ROA not after: Tue 20 Jan 2026 10:00:03 +0000
asID: 23470
IP address blocks: 146.103.11.0/24 maxlen: 24
150.241.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ef:26:2c:75:61:3f:89:32:5f:47:ea:b9:eb:a3:80:25:e2:28:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 21 09:55:03 2025 GMT
Not After : Jan 20 10:00:03 2026 GMT
Subject: CN=90FB30A7223B029656CA3CA33A74B19AF6BF7261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:5f:29:c8:33:f1:b6:b5:8e:b9:81:a2:1d:
93:ed:ce:7c:0d:e5:52:50:05:8d:79:67:4c:25:fe:
e6:6a:40:e6:29:db:11:1e:53:1d:d7:34:27:d2:b0:
a2:49:a9:c8:36:99:9e:23:f2:91:dc:86:af:f1:87:
a7:fd:75:09:ea:27:2c:e2:35:7b:22:79:54:06:d2:
77:53:93:b8:4f:50:c3:04:7e:8b:46:ab:bb:2d:f5:
c2:5d:28:b8:51:2f:e9:12:39:1a:a9:b2:08:a4:10:
e8:f7:37:0f:86:06:e0:de:b3:73:09:ee:6a:c8:15:
bd:b1:a8:df:20:cc:1c:90:b4:cd:a1:fa:b2:f7:18:
ac:d1:f1:39:67:79:5c:af:2e:5e:c6:17:e6:6c:6e:
88:6e:2c:bd:e3:79:fb:e6:58:43:87:f2:97:b3:dc:
5a:20:39:21:83:be:a8:49:ae:36:0d:e2:5b:10:3c:
73:ea:fd:2d:0b:78:4d:d8:ac:e0:d6:ac:66:47:9e:
b2:bc:90:eb:a5:e2:f3:5b:01:01:dc:9f:12:09:2e:
7e:23:74:0a:ea:2b:64:46:c8:03:a2:9f:05:68:ff:
89:d3:9c:be:3a:b7:ab:34:09:33:c9:d7:3e:9c:90:
11:85:a3:e6:00:99:2f:17:b8:9e:77:bb:fe:72:bc:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:30:A7:22:3B:02:96:56:CA:3C:A3:3A:74:B1:9A:F6:BF:72:61
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.11.0/24
150.241.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a5:07:99:47:72:b1:59:cd:c9:5a:69:94:cc:22:a2:ae:ad:
89:0d:93:97:c7:da:25:52:fb:5a:f0:ba:e8:e5:f4:a4:65:9c:
81:ae:e2:96:68:14:02:33:55:40:66:ce:ce:5b:27:00:b0:8f:
2a:7f:7b:74:0f:9d:8c:e8:ce:f2:b2:30:2b:fe:fa:39:93:e9:
68:18:42:ee:4e:a8:93:4b:1e:68:f6:95:9f:7e:2b:7d:f4:c8:
28:9f:80:fc:96:70:27:25:37:78:c7:62:cb:22:8f:6f:1b:40:
0d:84:d2:5e:e8:ee:a5:c7:cb:c0:7c:08:d2:a3:57:1f:ad:7f:
80:bd:c9:ce:f7:8c:a6:b5:c6:04:a3:6e:57:22:8d:b6:04:b7:
5f:fc:c4:1f:00:cf:10:c7:a8:51:22:9e:45:23:0c:7b:b0:9a:
ac:dd:2f:59:1e:b4:57:6c:4a:ce:87:18:ac:dc:e6:46:fd:75:
3c:c9:83:79:cd:3f:87:cc:b1:a5:35:24:7f:f1:d7:24:c1:c2:
f3:5c:75:ec:55:b2:49:e5:32:59:36:64:c2:9d:8f:53:9f:f9:
49:68:79:81:5e:d1:16:5a:ac:9b:2c:a3:56:d0:97:2b:ac:32:
3b:c3:03:2b:75:c0:9c:a8:48:25:46:fd:76:c8:a7:5f:7f:13:
79:0e:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:35 2025 by rpki-client