Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7979.roa
File: AS7979.roa (raw, json)
Hash identifier: 44vuwIG9JbvBuy6KWqdKMUbsbT81m5wEnmVSoapJ3Fo=
Subject key identifier: 5F:D7:6E:76:6F:9C:B9:14:1F:A2:68:88:BD:5D:0E:A6:2F:B4:75:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1F7AA95CF9CA502C6E345B4976D76A5290EC6FB6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7979.roa
Signing time: Tue 17 Dec 2024 15:25:30 +0000
ROA not before: Tue 17 Dec 2024 15:20:30 +0000
ROA not after: Tue 16 Dec 2025 15:25:30 +0000
asID: 7979
IP address blocks: 148.135.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7a:a9:5c:f9:ca:50:2c:6e:34:5b:49:76:d7:6a:52:90:ec:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 17 15:20:30 2024 GMT
Not After : Dec 16 15:25:30 2025 GMT
Subject: CN=5FD76E766F9CB9141FA26888BD5D0EA62FB47577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:cc:45:46:9e:bf:0b:8a:a5:1b:30:41:b8:
71:1a:1e:f5:23:d5:ab:09:09:4c:8d:c0:36:69:3b:
aa:43:a4:52:74:f1:fc:06:62:3a:a4:51:bf:79:d7:
a9:d9:e1:16:73:46:60:cc:f2:f3:01:ee:9d:6a:e8:
ac:02:61:91:5d:56:4d:d3:de:76:d2:2f:2d:46:fe:
7c:01:69:df:d9:8f:e0:d0:e3:b7:07:65:4c:dc:b6:
89:38:b6:cb:b3:88:f2:62:30:03:3e:3c:68:19:ae:
c1:d0:02:1e:5a:76:23:07:7d:bd:a0:72:0b:69:a9:
18:b3:cd:fa:a7:4f:23:39:f1:25:b7:84:d7:1b:c2:
27:ad:82:8b:35:1b:c8:af:8f:c7:d3:1a:60:1d:20:
6a:de:77:cb:91:98:18:01:3a:87:87:c6:1e:92:f4:
87:95:2e:21:57:9a:d6:88:63:f7:85:93:4b:d5:c9:
e6:32:92:e5:63:6e:85:16:38:d9:71:3f:7f:de:9d:
e5:b5:42:36:32:9e:f8:bd:0c:9d:7b:08:81:73:76:
3f:ae:4d:ff:b0:67:08:31:f9:25:52:9e:70:24:a8:
d9:5a:76:67:ef:1d:c6:e4:79:c1:19:65:9a:51:2b:
04:59:9b:70:ad:c6:3a:ae:c9:f4:e9:32:9d:5a:fc:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:6E:76:6F:9C:B9:14:1F:A2:68:88:BD:5D:0E:A6:2F:B4:75:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:36:66:51:15:b5:ef:42:37:b8:ab:be:09:90:46:18:be:3f:
9e:5c:bb:ef:47:5c:d1:ec:cd:08:0d:f2:97:87:0e:e3:8d:91:
51:21:e3:4d:94:98:91:e8:c8:00:62:ec:dc:5d:6e:dd:cc:5f:
11:2d:09:cd:23:5f:24:0f:f3:85:e9:f0:6e:89:2e:39:62:8e:
a9:5d:14:54:27:8f:94:fc:92:27:4c:b2:39:da:96:47:9e:50:
d2:aa:7d:60:0b:0c:08:a9:a4:78:bb:cd:3a:48:60:8e:12:bf:
d6:ab:aa:7a:8c:c5:86:b4:ac:ea:a1:71:25:8c:6c:07:5e:03:
b8:71:f4:db:c5:49:81:31:47:6c:dc:65:2f:72:1a:06:27:0e:
4f:16:05:4b:fa:6d:02:fa:bb:d2:f8:ba:bd:d4:2b:d2:24:40:
0d:72:84:8b:9f:47:05:cd:31:dd:08:9c:4b:c1:72:e1:cc:46:
15:9f:de:2d:18:c6:4f:74:bb:3e:35:45:5a:f4:be:07:b4:60:
a2:1a:69:13:e0:77:fc:f8:58:ef:ad:2c:eb:6e:2f:1b:df:e7:
a9:ea:61:8d:a5:1c:dd:d8:c6:4b:60:d9:08:36:7a:87:b3:7c:
19:6a:76:86:98:6d:75:f9:4a:61:6f:fd:66:91:12:4f:f1:0d:
91:3e:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:17 2025 by rpki-client