Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: iqvaaMuX7rtZrUCp9v8nc7ukLAXuwPz6P4/BYBTxyDQ=
Subject key identifier: 3B:6A:A2:90:78:75:B5:27:EB:A2:62:49:CC:79:8E:83:B9:BB:79:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A8D5CE8DF81F781EE3BB8EDB888D8A146CFDB6F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
Signing time: Thu 20 Mar 2025 00:01:59 +0000
ROA not before: Wed 19 Mar 2025 23:56:59 +0000
ROA not after: Thu 19 Mar 2026 00:01:59 +0000
asID: 4637
IP address blocks: 82.21.101.0/24 maxlen: 24
82.21.134.0/23 maxlen: 24
82.21.144.0/24 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.162.0/23 maxlen: 24
82.24.81.0/24 maxlen: 24
82.24.83.0/24 maxlen: 24
82.24.127.0/24 maxlen: 24
82.24.144.0/24 maxlen: 24
82.24.145.0/24 maxlen: 24
82.24.189.0/24 maxlen: 24
82.27.106.0/24 maxlen: 24
82.27.116.0/24 maxlen: 24
82.27.117.0/24 maxlen: 24
82.27.205.0/24 maxlen: 24
82.29.26.0/24 maxlen: 24
82.29.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8d:5c:e8:df:81:f7:81:ee:3b:b8:ed:b8:88:d8:a1:46:cf:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 19 23:56:59 2025 GMT
Not After : Mar 19 00:01:59 2026 GMT
Subject: CN=3B6AA2907875B527EBA26249CC798E83B9BB7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:b4:ba:0a:40:23:da:d5:cb:e8:a5:72:0a:
08:ae:28:78:03:6e:b8:09:07:c0:5b:56:02:8c:d6:
7a:92:24:c6:07:37:a2:91:f1:9b:62:1f:45:64:c8:
96:7f:05:e9:5d:ae:58:a0:b3:bc:74:8d:05:dd:41:
98:73:4c:66:52:46:b7:1e:a2:7c:fd:76:af:18:59:
66:18:e4:ac:cd:4c:29:67:64:ef:1f:c2:0a:66:db:
af:90:a0:b8:f9:f0:a8:f5:c7:1d:b3:0d:e2:bd:a7:
d8:32:8e:a5:0e:fc:95:bc:20:61:36:6f:92:8f:c6:
ad:91:2c:cc:f1:e0:7a:46:02:31:99:a0:e0:1d:20:
e6:bf:47:da:9d:fe:89:ae:d5:0d:a9:c5:50:fe:ca:
75:db:66:a6:ec:cc:3d:cc:5b:1e:3c:d4:e9:df:4b:
86:5e:fd:04:24:f9:40:e0:3b:7d:86:7b:56:4d:1e:
2f:19:2f:a3:77:3c:1a:0d:2b:ca:67:22:ac:7a:29:
9a:0f:d3:b9:69:99:92:3f:32:79:d4:82:a9:30:70:
2f:a5:07:9a:d3:db:6a:d1:44:7a:9c:b6:16:c8:b2:
7e:1d:ab:bb:99:b4:83:e6:4c:3b:b9:6b:66:c1:20:
32:a9:51:0d:19:52:35:3e:fb:d9:a9:48:66:9e:41:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:A2:90:78:75:B5:27:EB:A2:62:49:CC:79:8E:83:B9:BB:79:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.101.0/24
82.21.134.0/23
82.21.144.0/24
82.23.140.0/23
82.23.162.0/23
82.24.81.0/24
82.24.83.0/24
82.24.127.0/24
82.24.144.0/23
82.24.189.0/24
