Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212762.roa
File: AS212762.roa (raw, json)
Hash identifier: BPzd4QgHe/UJWtDHI5qozvkmYvlfe0mYHO5RZ1x9uGo=
Subject key identifier: 80:08:74:07:E5:EF:BD:11:46:22:4A:BA:9A:A1:C3:76:49:32:17:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 015F62AB8C39DD4C65AFB19AB7471F2CC5F220B3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212762.roa
Signing time: Fri 11 Apr 2025 16:54:01 +0000
ROA not before: Fri 11 Apr 2025 16:49:01 +0000
ROA not after: Fri 10 Apr 2026 16:54:01 +0000
asID: 212762
IP address blocks: 146.103.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5f:62:ab:8c:39:dd:4c:65:af:b1:9a:b7:47:1f:2c:c5:f2:20:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 11 16:49:01 2025 GMT
Not After : Apr 10 16:54:01 2026 GMT
Subject: CN=80087407E5EFBD1146224ABA9AA1C3764932179E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:6a:58:09:4f:d3:00:5c:9a:38:ed:12:af:
fe:38:0c:3e:9e:1e:e0:61:d6:c2:45:93:7d:aa:96:
2b:fa:2b:c1:8a:ec:29:dc:3b:7e:ae:24:f4:f1:34:
a7:18:d5:c6:d8:e8:b7:78:b0:87:be:19:87:e2:c3:
4a:ad:0b:fc:c2:d9:ed:b3:52:6e:2a:f6:98:89:12:
17:a9:cf:6e:83:f0:be:47:c7:e7:fc:d9:30:ea:92:
03:90:36:a7:e6:ce:34:0d:67:87:43:ed:73:7b:ab:
1b:ac:80:8b:98:e9:18:a1:39:7c:e3:4a:9b:fe:d9:
eb:b5:5b:74:c0:cc:cb:cb:92:f9:2e:aa:0a:5f:87:
83:39:98:4f:8a:8c:78:14:47:2a:5a:f5:d2:c3:61:
a5:c1:7f:b0:76:b9:81:66:15:d8:61:44:8f:71:52:
7a:a3:3d:0a:0f:96:b6:06:37:b8:c4:97:53:7d:d2:
17:11:64:4f:78:8c:6a:e4:9e:b5:0c:71:e8:82:46:
cc:6e:be:67:79:15:dc:5a:d8:b2:66:ec:1d:2f:9a:
10:57:ae:a1:06:68:28:78:ed:22:fc:36:0f:4a:ac:
18:ab:ff:61:dd:11:45:c4:08:a1:5a:da:d8:04:b9:
2b:62:7c:60:f6:d8:9a:d1:ed:94:1b:ff:9e:94:2d:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:74:07:E5:EF:BD:11:46:22:4A:BA:9A:A1:C3:76:49:32:17:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:42:f6:84:b0:be:35:ea:bb:76:31:b6:82:46:41:dc:67:84:
7d:6b:30:55:67:91:8c:a0:af:32:3b:e5:67:4b:e4:87:8c:7c:
13:c9:65:15:51:89:49:57:14:c1:ef:c9:b2:dc:c9:21:2a:3a:
00:e5:00:b7:af:4e:b4:e4:53:88:32:c4:f7:df:95:dd:59:cb:
d3:91:87:ef:8d:0c:f5:f5:8d:5b:4f:68:a0:15:c4:56:dc:bf:
8e:63:63:68:75:ed:56:24:00:65:31:2e:c8:1d:c7:49:da:4d:
96:3b:96:4f:4b:10:ff:88:a8:56:07:2b:e2:c9:57:e1:22:21:
74:4d:e9:01:a3:6b:73:ff:bc:06:34:d3:1c:9b:6a:73:e1:68:
22:42:f0:06:63:5c:d4:a2:81:44:54:cb:d5:3b:bb:9f:6d:20:
a0:19:24:71:7e:30:4b:01:65:ae:d9:0b:fb:d3:9d:52:95:21:
0b:5b:99:c3:d9:05:00:55:72:8d:f8:61:fd:2d:7e:22:1e:33:
26:fd:ee:5c:c4:6a:1f:af:a0:49:53:c4:88:77:e5:ca:5a:4e:
4e:03:92:cc:3b:ee:58:69:c4:59:1a:05:e4:45:71:45:bb:de:
f3:66:9f:de:50:a6:e2:00:34:8d:22:60:8e:db:5f:8a:c9:4e:
29:72:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net