Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213460.roa
File: AS213460.roa (raw, json)
Hash identifier: zAdwyo+ibNC0l7Mo52gA4h2DESVbA4RuN1pPRT6zuhE=
Subject key identifier: 4F:98:8E:64:AF:73:DE:BE:31:B5:FF:25:03:C6:66:FD:97:10:02:D0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 241CF6EEDEB958B6AE6861E9C2C159C02B099EB5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213460.roa
Signing time: Thu 20 Feb 2025 03:54:36 +0000
ROA not before: Thu 20 Feb 2025 03:49:36 +0000
ROA not after: Thu 19 Feb 2026 03:54:36 +0000
asID: 213460
IP address blocks: 91.124.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1c:f6:ee:de:b9:58:b6:ae:68:61:e9:c2:c1:59:c0:2b:09:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 03:49:36 2025 GMT
Not After : Feb 19 03:54:36 2026 GMT
Subject: CN=4F988E64AF73DEBE31B5FF2503C666FD971002D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:79:91:36:9d:63:bf:91:35:18:0b:92:a8:
4b:c6:a1:4a:d1:0b:84:33:26:42:56:74:33:f1:26:
ab:b9:2a:b0:94:fa:0b:64:11:f3:55:6f:96:19:4d:
ce:6c:28:ab:5b:d1:e1:99:35:7d:b0:54:86:25:62:
c5:2f:c1:6a:06:fc:52:3e:c4:e8:77:9b:aa:57:b8:
39:8a:60:f3:9d:1d:79:c5:5f:dc:9d:82:d7:b4:68:
88:47:44:b8:d4:08:3e:55:d2:90:6f:d4:f6:d5:e5:
3a:07:3d:14:21:5f:b0:4b:c0:84:50:c1:7f:27:01:
12:58:d7:ef:95:27:9d:6f:62:4d:7f:b6:17:c2:be:
38:40:89:24:77:d4:97:6e:74:f3:cc:0a:d5:13:c5:
d3:4a:c4:75:62:33:a5:fd:cf:01:12:af:db:81:98:
43:a3:43:20:43:11:7e:a7:03:cb:02:aa:00:ed:bc:
62:5f:91:24:cd:6f:66:aa:7b:f5:ea:0a:87:29:64:
5e:4a:3e:e4:bf:b2:2e:f8:37:b4:7d:11:fc:e3:ad:
9f:29:f6:ab:1a:49:2d:ed:0f:a5:a7:5e:99:bc:84:
cd:7c:b8:25:33:dd:df:ae:c6:ba:a8:1d:4f:fb:4d:
3d:9c:c2:59:9a:b2:3d:4f:33:19:8a:57:b3:cb:41:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:8E:64:AF:73:DE:BE:31:B5:FF:25:03:C6:66:FD:97:10:02:D0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:29:14:40:77:35:6e:fd:f9:a0:b8:58:38:5c:47:76:03:d2:
d4:82:d1:59:77:00:8b:5d:ce:9d:65:6f:73:97:43:02:95:f5:
18:87:03:2c:a9:a2:3c:08:0c:96:7d:82:94:0c:04:47:c0:a5:
39:2e:43:7f:19:a1:1d:2f:a8:4d:76:fc:87:35:db:a8:ac:4d:
38:1b:ba:3f:66:63:de:89:3a:95:36:1d:9c:fd:c3:dd:99:2a:
69:61:b7:2e:54:0a:7b:47:04:a7:cf:91:93:fb:78:a4:4b:6a:
23:e1:21:d9:f8:46:ca:97:05:03:1a:19:f7:a2:fe:9b:26:49:
23:e1:dd:2b:f5:72:32:ed:fb:93:87:62:c6:2c:ab:85:83:54:
a6:45:8f:f0:16:04:c3:eb:11:9b:be:e9:2d:5d:7b:51:46:13:
8f:f0:de:57:d1:94:e7:82:c7:f4:d0:ad:e8:17:43:4d:7d:10:
f1:be:a3:06:b4:ae:a8:da:8c:7c:eb:1c:89:6f:46:0a:9d:3f:
52:e9:dc:aa:c8:15:3b:c5:f4:cf:b9:39:5e:7a:d0:ef:d5:3d:
be:5d:8a:74:5f:ab:d7:35:25:83:53:4f:b1:cd:1d:48:4d:b8:
97:7c:98:4a:42:9b:2b:b1:2d:38:89:36:4b:b1:21:7e:87:e5:
a6:07:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:10 2025 by rpki-client