Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: HNjoN4CZDNqg8gqlRBhjgId6w7JuDP2IhfhBFnJH+fs=
Subject key identifier: A6:3A:9B:A6:DD:F9:DF:89:97:D4:DF:D7:06:DF:99:0A:5B:6A:8B:B6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 08632A232EE25C5ED258AE972A9DA8215EF0B385
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
Signing time: Sat 12 Apr 2025 12:43:08 +0000
ROA not before: Sat 12 Apr 2025 12:38:08 +0000
ROA not after: Sat 11 Apr 2026 12:43:08 +0000
asID: 51847
IP address blocks: 140.233.191.0/24 maxlen: 24
147.79.59.0/24 maxlen: 24
148.135.253.0/24 maxlen: 24
150.241.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:63:2a:23:2e:e2:5c:5e:d2:58:ae:97:2a:9d:a8:21:5e:f0:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 12 12:38:08 2025 GMT
Not After : Apr 11 12:43:08 2026 GMT
Subject: CN=A63A9BA6DDF9DF8997D4DFD706DF990A5B6A8BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:2d:ff:ec:96:a7:2d:34:2d:2d:98:b9:97:
b2:67:a5:d6:45:47:4c:78:9f:85:2d:ba:ee:28:8a:
ea:f3:f2:45:bd:47:fc:3d:ef:72:d3:be:a7:7c:3f:
24:2a:f3:a5:58:ec:43:80:99:dc:89:0f:4a:98:c2:
ad:a7:f2:ac:8b:eb:00:3f:28:35:b5:d7:68:b8:ee:
04:1a:71:14:cd:bb:d9:6f:25:2b:5e:a9:bd:1a:f0:
4e:b8:61:a0:bd:6b:a0:db:44:7a:52:b2:f7:fa:6c:
d4:ee:f5:64:86:f5:d7:b1:0f:e6:cf:92:84:40:85:
e4:be:00:b5:4a:e8:e8:ca:17:47:2a:6a:f5:c2:8d:
f2:0f:d2:f9:00:eb:f4:44:19:5e:bd:35:81:a5:26:
a3:02:da:95:f9:d6:96:da:22:04:a5:34:b6:8e:e4:
21:5e:a6:dd:58:e1:ed:6f:67:b0:96:fe:08:cc:1e:
e7:20:bd:7d:72:7b:0a:f7:6b:83:8c:b9:07:e1:49:
0c:68:ab:70:02:bc:95:02:96:70:9c:be:b8:1e:76:
a2:65:46:cf:42:3d:6e:40:16:63:48:c9:e8:e2:2a:
aa:98:e4:dc:79:17:75:86:de:32:7a:c5:5c:2b:e8:
76:41:70:5f:b8:52:15:7a:08:ce:0a:71:f4:91:cf:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3A:9B:A6:DD:F9:DF:89:97:D4:DF:D7:06:DF:99:0A:5B:6A:8B:B6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
147.79.59.0/24
148.135.253.0/24
150.241.210.0/23
Signature Algorithm: sha256WithRSAEncryption
30:a6:2d:2e:8d:7b:ce:19:57:e6:7a:db:5e:da:2e:5a:cf:d9:
01:cc:32:c5:04:83:e7:e4:8d:19:42:5c:24:22:40:d6:0f:39:
d3:be:0a:d5:4e:31:22:04:19:ad:a1:67:2c:c5:c4:27:74:2a:
c4:61:0f:71:59:49:e7:65:84:33:d9:54:03:86:b9:8b:75:df:
4d:67:75:86:3f:92:fd:11:d5:80:17:0c:81:b3:b3:91:4f:29:
6a:fc:93:6c:eb:8a:a5:b0:fc:1c:95:2a:c2:22:56:58:2c:6f:
93:7c:c6:54:a4:ab:24:a6:91:75:2b:77:b0:b9:c4:ff:a1:41:
ff:d0:29:bd:29:ea:d4:48:3d:e8:ed:6b:02:08:2c:ca:38:76:
01:f7:23:12:88:89:57:82:f2:56:8e:58:1e:c3:a5:fb:79:63:
54:02:fa:a3:74:ff:c7:c9:60:7b:a8:e7:ba:f3:f7:26:26:54:
5a:4a:91:96:51:ed:11:67:a9:83:39:85:a0:56:6f:f6:6d:e6:
25:74:0a:47:26:d4:f0:f0:fe:01:b2:c3:e6:02:f5:96:b5:0c:
f8:b4:c5:48:15:fa:d3:c8:57:f8:a6:c9:40:63:01:90:2e:a1:
f2:f0:72:4c:cd:2e:5f:15:fd:11:6d:01:49:b9:67:46:88:48:
71:77:08:9d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUCGMqIy7iXF7SWK6XKp2oIV7ws4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA0MTIxMjM4MDhaFw0yNjA0MTExMjQzMDhaMDMxMTAvBgNV
BAMTKEE2M0E5QkE2RERGOURGODk5N0Q0REZENzA2REY5OTBBNUI2QThCQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSi3/7JanLTQtLZi5l7JnpdZF
R0x4n4Utuu4oiurz8kW9R/w973LTvqd8PyQq86VY7EOAmdyJD0qYwq2n8qyL6wA/
KDW112i47gQacRTNu9lvJSteqb0a8E64YaC9a6DbRHpSsvf6bNTu9WSG9dexD+bP
koRAheS+ALVK6OjKF0cqavXCjfIP0vkA6/REGV69NYGlJqMC2pX51pbaIgSlNLaO
5CFept1Y4e1vZ7CW/gjMHucgvX1yewr3a4OMuQfhSQxoq3ACvJUClnCcvrgedqJl
Rs9CPW5AFmNIyejiKqqY5Nx5F3WG3jJ6xVwr6HZBcF+4UhV6CM4KcfSRzwGTAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUpjqbpt3534mX1N/XBt+ZCltqi7YwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTE4NDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACM6b8D
BACTTzsDBACUh/0DBAGW8dIwDQYJKoZIhvcNAQELBQADggEBADCmLS6Ne84ZV+Z6
217aLlrP2QHMMsUEg+fkjRlCXCQiQNYPOdO+CtVOMSIEGa2hZyzFxCd0KsRhD3FZ
SedlhDPZVAOGuYt1301ndYY/kv0R1YAXDIGzs5FPKWr8k2zriqWw/ByVKsIiVlgs
b5N8xlSkqySmkXUrd7C5xP+hQf/QKb0p6tRIPejtawIILMo4dgH3IxKIiVeC8laO
WB7Dpft5Y1QC+qN0/8fJYHuo57rz9yYmVFpKkZZR7RFnqYM5haBWb/Zt5iV0Ckcm
1PDw/gGyw+YC9Za1DPi0xUgV+tPIV/imyUBjAZAuofLwckzNLl8V/RFtAUm5Z0aI
SHF3CJ0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net