Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS256.roa
File: AS256.roa (raw, json)
Hash identifier: PbfqWAALZe5FKM7RucKAieVWXqmgoL4a4sgX+UR/j6A=
Subject key identifier: 45:3B:7C:47:F0:43:5A:55:89:3A:3E:16:B4:62:84:0D:52:2F:14:93
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1C616177BE0229397991917E954C20C036C0AE0F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS256.roa
Signing time: Tue 18 Feb 2025 06:08:49 +0000
ROA not before: Tue 18 Feb 2025 06:03:49 +0000
ROA not after: Tue 17 Feb 2026 06:08:49 +0000
asID: 256
IP address blocks: 95.135.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:61:61:77:be:02:29:39:79:91:91:7e:95:4c:20:c0:36:c0:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 18 06:03:49 2025 GMT
Not After : Feb 17 06:08:49 2026 GMT
Subject: CN=453B7C47F0435A55893A3E16B462840D522F1493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:7d:e2:89:cd:4a:13:f4:20:df:c1:2b:6a:
ce:c1:e4:c0:36:57:7e:fb:3a:ce:71:8c:ac:94:75:
e3:6a:1e:9c:f5:13:15:d3:d9:b0:13:0c:56:d3:b5:
6a:34:93:df:d6:1b:10:e9:cd:fd:38:cb:4b:f8:bc:
99:21:78:05:d7:f2:ab:70:94:a9:93:18:d8:ef:6f:
63:63:be:52:c6:75:0b:5e:0e:a6:e6:d6:3b:52:88:
58:56:23:06:14:e1:a8:03:b6:9a:bd:c9:2a:d9:cf:
56:a3:4f:48:b7:ed:7a:24:0d:12:99:63:b3:fd:09:
39:f7:99:14:35:c8:00:8c:6e:bb:a5:70:8c:53:d0:
84:ef:60:96:56:ce:04:ef:d1:6b:d4:27:cb:fe:70:
6c:94:fe:38:d9:ba:a3:6c:94:84:4d:f8:22:60:4d:
83:60:3d:96:2b:14:fe:82:2a:13:35:e2:d4:b1:c5:
7a:97:4b:ab:4d:4b:50:93:b1:f7:29:15:19:39:d6:
6c:99:a6:70:c4:2d:b1:e4:fc:13:78:ae:35:22:be:
b6:7f:e4:1e:6f:d6:64:4b:2b:d4:06:9d:0a:16:46:
e9:bd:fe:80:41:aa:61:aa:65:b9:4f:27:1d:3d:46:
af:51:9a:e3:de:82:6f:cf:aa:ce:88:4b:b1:44:e0:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:7C:47:F0:43:5A:55:89:3A:3E:16:B4:62:84:0D:52:2F:14:93
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:17:5c:55:87:db:29:31:98:87:5a:e8:67:8d:45:c4:3e:4c:
7a:79:09:7f:bf:c5:01:a2:46:a9:d9:ac:8d:dc:cd:f3:89:65:
bc:74:5b:18:82:da:48:13:61:32:cf:f5:42:a3:31:49:06:53:
35:a6:79:0a:34:d0:e6:1a:05:58:36:fd:ae:65:ad:e3:8d:75:
fc:50:f1:3e:ca:7b:d7:e1:0e:ee:30:ba:21:f1:a4:67:86:a6:
38:c9:ab:cc:7b:18:ba:bd:45:8b:f7:6e:e3:c5:20:f7:97:30:
e6:69:ec:d7:f7:ec:3d:f7:38:bf:ab:ce:72:26:92:e4:0f:35:
5b:57:5c:f9:2c:d7:4d:96:5f:65:64:11:e8:22:f4:ea:69:6e:
a2:0b:83:d4:35:77:d8:28:30:06:06:c4:63:64:9e:c3:1b:4d:
43:ae:df:87:7e:9c:11:b4:70:25:c1:c4:93:22:7f:ed:35:15:
a3:02:4c:7c:1a:31:91:a0:2f:f9:e9:17:50:2e:d0:e5:40:27:
de:ab:69:b1:64:a3:b6:1a:c9:4a:17:56:e7:0a:40:4d:2d:81:
94:10:f1:c6:e7:06:cf:49:13:35:dd:5d:a2:83:e5:7d:cf:28:
0f:68:65:c6:c0:74:ad:c5:93:0b:83:66:f4:68:4b:ec:4b:b9:
fb:a7:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:20 2025 by rpki-client