Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa
File: AS208949.roa (raw, json)
Hash identifier: qq7suXxeAJbUlwP0LUwDqsT43MgeB24gqvvL+jIrt/0=
Subject key identifier: EC:F8:3B:AE:1F:BD:DD:35:73:EF:6C:D7:17:0F:35:62:37:87:39:F2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7B2825ED9E12D6FD48ED9BA5A829122B65CA7342
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa
Signing time: Wed 25 Dec 2024 02:53:48 +0000
ROA not before: Wed 25 Dec 2024 02:48:48 +0000
ROA not after: Wed 24 Dec 2025 02:53:48 +0000
asID: 208949
IP address blocks: 185.155.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:28:25:ed:9e:12:d6:fd:48:ed:9b:a5:a8:29:12:2b:65:ca:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 25 02:48:48 2024 GMT
Not After : Dec 24 02:53:48 2025 GMT
Subject: CN=ECF83BAE1FBDDD3573EF6CD7170F3562378739F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:00:25:fd:79:8d:b4:45:22:0a:8a:da:cf:
93:2c:69:a9:f2:4f:98:f4:ec:8c:0a:81:b0:e1:24:
dc:a5:f3:ca:d0:a6:52:9a:7e:36:45:88:3d:b5:6c:
df:f2:96:08:21:56:39:30:24:98:dc:27:0b:13:b1:
18:bd:61:fc:ec:91:b1:aa:de:95:2c:f8:87:b3:c7:
22:1e:67:ea:81:42:ba:4d:b2:c9:63:53:e6:58:68:
ff:9f:06:36:ad:6a:ba:b1:87:c8:7e:53:5d:05:41:
f7:b9:ce:15:a9:70:a4:4c:f4:48:d4:7a:0e:20:c3:
fc:23:c8:5d:13:85:e7:a8:9b:92:36:ff:26:2e:12:
cc:f8:32:fa:1e:c6:b8:71:ec:b7:f1:0a:c2:fa:33:
89:21:8c:95:1a:ab:bf:d8:de:6c:9a:c0:df:fe:5e:
1f:70:9d:17:a8:ad:72:08:62:1b:dc:94:5b:dc:b0:
bb:f7:1a:37:24:1a:e7:00:37:fe:ff:ce:3c:c6:77:
57:67:45:f1:38:cd:ad:dc:26:86:ff:87:bb:96:25:
77:4a:41:80:b6:a0:91:c0:08:2d:22:17:22:47:fb:
2d:53:23:f7:b9:fb:13:fc:e9:49:0f:84:23:ff:80:
c9:a5:34:a3:18:ba:b1:93:1b:78:a0:28:a8:dc:4c:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:3B:AE:1F:BD:DD:35:73:EF:6C:D7:17:0F:35:62:37:87:39:F2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9f:a5:61:95:86:3a:1b:32:e1:d5:69:20:f0:e7:7b:b9:5a:
6c:ac:65:3a:a2:27:f8:af:fe:0c:1b:f0:68:d5:18:4b:2e:8f:
d4:6f:4c:a6:ff:e6:f3:34:c7:f2:d0:2a:fc:a3:c8:25:50:44:
57:e8:83:5f:34:54:d2:ac:53:9d:68:65:88:ea:d8:9f:86:c7:
85:0a:dc:92:2e:f9:95:1b:c9:f1:10:46:c6:5b:09:e5:2b:f8:
66:74:d7:cf:fe:8f:a1:29:d6:0c:42:af:dd:2e:3a:9f:4b:3f:
70:b3:43:bf:15:3a:ad:5c:ce:4d:72:e2:30:a1:8b:cf:75:8c:
c9:12:10:5e:d7:c9:b4:b4:87:7c:60:04:1f:ac:8b:c0:63:d4:
93:b2:ce:b6:cd:4c:fb:b1:48:6d:ac:40:bd:03:6f:3f:ed:f3:
70:f6:2a:b0:3f:39:b3:e5:0a:ae:da:c2:20:27:4f:12:bc:f4:
94:d8:b5:21:c4:41:d2:6c:47:be:8c:31:31:cd:3e:c3:b9:3b:
9a:c4:e2:bc:22:1f:02:cd:af:da:77:1e:e9:5e:52:fb:b7:d4:
53:80:04:82:02:e5:c8:c4:cb:e2:a4:d4:2d:3b:57:16:11:93:
e5:4f:36:03:ca:39:72:7e:aa:17:86:5b:b0:29:72:8d:b6:9a:
51:ad:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:31 2025 by rpki-client