82.27.106.0/24
82.27.116.0/23
82.27.205.0/24
82.29.26.0/24
82.29.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5b:a9:26:f7:f8:0c:05:b6:06:f2:90:a1:cf:a5:e3:3c:85:
01:a7:bb:20:a9:62:9c:02:07:a4:db:7c:c7:95:6a:09:e9:0b:
ab:27:4b:c5:04:de:89:a9:29:16:23:f6:69:90:15:6e:d3:ac:
28:d0:10:0c:60:55:1a:92:2f:7f:7f:16:49:72:ca:7a:54:76:
51:0b:39:3c:38:af:92:3f:2b:d8:3e:cd:1f:c9:f8:cd:1d:13:
63:bb:44:0e:52:40:a3:4d:d5:dc:28:d0:5b:c1:5e:d7:78:cd:
54:c4:a9:e1:f7:82:8f:7f:88:72:66:4c:f0:be:c3:fb:1f:4b:
e6:01:3e:f5:ef:ae:e3:1f:df:ea:82:53:b8:c6:e3:f7:04:b3:
0f:47:3d:a5:bc:c1:e0:36:54:ce:60:c5:d4:9a:0a:25:0a:1d:
0d:94:56:0f:96:2e:4c:38:3b:76:a0:18:8c:d9:2f:45:12:49:
32:fc:8c:50:e2:23:19:15:4b:49:7a:1b:8b:2d:6b:b7:d7:2d:
db:91:72:d7:63:7a:ed:c1:f9:d4:4c:cb:0b:41:ad:d6:63:a2:
7f:5e:95:79:ac:25:c7:51:48:3b:c6:c1:8d:8e:7f:77:67:77:
65:c1:c4:88:14:60:51:4d:66:b8:f8:c0:31:1b:4c:4d:64:b6:
64:40:bc:ae
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUao1c6N+B94HuO7jtuIjYoUbP228wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAzMTkyMzU2NTlaFw0yNjAzMTkwMDAxNTlaMDMxMTAvBgNV
BAMTKDNCNkFBMjkwNzg3NUI1MjdFQkEyNjI0OUNDNzk4RTgzQjlCQjc5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOM7S6CkAj2tXL6KVyCgiuKHgD
brgJB8BbVgKM1nqSJMYHN6KR8ZtiH0VkyJZ/Beldrligs7x0jQXdQZhzTGZSRrce
onz9dq8YWWYY5KzNTClnZO8fwgpm26+QoLj58Kj1xx2zDeK9p9gyjqUO/JW8IGE2
b5KPxq2RLMzx4HpGAjGZoOAdIOa/R9qd/omu1Q2pxVD+ynXbZqbszD3MWx481Onf
S4Ze/QQk+UDgO32Ge1ZNHi8ZL6N3PBoNK8pnIqx6KZoP07lpmZI/MnnUgqkwcC+l
B5rT22rRRHqcthbIsn4dq7uZtIPmTDu5a2bBIDKpUQ0ZUjU++9mpSGaeQcqXAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUO2qikHh1tSfromJJzHmOg7m7eXYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDYzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBzBggrBgEFBQcBBwEB/wRkMGIwYAQCAAEwWgMEAFIVZQME
AVIVhgMEAFIVkAMEAVIXjAMEAVIXogMEAFIYUQMEAFIYUwMEAFIYfwMEAVIYkAME
AFIYvQMEAFIbagMEAVIbdAMEAFIbzQMEAFIdGgMEAFIdSzANBgkqhkiG9w0BAQsF
AAOCAQEAqFupJvf4DAW2BvKQoc+l4zyFAae7IKlinAIHpNt8x5VqCekLqydLxQTe
iakpFiP2aZAVbtOsKNAQDGBVGpIvf38WSXLKelR2UQs5PDivkj8r2D7NH8n4zR0T
Y7tEDlJAo03V3CjQW8Fe13jNVMSp4feCj3+IcmZM8L7D+x9L5gE+9e+u4x/f6oJT
uMbj9wSzD0c9pbzB4DZUzmDF1JoKJQodDZRWD5YuTDg7dqAYjNkvRRJJMvyMUOIj
GRVLSXobiy1rt9ct25Fy12N67cH51EzLC0Gt1mOif16Veawlx1FIO8bBjY5/d2d3
ZcHEiBRgUU1muPjAMRtMTWS2ZEC8rg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net