Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: Ceu4rzP/8Sdz1awR+O8Oy+M9zYu/KZNcXlqteoJmkzQ=
Subject key identifier: 73:02:9A:9F:B3:FB:EA:C1:CD:3E:FB:74:C1:3C:B0:8E:E1:B7:6D:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7FD272CF0588833E2004744BFED71E42CCB6714C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Wed 12 Feb 2025 13:00:32 +0000
ROA not before: Wed 12 Feb 2025 12:55:32 +0000
ROA not after: Wed 11 Feb 2026 13:00:32 +0000
asID: 137235
IP address blocks: 82.27.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d2:72:cf:05:88:83:3e:20:04:74:4b:fe:d7:1e:42:cc:b6:71:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 12 12:55:32 2025 GMT
Not After : Feb 11 13:00:32 2026 GMT
Subject: CN=73029A9FB3FBEAC1CD3EFB74C13CB08EE1B76D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:8c:7d:eb:d3:19:88:e8:76:47:d9:02:1c:
f8:f7:e2:38:1d:99:58:1d:69:bb:77:ef:e3:95:7e:
b9:a6:4f:19:de:0f:92:42:fd:8b:c8:2f:80:45:81:
97:ba:7d:8b:60:b0:28:f8:f9:d4:9e:89:12:86:24:
ff:43:db:e0:a6:1e:19:da:76:ec:ae:98:90:3f:0d:
6c:f5:43:57:75:63:07:9c:c4:12:b9:32:fb:1c:91:
09:56:3d:a0:cb:00:ea:b4:62:13:59:40:7e:00:6b:
63:52:92:6b:77:39:5b:08:f6:57:0e:65:01:53:2b:
ca:47:a7:1e:4f:36:96:46:0b:ed:17:1c:fa:c2:9b:
fd:8f:07:89:67:94:1f:36:3a:a1:27:14:81:1a:22:
52:03:1c:e3:e9:d7:c8:f9:a8:51:0c:06:9f:07:75:
7b:58:65:be:60:d0:d9:0c:63:d9:85:1c:d9:c0:43:
63:2e:b6:79:8a:74:4f:00:88:b1:3c:ee:9c:b4:cb:
d7:b8:96:bf:df:39:08:84:09:4b:d0:5d:c8:1b:7f:
c7:f1:74:8e:b9:cb:dd:a0:29:78:f6:70:b6:46:50:
7c:69:67:e8:87:b5:67:b0:0d:f8:6f:93:f8:be:7f:
15:cd:b4:77:d0:cf:eb:92:0a:bc:7d:07:82:0e:0e:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:9A:9F:B3:FB:EA:C1:CD:3E:FB:74:C1:3C:B0:8E:E1:B7:6D:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.199.0/24
Signature Algorithm: sha256WithRSAEncryption
25:73:95:a9:6d:05:3b:2c:aa:52:ce:82:c9:7e:d3:54:51:08:
56:1d:bf:70:5b:ee:b5:bf:40:48:c9:83:81:2c:02:92:34:14:
69:f3:ef:84:c1:90:5d:86:46:cb:27:b5:69:74:71:f7:99:d9:
00:96:62:01:e3:28:31:f3:79:4a:41:59:d7:ef:3a:93:0c:2c:
f6:50:22:74:81:e4:f9:eb:64:1f:56:6b:06:3f:8c:af:28:55:
42:23:51:f8:72:5d:cc:70:f7:42:a8:c2:10:78:a1:6e:b5:29:
e8:7b:43:0f:94:a0:e2:f0:6e:bf:46:a1:12:2a:2b:56:a7:02:
4e:21:2b:ba:81:00:8a:c9:85:03:03:ac:71:8d:fd:7f:02:5a:
1f:4c:f9:e7:4a:00:88:ec:27:e3:ae:13:d3:1a:38:b4:0b:96:
9d:d2:46:83:17:9a:5b:30:26:4b:b1:6c:77:d4:14:d4:69:37:
b3:25:e6:eb:c4:d3:87:ba:d9:d4:ca:54:48:24:cf:30:55:91:
9e:bb:ef:dc:c6:06:91:0f:9f:c6:6c:42:44:f1:01:b1:3e:e0:
5c:75:17:83:7e:f8:37:20:55:0f:68:6b:12:00:44:6b:d5:7e:
3e:64:f4:f5:9c:82:5d:c3:fa:e4:a9:dd:8d:d8:2e:08:6b:59:
81:6c:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net