Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
File: AS47447.roa (raw, json)
Hash identifier: bxeFv+vWd7BjwfP97Fg9AjOhrS6wUTiDVlrFH9Y/fZE=
Subject key identifier: C8:71:0B:35:B7:5D:EB:91:7B:08:1A:BB:40:E8:46:E5:4A:58:BB:8F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0BB7C0F5F8CC69BF0F7C84387D23E8D45AF6A742
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
Signing time: Mon 03 Mar 2025 12:18:27 +0000
ROA not before: Mon 03 Mar 2025 12:13:27 +0000
ROA not after: Mon 02 Mar 2026 12:18:27 +0000
asID: 47447
IP address blocks: 148.135.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b7:c0:f5:f8:cc:69:bf:0f:7c:84:38:7d:23:e8:d4:5a:f6:a7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 3 12:13:27 2025 GMT
Not After : Mar 2 12:18:27 2026 GMT
Subject: CN=C8710B35B75DEB917B081ABB40E846E54A58BB8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:12:b1:4c:cf:46:88:46:07:3e:f4:11:f3:
b2:ec:80:fb:fb:ae:19:a8:6d:ba:18:64:b7:c6:ce:
1b:7b:f5:9c:29:ee:8a:db:1f:66:fd:55:2c:ca:cd:
67:a9:d5:aa:b9:cf:13:eb:84:5f:69:58:60:d8:d0:
dc:4d:af:88:0c:f8:fc:6a:ac:d4:f7:aa:55:23:4a:
e8:98:48:4b:b9:90:8b:96:4e:a4:41:af:ba:9a:16:
d3:0d:28:80:0e:7f:b1:7d:c5:c8:fe:34:21:e0:3c:
18:e8:13:3c:00:cb:11:d1:18:ba:b3:9a:72:45:95:
a0:d7:8b:c0:18:40:0a:53:8c:1b:2b:37:0d:81:de:
c3:e3:27:e2:ae:55:9a:be:a4:aa:be:e2:03:61:c3:
c8:90:28:04:15:a6:66:9f:59:6b:68:ab:21:76:83:
b3:f3:be:36:7a:96:b1:f8:df:4f:8d:ea:13:a4:c1:
1a:58:33:39:2f:ad:6c:89:60:00:1b:13:89:44:55:
09:7a:a6:34:c7:ae:fc:f9:ee:9e:4d:1b:b3:df:b5:
5a:d3:cd:79:84:17:39:f3:27:02:b9:fd:ba:39:14:
b1:a8:cd:eb:d4:fc:d2:86:d2:ca:9c:c4:9c:a9:dc:
99:35:40:e0:af:3f:25:1e:32:d1:78:fc:2f:72:29:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:0B:35:B7:5D:EB:91:7B:08:1A:BB:40:E8:46:E5:4A:58:BB:8F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:62:2c:3e:21:41:c1:da:94:d7:e3:ca:77:f6:90:ff:6e:6f:
76:2f:66:1a:43:f1:da:36:2c:81:6f:ac:ad:5f:0d:3d:84:b1:
51:e5:76:1f:c2:f0:cc:4c:57:32:69:83:3e:c6:aa:9b:cc:5c:
69:99:a7:72:a2:38:e8:04:4a:52:01:4d:18:c0:bb:e0:db:c1:
b5:5c:ba:a6:3d:1e:a0:7b:67:04:d3:ec:0a:7d:1b:a3:5e:97:
23:50:56:71:7b:e9:f3:23:e1:47:27:29:87:c1:4b:15:6b:be:
22:7c:b0:00:c8:00:5c:ae:14:c1:5c:2b:29:c0:72:52:ac:8c:
6e:b9:fc:f8:d1:62:e7:ae:04:c8:87:d9:5f:0d:bb:c1:3e:35:
c4:aa:56:63:f2:6a:3e:81:59:a8:dc:61:cd:50:7b:57:e8:a8:
9b:31:ac:35:dd:1c:90:30:8b:8b:4a:f7:21:a0:d8:9f:24:e7:
8d:89:37:14:95:53:99:7b:fa:74:38:10:17:46:ce:16:c9:74:
aa:1a:63:92:8a:58:56:36:a9:17:cd:13:86:1f:1d:25:93:65:
97:27:77:01:3e:2e:8f:e8:14:1e:77:45:12:eb:b9:e1:2d:d7:
9c:a9:52:c4:be:43:2d:fd:1c:0f:33:2a:ac:e9:d5:d5:89:80:
4f:29:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:20 2025 by rpki-client