Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: +QR3ffQUgsJ31pfUp+RIdAPi586HxaPD16BlkCmYluc=
Subject key identifier: 88:36:66:31:0D:8D:AC:91:8B:10:C6:66:05:C4:85:6E:96:60:77:3C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0C56629F4947B9C2ADAF1CE86897143C1E655501
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
Signing time: Tue 08 Apr 2025 19:23:50 +0000
ROA not before: Tue 08 Apr 2025 19:18:50 +0000
ROA not after: Tue 07 Apr 2026 19:23:50 +0000
asID: 215287
IP address blocks: 140.233.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:56:62:9f:49:47:b9:c2:ad:af:1c:e8:68:97:14:3c:1e:65:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 8 19:18:50 2025 GMT
Not After : Apr 7 19:23:50 2026 GMT
Subject: CN=883666310D8DAC918B10C66605C4856E9660773C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:88:df:c4:ed:c3:53:0d:d9:eb:1c:2e:38:
be:70:5d:01:5b:70:4d:56:47:43:c4:fa:f1:1e:47:
40:28:4d:73:aa:d5:70:e0:0e:33:11:ed:93:e8:14:
fd:d8:88:8c:7f:eb:97:f0:df:a7:74:d1:d9:99:2d:
8a:d2:19:ba:70:c7:f5:d2:f1:a3:54:da:54:f3:26:
5b:42:76:6b:a3:ca:a7:1f:63:ba:25:51:50:c3:0a:
c0:d2:98:d7:14:20:08:52:66:76:fb:52:bb:97:02:
33:5a:4b:7b:6a:bf:ea:52:ce:d7:2b:9a:f6:4d:a6:
3a:78:96:dc:56:50:69:7b:7c:41:62:f7:34:25:1e:
37:1d:57:30:17:98:57:99:0f:12:a2:81:23:70:54:
3a:f9:16:fe:f9:06:5c:73:a3:7f:94:6d:4f:74:8f:
60:29:f3:d4:5d:90:73:c1:4f:e9:13:1e:b2:4c:64:
03:b3:0f:5d:16:57:79:0c:29:24:4c:3b:4a:9e:76:
3f:0e:31:7a:06:8e:9c:7e:bc:b9:ca:a8:e2:88:2e:
5c:d9:14:e2:83:cf:8b:83:0f:d1:46:66:cb:62:57:
9f:fb:ca:61:7c:52:02:6f:60:df:ef:74:46:97:45:
e2:3b:a6:29:d3:b0:3b:44:89:74:ba:63:7a:76:19:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:66:31:0D:8D:AC:91:8B:10:C6:66:05:C4:85:6E:96:60:77:3C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f9:cc:5d:99:af:6b:ee:b3:f1:9b:cf:e0:63:73:65:65:d9:
8a:81:9e:4b:69:16:28:19:11:9f:1c:9d:36:2e:11:f6:de:7f:
71:5b:d4:04:71:fb:14:dc:5c:a5:93:7a:93:06:0c:99:f8:70:
67:a1:34:64:c8:96:25:4a:cf:43:db:7d:3d:0f:50:6f:f6:cd:
97:1e:32:bf:92:ad:06:66:08:76:ec:96:d7:fb:42:e1:d4:6d:
01:38:6f:92:43:22:bf:2a:8a:8d:2d:eb:03:a3:aa:0f:13:8b:
d1:fe:94:e0:38:72:3d:7c:53:bc:c1:33:51:3c:b8:fb:a7:bc:
e0:c4:8c:eb:a0:6e:85:99:10:e9:6f:92:ee:dc:4d:98:f3:b9:
ed:82:46:bb:94:b6:13:f9:bb:77:cd:f8:a1:0f:39:dd:ae:d0:
f4:d1:d0:8b:72:2a:dd:21:3a:db:39:23:ad:4f:75:7f:fc:ff:
af:4e:c2:cb:6f:6f:9e:22:03:7d:5a:5f:16:5d:4f:b6:ba:a5:
42:eb:1b:71:0c:fa:df:c4:52:5a:23:a3:5c:9c:d3:89:34:79:
a9:ce:24:0f:85:6c:1c:e8:84:a7:e0:06:a5:1b:38:27:83:ca:
0e:1f:36:1b:d2:8e:4a:c5:f2:72:3c:cc:88:d0:c5:02:21:72:
ed:08:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net