Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: w56aH8GluM7UzFU2huaqhcEy1YZWW3bhNtWPAg9Xus8=
Subject key identifier: 4C:80:63:1C:64:21:60:38:75:B9:7D:EA:7E:0E:7A:9A:27:23:B3:54
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0438F346FC5A56E94EF4C20CC23084A7D94469E2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
Signing time: Thu 09 Jan 2025 21:18:20 +0000
ROA not before: Thu 09 Jan 2025 21:13:20 +0000
ROA not after: Thu 08 Jan 2026 21:18:20 +0000
asID: 26042
IP address blocks: 150.241.225.0/24 maxlen: 24
150.241.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:38:f3:46:fc:5a:56:e9:4e:f4:c2:0c:c2:30:84:a7:d9:44:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 9 21:13:20 2025 GMT
Not After : Jan 8 21:18:20 2026 GMT
Subject: CN=4C80631C6421603875B97DEA7E0E7A9A2723B354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:a1:01:62:9d:50:e5:aa:27:b4:0e:a3:e5:
6d:2a:4a:cc:2a:55:cd:ee:87:e7:51:cf:4c:a8:d0:
65:60:13:33:a9:b4:cc:9e:02:ed:01:0b:95:a5:4a:
04:70:cf:0d:52:3a:dd:57:dd:61:78:07:1b:25:70:
e4:fd:35:c1:ce:79:0a:6f:8c:de:f9:8c:25:08:83:
a6:ae:ce:be:44:9e:f8:da:d9:4b:80:42:5a:8e:1d:
20:b3:10:5d:50:40:6f:87:2e:d1:aa:bf:b0:69:4b:
94:00:c6:fe:94:9e:01:30:1d:67:37:b3:b6:f2:a6:
67:5f:7f:c1:d2:23:10:51:f9:0c:8a:58:8c:84:d0:
64:62:75:ba:0f:08:76:12:8b:3a:fe:34:9c:ee:e9:
e8:a1:50:cf:02:b9:61:8e:c2:c0:1b:1f:f2:a4:9d:
58:27:35:2f:a9:4e:bc:b6:a1:ca:87:e9:5e:7a:d9:
04:4d:52:4f:34:d6:8b:bf:5a:dc:49:67:2c:b9:10:
7d:3c:35:08:88:0b:44:bd:15:39:28:04:30:23:40:
af:c9:3a:09:0b:c1:a8:b2:89:60:c9:83:2e:d0:cd:
1e:45:2b:83:72:ac:26:41:d3:ee:9b:8a:b5:76:7e:
10:35:4d:b0:ee:35:27:85:58:a3:5d:42:d2:4f:84:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:63:1C:64:21:60:38:75:B9:7D:EA:7E:0E:7A:9A:27:23:B3:54
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.225.0/24
150.241.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ae:37:77:cd:24:32:72:2a:41:de:94:d3:fa:e2:e0:44:b5:
c9:cd:b4:24:94:87:ba:7e:03:6d:02:15:07:4f:70:31:15:2c:
be:aa:a4:fe:ff:d3:68:b6:de:f5:72:e0:14:2c:68:0a:65:e2:
3e:77:5b:b5:ec:65:e1:d6:7b:f1:f6:8e:4f:fe:5d:89:b2:8a:
2f:7a:90:e3:65:e4:19:2d:b9:c2:a8:e3:a2:f9:bb:eb:63:56:
01:b2:ab:3d:70:46:3d:fe:bf:88:4c:cb:f4:f1:6d:42:f7:69:
85:44:a6:c1:01:4e:9f:ea:b3:53:94:64:ec:c6:ea:c3:7e:92:
ca:f4:83:57:df:50:c9:55:9e:1a:34:ae:53:21:cb:3c:6b:3d:
31:dc:82:bc:1a:8d:14:21:90:c5:a5:41:26:13:6b:21:7a:22:
02:99:f8:77:56:62:f0:a1:01:90:6c:24:0b:2e:c4:e2:06:19:
76:ab:52:9e:be:df:b2:72:97:7b:9c:ed:3f:b5:81:19:92:a0:
a2:5e:fc:26:8b:ba:c1:8a:b7:32:1a:39:cc:60:38:ae:a6:c2:
5b:9a:f8:a0:6e:be:a8:10:cd:08:8d:b0:45:b3:19:45:c0:7c:
12:78:cc:ff:57:fb:21:3a:d4:fa:0b:d5:f1:9f:ca:8b:8e:2b:
6b:f3:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:38 2025 by rpki-client