Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: ChsGL6PZn5lHbQWJYUwV/CT/5LSjOsTpae/xR6A+Qoc=
Subject key identifier: E1:61:0A:E7:6C:23:23:53:B0:2E:6F:AE:DE:CB:E6:A3:49:1C:68:EB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 18E0E77D5B12FC71924C369B0131F6004105C346
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199707.roa
Signing time: Thu 06 Mar 2025 12:55:53 +0000
ROA not before: Thu 06 Mar 2025 12:50:53 +0000
ROA not after: Thu 05 Mar 2026 12:55:53 +0000
asID: 199707
IP address blocks: 141.11.138.0/24 maxlen: 24
141.11.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e0:e7:7d:5b:12:fc:71:92:4c:36:9b:01:31:f6:00:41:05:c3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 6 12:50:53 2025 GMT
Not After : Mar 5 12:55:53 2026 GMT
Subject: CN=E1610AE76C232353B02E6FAEDECBE6A3491C68EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:4d:c8:a4:5c:b3:a4:02:f5:f5:4e:f4:72:
51:41:ad:5d:11:4b:81:91:c7:c6:df:e1:27:88:0b:
05:12:45:6d:43:e6:82:8f:d1:df:a4:d4:06:42:11:
1e:80:07:ec:86:ef:b1:9a:db:0c:62:f9:7d:db:c5:
19:70:ae:b1:8d:60:25:f4:05:40:df:ae:5d:a8:56:
fc:d0:0d:06:08:97:06:cc:c3:76:c9:1a:dd:30:fc:
6b:5a:b1:0d:6d:79:4b:a9:4b:1c:50:7e:74:8d:80:
55:eb:23:28:f3:ce:ac:e4:2f:24:70:4d:2e:8a:43:
4a:bf:71:cb:8c:f2:8e:88:f7:34:81:98:81:dd:e1:
12:ef:e5:3c:e9:eb:d6:8a:45:b0:70:ba:12:49:13:
9d:02:40:51:ff:9e:19:b3:a8:96:e1:03:cd:37:48:
d0:b2:72:42:d7:06:d1:8a:64:5c:95:04:3e:25:3c:
3e:72:d5:d9:c8:55:86:ae:b7:a4:d7:00:aa:07:9e:
82:f9:62:bf:c7:d8:f3:b0:b0:91:2d:07:34:22:b1:
6f:01:72:13:02:8a:e7:4a:e1:ff:e4:64:6c:f5:d5:
13:82:a6:1d:b8:2d:63:b0:28:b2:12:d5:07:f3:2f:
8d:33:cb:6b:9d:34:46:b6:b5:b3:b9:f6:9a:a3:f6:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:0A:E7:6C:23:23:53:B0:2E:6F:AE:DE:CB:E6:A3:49:1C:68:EB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:af:00:e3:98:84:ad:23:ba:ef:ec:34:c9:e9:ec:83:5a:47:
a5:ac:e4:05:44:ef:2c:2b:c9:e5:76:b7:a3:4a:db:9b:a3:3d:
c9:f4:68:d7:b7:42:cf:82:29:67:79:ef:07:22:b9:aa:01:31:
f7:5c:6d:28:61:b3:25:d2:7c:8a:ba:22:24:72:a1:2c:00:a1:
ba:44:20:2f:1d:21:8d:d5:45:f4:ef:f1:d6:13:52:87:ba:95:
37:5f:0f:c5:ad:9d:e6:8e:af:f6:42:e1:85:ac:97:ad:a0:0c:
65:04:1a:6b:28:7c:a6:7d:ee:14:b7:6b:06:4f:da:3d:27:2b:
39:69:39:c7:44:74:e6:0b:08:c9:4a:c4:5b:49:0c:89:37:cc:
49:5f:a0:8b:01:a2:35:f5:75:25:07:d6:0a:bc:6f:4c:42:ed:
b2:49:eb:cc:96:16:bd:e1:26:9a:28:93:ee:99:c9:e6:90:63:
ee:74:ee:dd:d3:20:b1:e0:c2:17:6c:e7:a9:64:6c:e3:0d:64:
13:0c:6d:c2:4b:dc:e5:10:5b:c3:b8:d9:11:4d:2f:a2:a4:52:
9b:fb:15:e3:d5:9a:9c:66:8e:b3:df:ef:17:9c:bf:62:8a:50:
2c:2b:03:ff:6d:b6:4f:0d:32:69:45:37:5d:4f:db:cd:b1:c7:
6f:53:c0:56
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGODnfVsS/HGSTDabATH2AEEFw0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTAzMDYxMjUwNTNaFw0yNjAzMDUxMjU1NTNaMDMxMTAvBgNV
BAMTKEUxNjEwQUU3NkMyMzIzNTNCMDJFNkZBRURFQ0JFNkEzNDkxQzY4RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHm03IpFyzpAL19U70clFBrV0R
S4GRx8bf4SeICwUSRW1D5oKP0d+k1AZCER6AB+yG77Ga2wxi+X3bxRlwrrGNYCX0
BUDfrl2oVvzQDQYIlwbMw3bJGt0w/GtasQ1teUupSxxQfnSNgFXrIyjzzqzkLyRw
TS6KQ0q/ccuM8o6I9zSBmIHd4RLv5Tzp69aKRbBwuhJJE50CQFH/nhmzqJbhA803
SNCyckLXBtGKZFyVBD4lPD5y1dnIVYaut6TXAKoHnoL5Yr/H2POwsJEtBzQisW8B
chMCiudK4f/kZGz11ROCph24LWOwKLIS1QfzL40zy2udNEa2tbO59pqj9tMfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU4WEK52wjI1OwLm+u3svmo0kcaOswHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTk5NzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQuK
MA0GCSqGSIb3DQEBCwUAA4IBAQBOrwDjmIStI7rv7DTJ6eyDWkelrOQFRO8sK8nl
drejStuboz3J9GjXt0LPgilnee8HIrmqATH3XG0oYbMl0nyKuiIkcqEsAKG6RCAv
HSGN1UX07/HWE1KHupU3Xw/FrZ3mjq/2QuGFrJetoAxlBBprKHymfe4Ut2sGT9o9
Jys5aTnHRHTmCwjJSsRbSQyJN8xJX6CLAaI19XUlB9YKvG9MQu2ySevMlha94Saa
KJPumcnmkGPudO7d0yCx4MIXbOepZGzjDWQTDG3CS9zlEFvDuNkRTS+ipFKb+xXj
1ZqcZo6z3+8XnL9iilAsKwP/bbZPDTJpRTddT9vNscdvU8BW
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:08 2025 by rpki-client