Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: kTOzQ9i+dJTpm8pEIMDCRQCX6nW1FC6Tl1PCt6iBW+k=
Subject key identifier: 20:78:75:EF:18:34:B3:EC:DC:48:EE:C3:9D:09:6E:2C:F0:AC:A7:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 68270F767E2A25A9BF7F99416499FBF70E66B2D9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Thu 10 Apr 2025 02:15:13 +0000
ROA not before: Thu 10 Apr 2025 02:10:13 +0000
ROA not after: Thu 09 Apr 2026 02:15:13 +0000
asID: 21859
IP address blocks: 147.79.1.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:27:0f:76:7e:2a:25:a9:bf:7f:99:41:64:99:fb:f7:0e:66:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 10 02:10:13 2025 GMT
Not After : Apr 9 02:15:13 2026 GMT
Subject: CN=207875EF1834B3ECDC48EEC39D096E2CF0ACA7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:ff:6f:fb:4c:30:29:3d:06:f9:32:80:1b:
1b:e0:94:8f:1d:05:77:fd:82:11:bf:80:97:67:92:
90:39:11:6d:61:80:dc:7f:25:d6:22:d3:55:37:0b:
4b:1f:4b:70:7e:b6:0b:f3:f3:78:92:10:f6:26:b7:
87:6e:d4:f6:57:08:fa:1f:06:a7:30:ad:7f:2f:b9:
57:bd:2c:c1:4b:6a:25:c5:93:19:89:35:1a:c6:e3:
59:a8:66:e6:6d:3d:85:84:bd:79:e7:68:19:9b:62:
d2:f3:58:d0:53:c6:1e:d0:7a:d8:fe:d0:3b:1f:c8:
29:dc:f6:1d:ee:6d:15:39:bd:ba:94:85:24:df:ac:
8e:91:07:b2:f6:4e:2a:75:60:13:eb:03:0a:9b:65:
c2:7e:5e:2c:5b:75:0d:fe:5d:5e:60:aa:96:05:d5:
7a:52:f1:a9:60:e2:ae:aa:8f:a8:20:dd:f4:9f:3f:
83:71:ee:b9:e2:e9:13:26:7c:a6:a6:9e:26:fc:a6:
31:5b:18:bc:cc:51:1b:ff:99:b9:3c:7c:07:47:ab:
ee:6d:3d:cb:af:87:af:63:fd:ae:8f:6f:96:0c:6b:
eb:f2:b0:09:b7:78:2d:25:ea:ea:3f:a6:fb:f1:85:
b5:49:38:7a:4e:c1:77:83:2e:e1:30:83:9f:81:61:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:75:EF:18:34:B3:EC:DC:48:EE:C3:9D:09:6E:2C:F0:AC:A7:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
148.135.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d3:36:25:3d:85:2c:b3:7d:e7:87:78:c6:c3:3e:e9:76:1e:
5b:df:9b:24:a7:55:23:74:1d:96:47:5c:29:1b:0b:58:39:04:
d7:ce:e7:f3:cf:a9:38:7c:01:50:8f:bd:83:03:b3:d1:4a:e2:
b2:ce:7d:5e:42:42:4d:74:3d:c0:0e:54:8e:98:fa:aa:54:7b:
15:f0:e6:eb:2a:ea:ed:7e:bb:44:64:3d:13:47:3f:64:7e:57:
2f:69:51:9c:76:38:ee:e7:59:49:fd:53:ed:78:f2:b3:a2:0d:
ea:27:5d:46:d2:f8:4e:b3:e6:36:b0:cc:ea:25:9e:b1:f5:2f:
20:9d:0d:0f:f4:23:1d:ab:e8:7f:c6:28:7f:2a:0c:ba:91:31:
ec:a3:b1:5a:6b:4d:b8:0a:14:f4:0f:1b:e0:0c:fb:f0:fe:07:
63:05:2e:9d:bb:6f:b0:3e:ee:54:8d:fb:a8:ce:32:bc:08:f2:
56:32:bb:ae:f6:c6:a0:5c:78:67:08:c0:5a:a9:7a:6d:5b:16:
95:02:0a:aa:f2:bc:9a:e1:d1:4c:64:7b:88:a8:c0:4d:99:f0:
1d:9f:3b:5d:e1:25:31:25:f6:d3:aa:a8:6d:91:43:7d:a9:9b:
6c:5f:fc:f8:65:95:66:c5:76:a9:4b:e2:da:f1:86:0e:55:6f:
05:e6:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net