Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa
File: AS147180.roa (raw, json)
Hash identifier: u+Rgbk2Twv04tGD73bqZ5Zeq26wOqWdazBERhsXlNOY=
Subject key identifier: 8E:4E:32:7F:0E:C7:6C:03:60:6B:82:7A:7E:BB:95:63:B9:09:75:01
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2DF3E58D46FDA797B79CF50463B3CA175FBD8BA8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 147180
IP address blocks: 2a14:7581:9f49::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f3:e5:8d:46:fd:a7:97:b7:9c:f5:04:63:b3:ca:17:5f:bd:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=8E4E327F0EC76C03606B827A7EBB9563B9097501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:71:d8:f5:15:a5:e7:02:45:35:b4:9d:a7:
41:a8:c8:bb:12:94:14:52:ac:fe:f1:ea:c9:56:4e:
5b:65:1d:de:5c:f3:b9:d2:7d:1a:22:9d:dc:c7:fa:
07:89:ec:14:60:78:6c:0d:b0:c6:38:fe:a0:d6:da:
68:02:0f:64:55:25:6c:59:80:25:34:af:bd:11:ea:
82:3e:bc:72:37:48:6e:3d:93:55:59:8f:d8:eb:17:
52:7b:2f:89:99:1c:f5:eb:4b:43:ea:6e:e9:13:48:
54:eb:0e:4f:f6:10:7e:5b:31:9d:a3:f3:a1:b9:b3:
16:03:c2:24:6c:c2:d7:0e:91:59:67:0f:8c:9f:ea:
46:34:59:00:ce:f8:ad:bb:43:91:3d:4e:76:9c:28:
0a:be:bd:ae:bb:0f:88:cd:99:ca:26:51:e7:99:54:
bb:c8:5d:34:b7:ac:76:8e:59:c3:c4:7d:f6:a8:b7:
54:5f:2f:bb:4c:a9:f4:56:55:af:c4:b9:f8:c5:e8:
93:46:5e:7a:a4:d5:7d:e3:97:1a:38:ac:a4:29:d1:
d5:69:f7:69:58:05:7c:e8:d4:4e:7f:8d:dd:c3:59:
5f:e1:f4:4d:3e:d7:10:c3:6d:63:d2:65:18:17:91:
92:5a:d1:b3:dd:01:07:4f:8e:62:ad:16:9d:f1:11:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:32:7F:0E:C7:6C:03:60:6B:82:7A:7E:BB:95:63:B9:09:75:01
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f49::/48
Signature Algorithm: sha256WithRSAEncryption
9a:5e:d3:42:15:a9:38:25:a5:9c:d2:f7:a0:6e:ae:fc:90:41:
82:f1:20:25:43:e5:91:f8:23:4d:de:24:b8:84:a6:c3:c2:7b:
d3:0b:35:dc:11:b7:2e:0c:dd:b2:b7:25:ef:7d:85:02:3a:05:
8c:57:b8:04:82:85:15:43:61:a7:c7:95:37:35:b5:0a:39:5e:
e0:a6:51:c2:3f:33:55:97:d2:20:06:74:ef:a2:b0:be:8b:60:
60:bc:d6:f1:af:d3:1f:c2:7a:1f:af:e5:67:b9:88:77:5c:a7:
bb:ed:f5:a0:1e:52:35:47:e6:52:25:b6:58:c5:4a:28:d4:be:
93:cd:a2:c2:88:da:82:55:63:34:11:ef:9d:b5:ee:d8:20:62:
1a:4e:d1:7d:d4:a3:1a:52:6b:de:44:fa:c6:12:c6:59:29:e8:
0e:de:e4:e4:7d:c0:f7:74:f7:57:31:97:9e:2f:97:cf:2e:4a:
fb:4c:da:fb:ff:f1:70:0e:69:3e:64:b9:cd:84:2c:78:7d:9c:
95:44:b9:24:d7:08:e3:17:e6:d7:20:c3:92:0f:fe:90:32:55:
1b:ae:6a:fe:af:14:53:48:cd:74:9a:a2:8a:60:7d:e4:ef:90:
9a:d6:70:35:a6:92:ab:52:f8:ff:40:16:66:6e:9b:0b:98:af:
7d:94:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:02 2025 by rpki-client