Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202656.roa
File: AS202656.roa (raw, json)
Hash identifier: rB6hZbIsvlckQEeEHGkg/Vk/pjDHg/tWDmOMk4ssmsM=
Subject key identifier: AA:FD:F0:52:CD:F8:5B:0B:83:59:3A:1A:6A:0C:F9:8A:39:E6:4E:1B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2F6CA6A980B2863DF5688963A444329E186D95CD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202656.roa
Signing time: Sat 08 Mar 2025 02:20:37 +0000
ROA not before: Sat 08 Mar 2025 02:15:37 +0000
ROA not after: Sat 07 Mar 2026 02:20:37 +0000
asID: 202656
IP address blocks: 46.203.99.0/24 maxlen: 24
91.124.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6c:a6:a9:80:b2:86:3d:f5:68:89:63:a4:44:32:9e:18:6d:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 8 02:15:37 2025 GMT
Not After : Mar 7 02:20:37 2026 GMT
Subject: CN=AAFDF052CDF85B0B83593A1A6A0CF98A39E64E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:e3:c8:71:dd:bb:2d:9f:b4:e8:e1:87:99:
ae:87:aa:5c:c8:4c:81:29:c5:9d:f6:3b:fd:b3:8f:
69:87:9b:5c:e8:8d:49:14:4b:d4:c6:11:f6:ea:c1:
08:cd:a0:3d:a9:2c:e6:49:25:2b:87:fc:6d:4d:37:
14:c2:91:1f:64:ff:d2:7a:af:fe:dd:c4:76:75:3e:
e7:1d:59:ef:90:7f:fc:62:c6:26:bd:2b:00:e8:91:
a9:a2:96:19:01:8f:78:1a:14:7f:dc:cb:29:2a:10:
c0:7f:1e:3d:23:0b:0f:bb:7f:a3:b3:5e:8f:5d:83:
9b:f1:c4:e0:46:f8:ff:b2:0d:1e:2c:7d:92:34:2b:
11:55:af:89:d7:38:27:da:a4:b0:4a:73:ed:62:11:
74:58:1c:97:39:98:99:03:93:87:0c:fb:a3:94:92:
2d:f4:5b:ca:f7:fa:79:c0:25:d0:4e:5d:de:29:b9:
8f:37:fe:70:d1:62:48:64:a9:72:25:5a:65:4a:56:
f3:21:2c:4e:0f:59:57:20:cc:af:e6:9a:78:18:1e:
7c:4c:99:27:fa:95:63:0f:4a:54:9f:68:a3:8b:eb:
a5:de:98:97:26:0c:4d:21:d6:85:93:e4:a4:22:9f:
84:58:6f:c1:a7:cd:cf:88:fb:fe:9f:b3:c9:63:7e:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:F0:52:CD:F8:5B:0B:83:59:3A:1A:6A:0C:F9:8A:39:E6:4E:1B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.99.0/24
91.124.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:aa:17:5d:f7:84:a0:dc:9d:49:67:57:9a:5a:d9:ab:af:f5:
33:45:55:ad:9d:b5:08:b4:71:0b:35:c4:00:1e:30:3e:8a:54:
d0:54:9d:9b:0b:41:98:93:4c:c3:58:31:9a:dd:8e:51:0a:2d:
b6:83:47:02:a6:2c:9c:f8:0c:ea:97:0d:63:cd:bd:9b:86:22:
ef:9e:b1:a4:96:29:3d:3d:72:b6:4b:a0:37:20:1b:f4:98:59:
4e:7c:86:6e:c9:1b:32:b9:e8:ae:f0:f5:cc:05:69:6e:a2:c6:
30:d4:25:df:f3:be:a6:7b:86:e1:17:5a:cb:18:93:89:38:29:
40:95:34:b3:98:5b:e9:40:40:11:a7:6b:a3:74:a7:c0:b5:12:
a0:d7:d0:9d:e4:9e:cd:09:91:75:fb:8a:06:cc:84:8e:0a:dd:
24:5b:4e:eb:14:9d:ac:c6:9a:fa:48:42:58:f8:c5:60:11:b4:
28:ca:9b:3c:8b:77:6b:a5:15:fc:b0:62:86:8a:a7:c4:89:3f:
39:50:62:00:e6:0c:75:63:ad:76:85:d5:42:cc:80:16:7a:97:
76:53:29:8a:ee:bb:5e:01:bf:7a:d4:b0:cf:5d:bd:18:a1:ec:
1f:1a:40:2c:2d:c3:f6:94:3a:5c:98:6d:9d:d9:14:0d:19:c5:
34:36:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:42 2025 by rpki-client