Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213845.roa
File: AS213845.roa (raw, json)
Hash identifier: kRAyKZvvAaL5mMzUptqgJO3fwlVcHWhPcJQIoEpm8nk=
Subject key identifier: 7C:BA:D7:CD:D5:C0:AE:E9:70:0C:8D:14:29:D6:F6:A7:19:4A:EA:C6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7F3CC1F1DC440EAB5AAA20570D234FA6A00F0269
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213845.roa
Signing time: Tue 18 Feb 2025 08:29:52 +0000
ROA not before: Tue 18 Feb 2025 08:24:52 +0000
ROA not after: Tue 17 Feb 2026 08:29:52 +0000
asID: 213845
IP address blocks: 92.112.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3c:c1:f1:dc:44:0e:ab:5a:aa:20:57:0d:23:4f:a6:a0:0f:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 18 08:24:52 2025 GMT
Not After : Feb 17 08:29:52 2026 GMT
Subject: CN=7CBAD7CDD5C0AEE9700C8D1429D6F6A7194AEAC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:06:b8:3a:ef:5f:7f:4b:29:65:bb:44:5a:
dc:00:ec:3f:4e:a7:0f:18:c1:dd:36:1e:4e:48:74:
39:a2:32:a5:24:93:f2:82:4b:21:b0:a5:e7:93:8f:
a0:64:f6:9a:ed:2d:ea:c3:e8:8e:83:9d:2a:fa:93:
f5:8c:2c:59:20:c0:3b:87:ec:6c:ae:b5:c6:61:98:
40:89:01:27:34:df:08:e1:8a:96:c0:96:58:a0:f1:
7c:4e:62:dc:9e:a1:eb:8e:11:47:2b:26:bb:bf:cd:
34:3b:a3:ef:a2:5b:b5:75:8c:36:fd:c2:bc:ef:62:
ae:c6:fb:eb:af:4a:97:d8:1d:4a:23:c6:c7:1b:96:
0c:9c:d1:1d:0a:8b:e3:ea:22:46:88:e8:c7:d7:e2:
e1:de:ae:c7:c5:94:b0:74:52:bb:9f:6d:ce:e0:a7:
66:49:93:5d:17:b1:83:cd:29:5b:62:53:01:79:55:
62:75:d5:f7:bc:29:11:74:b0:56:e4:fc:a8:39:30:
b8:33:a5:6b:b6:8e:df:ab:c0:7d:1d:1f:5d:7e:06:
dd:d8:91:8f:e2:45:b8:af:e7:7d:f8:71:aa:34:aa:
8d:77:41:16:ff:6c:31:7a:8e:1c:29:b3:d0:9a:32:
55:c6:bb:00:76:4d:e5:d1:b4:60:30:06:9c:9c:ee:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:D7:CD:D5:C0:AE:E9:70:0C:8D:14:29:D6:F6:A7:19:4A:EA:C6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213845.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:1a:8f:07:4d:40:60:31:33:14:82:e5:0f:be:bd:65:1e:92:
ef:6e:50:a8:66:48:ed:3b:00:e6:f5:e4:61:6a:24:08:90:d2:
2b:a9:63:91:d3:3a:c0:4b:d3:72:44:03:c5:f6:e0:02:84:76:
fc:96:6b:3b:dd:e9:3a:65:b1:4c:9a:62:b0:bd:38:0e:33:fc:
02:42:51:c0:5a:b8:7d:8f:06:a3:cd:ae:5f:1d:a6:81:81:1d:
d3:20:8c:10:ee:f1:ce:dc:f3:9d:d3:fc:58:0b:6b:af:b0:6b:
02:be:42:b3:b1:71:98:bd:67:fb:d3:83:3d:06:f2:b0:6c:50:
6b:7a:fa:69:b6:13:82:8d:e0:98:1a:f0:e4:32:f0:0d:a1:15:
65:79:f9:a0:fb:a9:35:ea:67:04:90:72:ab:86:62:d9:e6:eb:
93:7c:37:61:17:2e:3f:8c:eb:6d:70:49:58:b2:2e:01:82:0c:
5b:8b:44:ff:0e:99:b5:dc:be:e0:45:b7:25:98:6c:2f:ec:34:
a0:08:a7:22:f1:ff:46:85:a0:85:dc:70:d8:02:96:da:a3:71:
80:8a:83:11:2e:4a:76:32:ba:72:2a:38:d2:39:bf:54:a0:26:
be:4a:02:4c:26:5d:5c:67:60:7a:e7:f7:39:bc:3a:82:5a:36:
c0:bf:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:03 2025 by rpki-client