Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212335.roa
File: AS212335.roa (raw, json)
Hash identifier: GL/DsUhs+V009HUrvw08N3ntmL/qRW2pwqhZqWnhxF4=
Subject key identifier: 4A:C9:38:3E:68:B0:0E:8C:B4:13:D3:A8:54:BF:2E:62:0E:3A:26:94
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 40A31A198B07D304B0290E49E7992FC2E7B97EC2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212335.roa
Signing time: Wed 02 Apr 2025 10:59:12 +0000
ROA not before: Wed 02 Apr 2025 10:54:12 +0000
ROA not after: Wed 01 Apr 2026 10:59:12 +0000
asID: 212335
IP address blocks: 140.233.185.0/24 maxlen: 24
146.103.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a3:1a:19:8b:07:d3:04:b0:29:0e:49:e7:99:2f:c2:e7:b9:7e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 2 10:54:12 2025 GMT
Not After : Apr 1 10:59:12 2026 GMT
Subject: CN=4AC9383E68B00E8CB413D3A854BF2E620E3A2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:47:f0:b4:29:ff:e0:2f:97:a1:39:4a:6c:
75:46:38:28:bc:1d:b2:e8:db:ed:82:52:16:a0:2e:
05:ae:87:ff:ae:3c:1a:ad:0f:86:6c:a0:35:4f:af:
c6:1b:24:6f:ef:b9:56:23:13:0d:fb:f6:f6:98:67:
7f:fb:71:a3:7a:3b:e2:2a:b5:a8:66:bf:9b:50:08:
d6:a5:79:90:ed:38:2a:ea:bf:b9:cb:f4:5e:6b:3a:
fd:44:84:52:75:e4:6d:eb:c8:40:62:3e:9c:ad:4e:
cb:27:87:f9:2f:db:f6:9b:7e:19:db:c0:3b:04:95:
f4:9d:cf:5d:89:e6:bd:4c:91:dc:63:84:b1:8b:6e:
9b:9d:5b:69:cf:a3:28:e8:e7:4f:a6:51:4e:59:b2:
f4:48:f3:2e:46:04:e2:c8:ea:15:41:99:3a:09:e4:
59:20:f6:1a:7e:4a:c6:e8:13:42:21:1a:db:c3:4d:
02:d3:8a:3d:fc:b5:e9:37:de:a2:a1:da:b2:46:41:
f9:50:a0:bc:76:31:7b:eb:e4:f6:1d:88:c1:f5:19:
8f:bb:74:40:2d:20:40:92:d8:2b:02:41:3e:ba:87:
99:4a:c6:9d:c9:a6:c1:9e:d5:c3:5f:c4:26:03:23:
90:ea:7c:cd:1e:6a:37:5d:a0:93:f5:46:41:27:01:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:38:3E:68:B0:0E:8C:B4:13:D3:A8:54:BF:2E:62:0E:3A:26:94
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.185.0/24
146.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a2:e3:67:51:f8:21:1d:a5:31:ca:e7:38:5b:c1:c0:db:ba:
85:f2:79:15:f4:cf:3d:0e:4b:cd:2a:fc:86:7a:b8:d8:18:13:
8f:03:cb:23:9f:2d:7f:b1:b8:56:5f:40:9d:6b:1f:d9:8d:a0:
46:74:2a:f1:fb:ab:e3:c1:cf:3d:54:e1:26:bf:b7:b9:9b:0c:
68:65:40:fb:b2:d1:8a:24:c5:2d:31:13:01:31:d8:c7:45:f9:
01:03:b8:74:fe:13:ac:33:06:6d:11:5b:8b:a4:18:05:f8:64:
09:f6:42:d1:27:98:9e:19:9e:d9:02:e2:4a:c7:f5:d6:62:bf:
9a:f4:35:80:0f:85:aa:7e:a7:7a:73:c9:59:07:f6:d0:05:3f:
a8:7c:60:e1:d4:46:37:9c:c7:86:e0:c6:c1:ba:82:43:1f:a5:
80:41:cc:cf:c6:9a:1b:c8:5b:bc:b4:09:28:a3:ca:46:d6:b9:
6b:10:11:36:f2:e8:f3:98:3a:ef:1e:f2:1b:fc:84:c8:f1:2f:
4c:1a:ed:d0:65:9c:23:9d:9f:bd:64:43:e5:35:90:c1:99:83:
eb:8e:03:f6:89:a7:d4:1d:01:d2:42:2f:9d:eb:31:21:f0:3e:
fe:1b:a5:98:89:de:83:5e:20:15:86:80:3a:c0:03:96:09:88:
c8:46:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net