Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: dWrj1JfWvL/SbyAJvVBTxFryZozEvUTjHQ1+vjUik2Q=
Subject key identifier: F4:C5:47:12:83:73:EE:A5:5E:F6:ED:A2:86:B0:DD:12:20:A0:2F:09
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 494FEEF18890C892FB638515472CFDA0C01E4C93
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
Signing time: Wed 19 Mar 2025 21:58:29 +0000
ROA not before: Wed 19 Mar 2025 21:53:29 +0000
ROA not after: Wed 18 Mar 2026 21:58:29 +0000
asID: 42689
IP address blocks: 82.24.188.0/24 maxlen: 24
82.25.137.0/24 maxlen: 24
82.25.141.0/24 maxlen: 24
82.25.144.0/24 maxlen: 24
82.25.184.0/24 maxlen: 24
82.27.9.0/24 maxlen: 24
82.27.99.0/24 maxlen: 24
82.27.104.0/24 maxlen: 24
82.27.120.0/24 maxlen: 24
82.27.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4f:ee:f1:88:90:c8:92:fb:63:85:15:47:2c:fd:a0:c0:1e:4c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 19 21:53:29 2025 GMT
Not After : Mar 18 21:58:29 2026 GMT
Subject: CN=F4C547128373EEA55EF6EDA286B0DD1220A02F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:07:a9:ce:2d:9f:8d:c5:b1:33:6d:a4:2f:21:
b4:ef:24:8d:51:7f:01:65:ef:2f:5b:3a:ef:b1:e8:
da:1a:b1:60:6d:10:a9:bb:c8:68:64:92:85:51:f7:
4d:89:9d:31:da:9e:ed:96:0f:4b:ed:5e:ea:f0:f0:
84:4e:45:d5:30:da:8e:72:8e:fe:64:0d:a9:d0:51:
9d:e8:fb:e7:e1:ad:f4:17:28:ae:10:80:c1:43:5e:
87:40:53:0a:29:12:13:cd:bd:86:93:af:e1:62:f3:
14:76:c1:d1:ca:4d:3d:19:82:4d:c4:8b:dc:70:bb:
11:58:5b:46:fe:c3:0a:ff:1d:81:7a:27:ca:47:61:
6b:e7:b8:50:d2:de:df:fd:ab:d3:98:e0:97:55:9a:
9d:f8:0d:d9:ca:60:22:e3:b2:a9:dd:a1:56:61:3f:
33:48:a4:3e:97:3f:eb:0f:fb:b7:df:95:f4:94:c1:
03:52:89:cc:bb:da:ee:24:8f:ac:4e:64:ee:ac:c7:
b9:15:02:93:47:64:a2:b4:a4:d8:c5:f3:a4:33:fa:
f8:58:02:1b:73:3d:92:a6:5b:ab:b3:b3:09:bc:4d:
f0:22:10:3a:36:93:fc:66:0a:e3:91:40:33:74:b6:
24:eb:e2:1b:f8:c9:eb:5c:b9:a7:50:e5:e8:ec:22:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:47:12:83:73:EE:A5:5E:F6:ED:A2:86:B0:DD:12:20:A0:2F:09
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.188.0/24
82.25.137.0/24
82.25.141.0/24
82.25.144.0/24
82.25.184.0/24
82.27.9.0/24
82.27.99.0/24
82.27.104.0/24
82.27.120.0/24
82.27.206.0/24
Signature Algorithm: sha256WithRSAEncryption
63:dc:73:10:f3:f1:22:6b:a2:e5:46:37:86:47:39:0b:d3:fe:
c1:33:45:00:21:e3:08:fd:17:ee:92:7e:d1:78:f7:cb:08:76:
11:72:7e:e6:07:44:5f:3a:a0:07:f9:98:70:43:07:bb:c8:c9:
3c:af:bb:73:2e:a3:e6:12:15:af:82:89:59:1b:ab:a2:b9:80:
b0:41:cf:2d:2b:3b:b0:af:b6:2a:6d:40:0f:2f:5c:a8:d7:6f:
47:a7:39:e1:e3:78:fc:5b:f5:75:9a:86:0b:ed:c4:17:72:25:
2d:f1:04:65:b6:25:c1:31:36:4a:5d:5a:a8:6e:bd:76:5e:3a:
40:de:ce:e2:ed:40:c4:3d:02:25:bb:c9:c6:6b:a9:97:0d:a3:
e7:ab:df:75:78:40:7e:05:95:33:5f:6a:8b:41:03:2d:dc:e5:
ec:af:8e:f8:04:f8:cf:e8:b7:31:a9:58:2a:70:28:7b:2b:47:
e8:5b:71:3d:a2:a4:e6:7e:4c:ff:9a:57:8f:ef:41:ba:f7:1a:
65:c0:b8:3d:75:b7:50:d6:92:ad:ab:c0:39:40:b3:d6:54:2b:
74:63:50:84:2a:5b:42:d5:89:06:2f:ca:90:8a:2a:65:08:cc:
4a:3a:23:c5:18:fc:2d:5c:0b:f0:51:43:a5:65:fa:dc:7e:a3:
1a:a9:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:51:09 2025 by rpki-client