Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa
File: AS397006.roa (raw, json)
Hash identifier: OzyxDi/zRkCI4gniZPw/qo+neLtrMhdv1010OJGQWTg=
Subject key identifier: EB:01:CD:E5:8A:12:3E:3D:1A:06:A0:9C:4C:AD:A5:12:12:D2:AF:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 067793C19F7F20F9173E48FE46A9C28EA91B0962
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa
Signing time: Wed 19 Feb 2025 23:01:08 +0000
ROA not before: Wed 19 Feb 2025 22:56:08 +0000
ROA not after: Wed 18 Feb 2026 23:01:08 +0000
asID: 397006
IP address blocks: 150.241.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:77:93:c1:9f:7f:20:f9:17:3e:48:fe:46:a9:c2:8e:a9:1b:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 19 22:56:08 2025 GMT
Not After : Feb 18 23:01:08 2026 GMT
Subject: CN=EB01CDE58A123E3D1A06A09C4CADA51212D2AF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:8b:d3:93:4f:c4:53:5a:01:ba:53:6c:6c:
6e:37:de:4b:cc:7f:47:87:3a:6f:38:1f:c6:86:a7:
8f:70:c8:4a:f3:73:63:ac:ac:13:12:fc:33:58:1c:
0e:95:96:fd:a4:60:80:17:26:fb:73:55:3e:18:b5:
e1:a0:d2:1e:56:61:a7:20:a8:c8:cb:9a:bc:5a:e2:
ce:2a:ba:0c:eb:f7:9f:19:59:0e:c7:61:c5:18:96:
d3:d5:81:73:20:75:4b:be:ca:4c:22:ee:b7:6f:bb:
9e:2f:68:94:0e:31:e7:62:d8:5f:1a:69:a2:06:eb:
35:4e:0f:45:21:ef:09:7a:85:0d:4f:40:25:52:48:
31:46:a1:f1:a6:4c:15:12:47:12:8c:0c:b3:0c:87:
98:d6:5e:89:35:86:53:57:03:f8:dc:e2:98:07:e0:
a8:da:b3:4b:14:50:35:3d:e0:dd:91:c1:45:e0:63:
4b:c9:62:11:bd:b0:2f:83:90:ea:ce:20:8b:0d:53:
1c:c6:1c:db:10:94:da:18:d0:5b:fd:c0:ef:20:ba:
59:a2:7b:61:23:89:72:18:2b:1f:71:b3:8f:73:38:
f4:50:f1:4a:4d:e9:57:f3:18:af:c1:07:a4:ee:8a:
09:57:08:e9:2b:56:fb:f8:9e:fc:35:71:0c:68:57:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:CD:E5:8A:12:3E:3D:1A:06:A0:9C:4C:AD:A5:12:12:D2:AF:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f4:89:3f:0c:88:a2:78:ce:60:cf:db:04:05:85:19:00:3c:
9c:71:38:7e:74:43:f4:55:81:0f:58:f6:5c:9d:b0:b8:ec:e4:
89:8d:76:c6:37:d5:e5:60:50:c9:51:75:31:a0:2b:17:87:34:
66:61:30:b1:bd:c1:95:67:27:7d:cf:5f:b7:08:47:ef:b1:bb:
02:6f:39:95:08:b8:99:30:42:2f:23:0e:8a:28:4b:ca:0f:a3:
9a:ad:da:f7:e1:dd:6d:27:39:ca:c0:44:78:c5:0d:44:65:19:
44:9c:fd:5b:b2:4c:24:f6:d5:1e:d9:3c:da:e9:2a:87:9b:82:
aa:55:f0:4d:88:dc:f7:43:cb:d6:55:cb:9c:b1:1d:af:01:fb:
a2:8d:be:09:d0:09:59:e0:99:15:fa:19:6c:ea:a2:d0:65:df:
b0:64:be:fe:54:2d:db:a2:af:0d:ec:ec:1b:ba:75:7e:54:27:
56:ab:3d:63:24:f5:2b:d9:f2:28:be:5d:26:f7:2f:b6:45:ff:
7e:6e:fb:54:f4:dc:8e:68:41:f3:c0:0f:28:bf:d5:a0:ce:dd:
89:af:17:54:80:84:e9:98:70:7e:39:44:21:e2:f3:d5:4a:86:
2b:e6:30:8b:f8:be:d5:89:ce:80:cb:41:42:8d:eb:ba:1c:06:
e2:ec:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:13 2025 by rpki-client