Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
File: AS199856.roa (raw, json)
Hash identifier: toS8hY9oUHpdEit0fdHaZ1ts4RHMrVeEONzzQtUYVbs=
Subject key identifier: 9B:11:84:5E:59:DF:28:1D:81:5B:0E:28:BC:30:F4:58:11:81:A2:4F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 69A83E5B9216B507E0BF3535A91AC6F8964C329E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
Signing time: Fri 03 Jan 2025 13:53:51 +0000
ROA not before: Fri 03 Jan 2025 13:48:51 +0000
ROA not after: Fri 02 Jan 2026 13:53:51 +0000
asID: 199856
IP address blocks: 176.105.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a8:3e:5b:92:16:b5:07:e0:bf:35:35:a9:1a:c6:f8:96:4c:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 3 13:48:51 2025 GMT
Not After : Jan 2 13:53:51 2026 GMT
Subject: CN=9B11845E59DF281D815B0E28BC30F4581181A24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:2e:43:d3:0c:3f:41:82:ed:d8:1e:86:c9:
de:05:c8:06:ea:16:37:0f:b8:92:c5:68:95:25:41:
1c:0f:91:65:c0:6e:95:41:04:c4:33:46:1b:94:70:
ca:cd:72:1b:be:28:ba:6e:c1:91:e5:0d:a6:49:03:
5d:f2:02:a6:71:25:da:2f:86:8c:40:c1:2f:df:14:
fd:1b:82:8b:13:95:40:22:b1:d5:25:7b:26:27:ee:
0a:88:42:a8:fb:76:ed:26:0e:b3:d5:41:5e:18:9f:
20:af:1d:f5:27:6f:23:8f:7b:b3:92:6a:89:eb:4e:
ba:38:28:77:07:d8:9a:ed:43:86:2b:cb:ae:70:ee:
25:43:a7:3f:18:46:18:1d:07:f6:d5:e0:59:1c:1a:
b6:a4:2e:30:ed:39:9a:2d:73:28:ff:15:89:aa:55:
af:27:1d:e2:41:25:1b:17:7c:7b:8e:d6:7b:17:cf:
18:6c:99:56:e4:3b:ee:96:af:62:32:64:2f:c3:e8:
3f:24:58:f1:09:6e:75:36:08:33:fc:34:4d:66:af:
2b:d6:54:03:ba:f0:5d:f5:66:95:c5:5c:36:60:58:
a1:e1:15:e2:bc:20:7e:0f:15:2a:e2:a8:6e:ac:16:
e8:d3:c0:d8:37:7e:72:e4:e5:a7:3d:ef:fa:95:a7:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:84:5E:59:DF:28:1D:81:5B:0E:28:BC:30:F4:58:11:81:A2:4F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f4:b8:0d:58:25:66:26:21:37:17:83:e6:a2:3d:0b:30:e5:
95:c1:20:67:0d:86:9a:69:92:63:df:1a:9a:2e:0c:80:c7:ee:
56:5f:43:de:19:56:90:17:a2:99:cf:c2:8f:13:a2:de:70:54:
e0:d1:3a:6e:b9:71:b2:f3:81:e2:cc:69:29:01:8c:6b:58:e1:
79:ed:df:7b:11:cc:cb:86:ce:45:61:d2:66:fa:d0:35:98:af:
5b:63:93:a4:b5:e1:77:18:ec:5c:a0:58:ea:2f:52:ee:09:49:
13:19:7e:38:13:41:af:31:1a:f5:11:06:51:c9:97:dd:60:a8:
02:1c:fb:79:66:0f:72:45:a1:42:e5:31:9c:ff:c3:08:86:b6:
36:ef:78:3a:d0:1e:38:92:b5:27:49:4f:76:85:b5:c8:07:bd:
d7:f2:66:dc:59:bd:d3:2f:b2:96:58:61:00:5b:73:a9:d3:a6:
47:db:9f:3d:f6:04:91:01:6c:6a:2d:c0:6e:c1:17:87:a5:fc:
d9:f5:ba:dd:20:cd:11:82:6b:58:3e:ce:21:7d:cf:43:c9:23:
af:5d:01:ad:32:23:a9:67:83:af:5a:de:0c:4c:da:c5:9a:9f:
20:3c:1f:de:d7:f0:d5:0b:f8:9e:eb:0a:eb:95:06:79:0d:ff:
f4:0d:63:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaag+W5IWtQfgvzU1qRrG+JZMMp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTAxMDMxMzQ4NTFaFw0yNjAxMDIxMzUzNTFaMDMxMTAvBgNV
BAMTKDlCMTE4NDVFNTlERjI4MUQ4MTVCMEUyOEJDMzBGNDU4MTE4MUEyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53i5D0ww/QYLt2B6Gyd4FyAbq
FjcPuJLFaJUlQRwPkWXAbpVBBMQzRhuUcMrNchu+KLpuwZHlDaZJA13yAqZxJdov
hoxAwS/fFP0bgosTlUAisdUleyYn7gqIQqj7du0mDrPVQV4YnyCvHfUnbyOPe7OS
aonrTro4KHcH2JrtQ4Yry65w7iVDpz8YRhgdB/bV4FkcGrakLjDtOZotcyj/FYmq
Va8nHeJBJRsXfHuO1nsXzxhsmVbkO+6Wr2IyZC/D6D8kWPEJbnU2CDP8NE1mryvW
VAO68F31ZpXFXDZgWKHhFeK8IH4PFSriqG6sFujTwNg3fnLk5ac97/qVp1fxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUmxGEXlnfKB2BWw4ovDD0WBGBok8wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTk5ODU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGni
MA0GCSqGSIb3DQEBCwUAA4IBAQAX9LgNWCVmJiE3F4Pmoj0LMOWVwSBnDYaaaZJj
3xqaLgyAx+5WX0PeGVaQF6KZz8KPE6LecFTg0TpuuXGy84HizGkpAYxrWOF57d97
EczLhs5FYdJm+tA1mK9bY5OkteF3GOxcoFjqL1LuCUkTGX44E0GvMRr1EQZRyZfd
YKgCHPt5Zg9yRaFC5TGc/8MIhrY273g60B44krUnSU92hbXIB73X8mbcWb3TL7KW
WGEAW3Op06ZH25899gSRAWxqLcBuwReHpfzZ9brdIM0RgmtYPs4hfc9DySOvXQGt
MiOpZ4OvWt4MTNrFmp8gPB/e1/DVC/ie6wrrlQZ5Df/0DWNM
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:21 2025 by rpki-client