Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12025.roa
File: AS12025.roa (raw, json)
Hash identifier: UwclIHl3kiToNUN7egMdakwfmMLXSybrjn1m0eRqNkY=
Subject key identifier: D9:DF:24:D0:F9:F2:F9:4E:50:56:54:A4:2F:34:C6:DD:C6:3E:50:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 358AFE6850CD2680E2735C838A3EB19AFB27C660
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12025.roa
Signing time: Mon 10 Mar 2025 17:22:42 +0000
ROA not before: Mon 10 Mar 2025 17:17:42 +0000
ROA not after: Mon 09 Mar 2026 17:22:42 +0000
asID: 12025
IP address blocks: 82.27.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8a:fe:68:50:cd:26:80:e2:73:5c:83:8a:3e:b1:9a:fb:27:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 10 17:17:42 2025 GMT
Not After : Mar 9 17:22:42 2026 GMT
Subject: CN=D9DF24D0F9F2F94E505654A42F34C6DDC63E50AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:6e:79:af:e4:09:a7:cc:f4:18:52:8e:16:
85:d1:94:86:e4:08:1d:8e:7e:9f:f6:1f:60:5c:e6:
2e:14:38:7a:4e:fb:af:3a:43:ff:4d:96:33:dd:94:
4c:f2:67:f9:da:38:79:03:c5:b4:96:6c:0b:66:49:
08:c7:8b:25:af:e8:27:82:1e:d8:05:9c:b0:3c:bc:
4f:c5:e9:14:8f:68:56:34:69:20:65:8a:4d:7d:fd:
bb:c2:a6:ec:78:98:e9:64:f9:2a:d3:fd:12:98:91:
7d:fa:53:94:1d:18:7c:c5:43:2d:c1:b4:dd:c6:29:
1a:30:32:e7:64:a3:85:5f:f7:b0:2f:65:ab:6f:54:
a4:a9:a3:0a:c9:9f:67:be:33:d0:9c:ce:d9:b9:35:
a9:57:58:0d:cd:79:e9:89:c4:ed:8c:c7:3a:5e:f0:
c5:aa:26:fb:81:4a:db:2a:81:79:9d:40:b6:36:0f:
d4:9b:01:0b:4c:a5:10:06:2c:9c:13:b7:7e:84:01:
54:c2:e4:ec:48:82:73:8b:02:25:5e:37:91:15:a6:
a4:c0:cb:1d:13:5c:2b:0f:a1:62:26:c8:72:8b:98:
db:b9:ac:f7:d9:12:bc:47:e8:ff:57:f5:34:8b:73:
7c:5a:75:bc:b7:58:da:10:0a:e3:b5:db:ed:03:1a:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:24:D0:F9:F2:F9:4E:50:56:54:A4:2F:34:C6:DD:C6:3E:50:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.90.0/23
Signature Algorithm: sha256WithRSAEncryption
89:c4:a6:66:b1:17:49:a6:24:91:52:40:5b:c4:6c:06:7d:ed:
e5:7d:2f:bf:4f:bf:31:29:88:5b:9c:d1:b4:42:80:6a:06:cb:
ac:32:fa:9b:1d:24:c1:44:7a:7c:53:c1:7c:8d:08:7c:2e:2f:
a9:be:95:61:a3:20:73:89:58:29:8b:62:40:f0:67:46:ed:e5:
cf:16:50:e3:ee:20:c4:6a:ef:8b:7c:3c:99:b4:25:06:21:25:
f7:7a:a6:85:12:29:50:51:63:e8:6d:60:43:91:dd:37:f2:9a:
4e:e9:91:52:e4:6c:7e:44:37:43:b3:c2:cc:e4:e4:c9:67:dd:
ab:f3:84:22:2c:a0:0a:b5:62:ce:67:bb:f2:c6:20:d0:a0:67:
86:35:86:2a:bd:73:bf:ad:22:39:13:04:4e:5e:fa:77:94:34:
2d:2f:04:0a:a9:c8:29:1e:b5:89:18:c8:ee:dc:6a:5a:79:24:
93:27:2e:65:d0:ab:52:6c:c7:f5:09:51:9a:c1:eb:85:b9:7a:
26:b4:42:81:f1:6b:09:e8:53:41:9b:45:59:3a:2d:e4:d3:7f:
4f:bd:58:dc:76:07:fb:e4:2e:e7:db:58:ed:40:d9:da:5c:3b:
bd:4a:b9:ba:6c:8f:cf:13:1a:d4:ff:d6:49:ec:5f:ba:81:00:
6e:90:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:24:39 2025 by rpki-client