Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: dJuDjBSJAOjkl3JvkiGY0n4VlCCjmKl6Is1IbeMV8JI=
Subject key identifier: BB:C2:02:7B:D3:16:C2:04:EA:DD:BA:BF:FC:B1:8F:3E:30:CF:6C:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 092438B667955BBA07E6B718F5CA480D7C1C18CD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Sat 12 Apr 2025 00:01:57 +0000
ROA not before: Fri 11 Apr 2025 23:56:57 +0000
ROA not after: Sat 11 Apr 2026 00:01:57 +0000
asID: 29802
IP address blocks: 145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.128.0/24 maxlen: 24
150.241.233.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:24:38:b6:67:95:5b:ba:07:e6:b7:18:f5:ca:48:0d:7c:1c:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 11 23:56:57 2025 GMT
Not After : Apr 11 00:01:57 2026 GMT
Subject: CN=BBC2027BD316C204EADDBABFFCB18F3E30CF6C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:d7:f4:f7:d3:dc:3b:3c:40:06:9f:09:4b:
c8:7c:5e:07:57:2d:22:93:ee:9a:d7:e8:7e:5b:8d:
0e:a5:b4:b2:6f:dd:af:b0:34:c0:34:32:aa:1e:f1:
55:b3:e8:a6:80:59:2b:b5:d6:7c:27:ed:36:7e:28:
62:0a:1a:a5:66:c4:63:be:fa:cd:55:0a:ff:0c:86:
95:8b:86:2d:e2:a5:d5:df:c7:84:6d:e5:77:e2:38:
3b:40:d1:58:17:e9:2a:b4:eb:3a:7b:02:35:00:e6:
7f:5d:a0:7f:1f:e0:c7:41:cb:b3:c0:e3:93:18:25:
10:bc:df:54:a2:b6:ca:d1:d1:32:e1:1a:1d:6d:fc:
24:7d:18:2a:31:97:7d:88:77:e3:4e:37:77:e3:62:
e9:51:d4:fb:f9:8c:09:1d:73:51:b8:ad:f5:52:d7:
44:30:a8:3e:de:39:be:3b:42:bd:81:63:73:93:7b:
43:1e:8d:85:14:8e:c4:5f:41:34:b8:27:8c:70:ce:
04:4e:7d:50:aa:c4:e9:35:10:df:b8:e3:e3:fc:6d:
c5:0b:33:d8:e8:48:28:df:1f:93:51:9c:e8:c6:0c:
4a:c3:98:04:b6:4b:e7:9c:f9:25:2e:82:cf:d8:dc:
69:fb:6e:6c:de:fe:5a:6a:a7:4d:0b:a1:a1:47:59:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:02:7B:D3:16:C2:04:EA:DD:BA:BF:FC:B1:8F:3E:30:CF:6C:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
148.135.178.0/23
148.135.191.0/24
148.135.254.0/24
150.241.128.0/24
150.241.233.0/24
150.241.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5f:6e:c6:58:6f:2c:e6:7f:b5:cb:06:8a:68:2a:f1:12:8a:
f5:8a:f6:7c:0c:17:e2:0c:54:be:14:95:2c:3b:16:b6:bc:e2:
5f:97:7e:72:0a:c0:5a:b2:8b:51:c7:f0:0f:88:42:d2:a4:7a:
57:5f:71:17:15:2e:f8:fa:b4:d7:15:10:34:57:5e:24:13:29:
58:c4:ae:60:c5:83:92:3d:00:a1:70:d6:02:3e:90:8b:e2:60:
ba:90:3b:56:0b:cb:22:4f:b2:cc:54:18:c7:a0:24:70:f2:4b:
2f:ea:83:1c:7b:5f:75:ea:0e:c0:3f:e7:89:17:18:21:e0:dd:
a1:04:30:97:b8:62:47:25:83:28:8d:e4:fa:0e:f8:e6:80:6f:
47:b7:50:25:18:e4:a0:05:ba:4f:24:b4:3a:01:09:ef:79:73:
6f:c6:aa:d8:9e:19:b0:50:c6:41:57:89:fe:f5:ac:23:9a:a5:
88:3e:1d:24:84:84:83:56:e9:f6:fc:eb:49:14:e6:2b:0f:ac:
78:70:2d:25:78:10:49:01:66:b4:e5:b8:d9:59:22:c1:6c:32:
03:a0:93:7a:a0:f8:02:fd:3e:b2:2f:c4:f7:26:d9:5f:f5:04:
df:a8:a3:19:88:e4:9d:dc:ce:71:38:13:a7:65:af:72:88:fa:
a9:e5:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net