Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: 0C8rEB1GTBj+uJxQoW49RAG7stIbYNqnSHKCuzw/VNM=
Subject key identifier: E3:28:3E:48:32:96:00:09:B6:CC:5F:C7:3E:D7:96:6F:30:1B:8A:11
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 18CFC965B0988237D427D73E87D0F2C58158503A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
Signing time: Wed 12 Mar 2025 01:44:34 +0000
ROA not before: Wed 12 Mar 2025 01:39:34 +0000
ROA not after: Wed 11 Mar 2026 01:44:34 +0000
asID: 42831
IP address blocks: 150.241.132.0/24 maxlen: 24
150.241.133.0/24 maxlen: 24
150.241.134.0/24 maxlen: 24
150.241.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:cf:c9:65:b0:98:82:37:d4:27:d7:3e:87:d0:f2:c5:81:58:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 12 01:39:34 2025 GMT
Not After : Mar 11 01:44:34 2026 GMT
Subject: CN=E3283E4832960009B6CC5FC73ED7966F301B8A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:9e:8d:a9:c5:f1:25:06:26:71:ab:e1:76:
1d:ee:ee:48:69:9a:15:84:22:83:0b:24:61:77:3c:
01:1a:13:0b:c0:ae:82:3a:82:3f:2c:e7:e1:43:0b:
0d:09:9b:19:a0:47:9e:bf:54:41:84:e3:8e:61:5d:
b3:5b:57:ca:25:03:21:0d:92:55:ce:b8:97:37:6f:
bc:d4:b3:77:fa:14:1f:91:f1:f9:61:27:bb:25:8a:
67:09:2d:ea:3c:9e:ba:d6:a3:17:e8:bc:90:e5:ca:
81:06:a2:93:da:8d:13:6d:08:4b:c7:1f:ae:7b:7b:
99:e9:6b:a3:12:7e:92:f9:f0:cf:c4:66:b0:24:4d:
06:a6:df:f6:ed:8c:32:9e:96:99:d0:d8:d1:52:c3:
1e:75:ad:5a:82:8e:cd:e7:a0:20:5e:33:48:32:6e:
eb:0a:1a:22:cd:3a:32:91:1d:f8:23:9c:98:1e:64:
9f:65:3e:ca:82:57:3d:04:28:96:43:83:3f:04:0b:
96:ef:be:ac:c7:45:be:cc:1e:29:78:28:23:30:46:
ed:a3:24:16:94:1a:84:85:4d:a5:bc:56:81:7d:a8:
7a:c2:e3:71:28:d9:e4:38:ca:73:39:8c:11:73:f8:
99:fc:42:bf:57:f7:4d:4b:2a:41:17:f3:cb:8f:25:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:3E:48:32:96:00:09:B6:CC:5F:C7:3E:D7:96:6F:30:1B:8A:11
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.132.0-150.241.134.255
150.241.144.0/24
Signature Algorithm: sha256WithRSAEncryption
39:10:b3:aa:e1:17:7e:99:f4:7b:a9:54:34:bf:34:36:9e:11:
4d:60:4c:d4:11:70:ac:75:f9:07:9d:90:12:96:7b:af:16:a5:
63:eb:42:a6:de:9a:5e:f6:f4:a0:63:db:b8:e0:56:d3:9f:a4:
37:ce:3a:54:89:27:c6:66:05:13:cd:f3:ab:b9:ff:e4:18:bb:
f0:66:ff:aa:c8:33:ae:45:77:58:60:9b:22:05:5d:1b:cf:ad:
43:d2:f6:67:45:87:3a:5d:55:85:82:19:bf:f8:e0:f3:a3:56:
a7:f5:91:4d:cc:88:8d:c1:8f:46:51:9a:81:e6:5d:c6:91:22:
1f:71:c9:90:54:3a:ac:6e:9c:81:3b:ae:4f:09:9b:28:f0:55:
3d:31:f5:e2:16:04:7a:2e:fa:02:f8:e1:57:af:69:22:71:b1:
d4:37:69:37:29:4b:c6:cf:96:9d:83:fa:91:6f:8e:3c:e3:ba:
35:5d:61:46:df:db:16:19:77:dd:30:6b:75:f9:35:5b:17:4a:
59:e0:12:45:f6:c8:cb:90:c0:65:13:4e:b3:7c:1a:0d:21:70:
db:a5:4c:c4:e5:4b:68:6c:1c:12:02:4c:7b:3e:61:71:1f:ba:
da:fd:32:d8:65:a5:d9:13:67:bd:5a:c2:bd:eb:db:09:4a:8d:
5f:18:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:29 2025 by rpki-client