Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
File: AS198584.roa (raw, json)
Hash identifier: o/4UpqqLULIvhkNsYtF9Grlk7IjXTmCufaoijI64PMU=
Subject key identifier: 65:85:68:AE:07:5C:13:C7:62:4E:62:E2:48:C4:1E:31:48:50:86:45
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07397D1B92EC002532525A967D92D5697F0A2223
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
Signing time: Thu 10 Apr 2025 22:54:01 +0000
ROA not before: Thu 10 Apr 2025 22:49:01 +0000
ROA not after: Thu 09 Apr 2026 22:54:01 +0000
asID: 198584
IP address blocks: 147.79.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:39:7d:1b:92:ec:00:25:32:52:5a:96:7d:92:d5:69:7f:0a:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 10 22:49:01 2025 GMT
Not After : Apr 9 22:54:01 2026 GMT
Subject: CN=658568AE075C13C7624E62E248C41E3148508645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:a1:78:f2:07:04:13:3e:6d:1f:09:47:97:
58:2e:20:c1:60:83:3e:5f:e7:b6:2a:85:93:e6:eb:
12:60:7e:cf:b4:43:72:5f:b9:16:89:34:d5:c5:19:
c2:f9:ff:a1:6a:da:21:fe:23:78:38:6e:2a:a0:5d:
4b:4d:f6:f9:f7:bb:79:31:ce:bb:a3:c0:3a:07:5d:
b1:b0:33:2b:b2:7b:fc:ac:af:a8:7b:38:02:28:25:
51:b2:56:b3:0d:1e:c3:4e:16:d4:7a:4e:49:8a:a7:
1c:b3:77:f9:23:b4:2c:f3:cc:eb:12:23:14:24:f6:
8a:84:b1:a1:df:50:18:5c:3f:f3:61:05:50:8a:59:
d8:a9:15:e6:41:b6:0f:a1:88:0d:2b:fd:13:db:95:
3d:a0:22:93:71:4f:26:b0:a5:d3:27:4a:bd:b4:34:
f9:0e:30:f5:fc:cd:ab:24:ff:a6:05:a0:62:e4:5f:
9a:ca:15:18:28:7f:3a:e0:43:52:1b:00:6a:1e:de:
5c:ad:cb:f1:c3:ea:a4:40:a6:6f:e2:c8:2a:27:5b:
9a:8a:99:d4:c5:bb:8e:d4:07:95:ed:61:c4:77:8c:
4e:70:ab:0a:37:db:61:7d:cf:8c:c1:e6:4d:42:75:
2b:81:ae:42:b0:a9:5a:5d:12:02:0c:2d:cc:d2:5d:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:68:AE:07:5C:13:C7:62:4E:62:E2:48:C4:1E:31:48:50:86:45
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS198584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e7:ea:db:94:e4:ef:57:23:71:b1:e4:56:50:cf:2b:95:cc:
1e:d9:fa:50:19:0f:b4:33:cb:76:3c:79:e7:70:15:0f:11:69:
91:cc:c0:fc:8c:83:f7:d4:d0:3a:ec:40:12:e1:d1:e2:73:4b:
16:b2:5b:82:80:e0:6f:e2:ed:dc:cb:b3:6a:97:2c:a0:00:ac:
65:95:51:41:79:6b:68:4f:9c:08:98:a6:77:26:0b:32:a9:5f:
57:6d:38:55:f5:e7:66:f0:d3:86:13:0a:79:5c:71:77:2e:0b:
7c:00:e7:0d:f7:2b:11:34:b3:b1:81:6d:39:c2:29:c6:67:a0:
c1:0c:80:4c:bf:68:5a:93:65:fe:1c:a1:a6:18:b4:8d:1e:43:
44:80:6d:d4:50:dc:da:a7:a5:1b:87:f6:e1:d6:4f:f9:40:ae:
87:cf:fe:ba:cf:8c:3b:86:b9:d2:a1:4e:5c:29:64:f2:b4:f9:
10:f7:13:bf:a1:15:e0:c5:82:a9:5a:fa:c9:eb:bc:a9:0e:a7:
f5:7f:1c:e4:db:75:5d:28:3a:c3:31:74:f8:7b:2b:ab:ec:cf:
a7:d9:99:94:ce:64:a9:f3:a9:05:c4:f4:89:23:dd:df:cf:c4:
c7:80:fe:b9:40:c4:ef:86:35:f5:e8:7f:ae:c9:b7:68:58:78:
3b:6e:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net