Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: zP0Hqj68iaxnayCNSuGgRZShhKI/qF8Ohq7gMgqzxMI=
Subject key identifier: 88:2D:AD:2C:10:C9:E6:6D:1E:29:98:86:7B:04:DD:48:AB:AB:82:E6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3C7FD31111CB2B98D3C5B7BC0056B82FF209C669
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
Signing time: Mon 03 Mar 2025 03:45:02 +0000
ROA not before: Mon 03 Mar 2025 03:40:02 +0000
ROA not after: Mon 02 Mar 2026 03:45:02 +0000
asID: 393942
IP address blocks: 145.223.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7f:d3:11:11:cb:2b:98:d3:c5:b7:bc:00:56:b8:2f:f2:09:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 3 03:40:02 2025 GMT
Not After : Mar 2 03:45:02 2026 GMT
Subject: CN=882DAD2C10C9E66D1E2998867B04DD48ABAB82E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:21:08:13:0e:57:6c:dc:0e:f8:e2:03:a2:
fc:c6:ef:30:3a:2a:21:1c:50:53:ac:42:c7:d7:0c:
50:50:c6:6f:6a:39:db:da:de:05:27:0b:04:83:6b:
45:12:ca:2e:c3:3c:d7:1e:f7:e9:d1:c8:d2:5c:1e:
64:53:52:0a:98:17:11:bc:9f:32:e1:a6:f0:28:66:
f9:b3:10:4b:1e:7d:c7:6a:19:79:88:24:b0:37:c2:
72:26:8c:05:e6:6c:26:fa:01:d0:6e:ec:53:45:bd:
71:fd:24:69:35:74:87:0c:f8:29:fc:42:18:2e:40:
b1:4d:3b:9a:a1:25:b7:1f:0f:ce:28:78:71:21:0b:
98:fe:68:ea:0f:80:98:0f:04:08:fb:7f:1d:0d:1e:
87:27:cf:67:9a:11:0c:66:2e:ed:7a:12:96:07:e0:
65:5f:7c:6d:5a:5d:82:50:74:bd:81:e3:55:2c:e4:
d7:ac:53:3a:4b:f3:4b:08:92:f2:a7:ef:e1:61:2f:
fb:2f:c7:05:f1:33:92:f1:87:48:a7:85:3c:73:b2:
f1:df:aa:ba:ed:7c:7e:0f:c6:bc:50:85:57:7e:40:
5b:f8:8d:81:0e:90:6c:cb:d9:8b:7f:ef:dd:65:e2:
36:29:42:69:a6:83:58:42:02:3c:4e:94:d5:3b:90:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:AD:2C:10:C9:E6:6D:1E:29:98:86:7B:04:DD:48:AB:AB:82:E6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.67.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:e7:2c:a9:fc:90:05:bc:1d:83:1c:99:fd:6b:99:38:79:
bc:73:df:68:7c:0e:04:29:dc:ba:0f:f7:b5:7d:6b:2f:a1:a7:
7b:7e:ac:44:6d:3e:33:25:3f:cd:de:8c:98:25:8d:72:39:e3:
57:60:1e:2c:ea:e5:17:da:e4:4c:58:91:91:85:13:c3:1d:d8:
9b:19:92:34:f5:84:bc:09:98:43:8d:98:44:ae:fd:8f:de:58:
b5:33:6c:0f:22:4d:01:cc:95:16:c5:bf:bc:7f:3d:3e:6c:8a:
ae:b0:24:52:03:5d:9b:be:e5:ad:c8:83:67:62:3e:67:1b:4c:
a4:76:78:51:f9:14:6a:7d:5e:2e:4c:72:2d:e9:c8:a4:5f:73:
97:a7:47:56:da:c4:5b:09:b7:81:5d:6d:58:c4:08:bc:ca:10:
a9:11:10:fa:80:e2:c7:0f:e4:a5:2a:13:38:4a:60:f8:84:c7:
31:b6:17:0e:de:cb:aa:31:b4:d7:bf:7b:cf:1b:f9:7f:0e:13:
1c:79:3c:3a:f7:a2:16:fe:41:b5:ce:e2:ca:50:ef:ff:7a:b6:
9e:08:16:e2:bd:f5:21:38:82:58:95:bd:a4:7b:a2:9b:7f:ac:
f5:10:f3:be:fa:a2:58:7b:64:6d:a2:fa:8b:97:2c:5b:d6:ba:
59:ef:60:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:11 2025 by rpki-client