Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: 9GjMWhv5AMcCqPA1Wa1XAMpaGRQpe4VuQTKvZnueiik=
Subject key identifier: 17:CD:4D:32:62:D7:86:30:9D:CB:ED:AF:F7:7B:E3:15:59:41:B9:39
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 350305A6C7501CD51288BFC8913C1080B16A4D75
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
Signing time: Wed 19 Mar 2025 02:55:25 +0000
ROA not before: Wed 19 Mar 2025 02:50:25 +0000
ROA not after: Wed 18 Mar 2026 02:55:25 +0000
asID: 401190
IP address blocks: 91.124.26.0/23 maxlen: 24
91.124.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:03:05:a6:c7:50:1c:d5:12:88:bf:c8:91:3c:10:80:b1:6a:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 19 02:50:25 2025 GMT
Not After : Mar 18 02:55:25 2026 GMT
Subject: CN=17CD4D3262D786309DCBEDAFF77BE3155941B939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:66:4a:8b:ab:cc:9a:ef:a6:dc:8c:cc:4e:
05:d3:1d:0d:e7:e7:b9:8b:33:9f:44:1e:c4:c5:0e:
7b:c1:d4:5c:14:6e:f8:ec:df:de:3b:4f:ed:59:67:
00:55:c4:79:71:75:bb:2b:6f:ac:ef:6c:10:bb:b0:
de:b5:3f:42:3c:11:4e:4e:08:d6:b8:a6:7f:ee:6f:
89:bb:66:82:e0:76:5f:4b:ff:f0:c1:d9:3d:1a:69:
ce:89:95:63:4e:86:f7:c6:a0:d1:52:d4:12:87:5d:
4c:8d:6d:d9:36:94:d3:d9:d7:8b:32:71:5b:6b:f5:
fd:91:4c:44:6a:40:e7:8d:5f:1a:0c:5e:88:d5:57:
e7:a8:b1:2b:3b:a3:8e:10:d4:dd:27:cf:70:ff:83:
6b:aa:a6:11:60:13:92:06:02:c5:29:5c:4e:94:58:
c3:d4:19:83:89:bd:16:fb:8a:cf:38:1d:66:6f:90:
18:24:01:36:fa:8b:e3:79:83:96:bf:46:bf:55:4d:
14:a0:ce:05:b9:92:89:80:86:40:72:69:66:4c:30:
c0:01:29:93:d9:e3:a9:dd:7c:21:86:87:ee:25:3f:
3f:19:04:fb:9f:1a:57:f4:bb:b1:6d:f5:b0:9d:ad:
5f:4e:36:88:5e:68:86:f3:06:bd:06:a5:0a:28:3e:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:4D:32:62:D7:86:30:9D:CB:ED:AF:F7:7B:E3:15:59:41:B9:39
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.26.0-91.124.29.255
Signature Algorithm: sha256WithRSAEncryption
6b:c8:88:ef:2c:56:fa:07:c8:d7:05:38:e7:4e:eb:e2:07:dd:
4c:87:c3:49:70:e3:ba:aa:8f:17:4d:9e:e0:4b:4e:48:b1:1d:
33:9b:d9:b8:c4:89:73:78:f1:bb:78:d1:a9:cb:d5:fc:5c:5d:
fe:58:b5:35:da:42:cd:a6:eb:eb:3e:49:98:b0:33:9c:08:0d:
2c:f2:fd:e5:36:0a:2f:2f:2c:43:dc:00:ac:0f:a5:2a:0e:48:
44:60:ac:52:3a:80:13:f0:a0:99:b7:ce:eb:d1:02:cc:eb:6a:
f9:98:e6:eb:e4:0c:12:98:e4:2c:7a:51:e9:34:46:fc:68:8a:
ba:90:6b:a0:8c:df:fd:c3:22:02:bb:ed:ee:42:5d:02:42:1b:
27:67:e6:dc:00:1e:22:bb:c9:ee:d6:d2:31:ae:2c:26:1b:41:
b8:ec:bc:7e:cf:ac:41:f0:95:4e:c6:01:f3:8d:34:bb:4f:08:
2a:b8:e3:7d:8f:eb:eb:10:5b:d1:3c:4c:66:f0:53:51:45:3b:
00:30:f6:6e:bf:61:c4:42:1a:e0:95:c5:d0:b1:bf:ab:94:60:
4b:8f:ca:1d:71:e8:2f:b9:cb:0e:79:44:ef:b1:d9:e0:37:a4:
14:0b:64:ae:7b:94:38:64:ca:23:07:7a:55:e0:f3:40:7e:51:
2a:a2:bf:9e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUNQMFpsdQHNUSiL/IkTwQgLFqTXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMTkwMjUwMjVaFw0yNjAzMTgwMjU1MjVaMDMxMTAvBgNV
BAMTKDE3Q0Q0RDMyNjJENzg2MzA5RENCRURBRkY3N0JFMzE1NTk0MUI5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn2ZKi6vMmu+m3IzMTgXTHQ3n
57mLM59EHsTFDnvB1FwUbvjs3947T+1ZZwBVxHlxdbsrb6zvbBC7sN61P0I8EU5O
CNa4pn/ub4m7ZoLgdl9L//DB2T0aac6JlWNOhvfGoNFS1BKHXUyNbdk2lNPZ14sy
cVtr9f2RTERqQOeNXxoMXojVV+eosSs7o44Q1N0nz3D/g2uqphFgE5IGAsUpXE6U
WMPUGYOJvRb7is84HWZvkBgkATb6i+N5g5a/Rr9VTRSgzgW5komAhkByaWZMMMAB
KZPZ46ndfCGGh+4lPz8ZBPufGlf0u7Ft9bCdrV9ONoheaIbzBr0GpQooPlhJAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUF81NMmLXhjCdy+2v93vjFVlBuTkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxMTkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFb
fBoDBAFbfBwwDQYJKoZIhvcNAQELBQADggEBAGvIiO8sVvoHyNcFOOdO6+IH3UyH
w0lw47qqjxdNnuBLTkixHTOb2bjEiXN48bt40anL1fxcXf5YtTXaQs2m6+s+SZiw
M5wIDSzy/eU2Ci8vLEPcAKwPpSoOSERgrFI6gBPwoJm3zuvRAszravmY5uvkDBKY
5Cx6Uek0RvxoirqQa6CM3/3DIgK77e5CXQJCGydn5twAHiK7ye7W0jGuLCYbQbjs
vH7PrEHwlU7GAfONNLtPCCq4432P6+sQW9E8TGbwU1FFOwAw9m6/YcRCGuCVxdCx
v6uUYEuPyh1x6C+5yw55RO+x2eA3pBQLZK57lDhkyiMHelXg80B+USqiv54=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:14 2025 by rpki-client