Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: NGFZ/tS1MWtOKlIqHGFng2ounu8eggQbOjAV2m2qyUw=
Subject key identifier: A2:47:2E:64:92:9F:74:53:28:F3:2E:EA:3F:A6:BF:68:CD:BA:7E:83
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0F4C7C8FFAE6D8C52D39D582B6A333B8BDC3B6C2
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS23470.roa
Signing time: Wed 19 Feb 2025 05:49:22 +0000
ROA not before: Wed 19 Feb 2025 05:44:22 +0000
ROA not after: Wed 18 Feb 2026 05:49:22 +0000
asID: 23470
IP address blocks: 193.38.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4c:7c:8f:fa:e6:d8:c5:2d:39:d5:82:b6:a3:33:b8:bd:c3:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Feb 19 05:44:22 2025 GMT
Not After : Feb 18 05:49:22 2026 GMT
Subject: CN=A2472E64929F745328F32EEA3FA6BF68CDBA7E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:2d:73:73:ce:7e:e2:a9:38:94:ec:8a:94:
8b:3b:59:dd:5f:ee:10:20:a1:5e:47:be:80:76:3b:
7e:9c:41:c9:77:7d:1a:9b:38:3b:b7:4e:cc:8f:a7:
88:67:ce:c4:4d:e6:3e:ea:b6:5d:85:2f:38:52:06:
a2:0f:d4:92:51:b3:57:03:1d:d1:c7:5e:5e:69:71:
60:7b:b3:41:cf:e6:fe:75:18:7c:f3:82:09:e8:26:
0a:8a:b1:fc:c0:ad:81:38:a1:63:3e:29:cf:2b:1e:
b0:65:d5:63:ff:53:ab:fc:9e:f9:b8:7c:e2:7b:8f:
b7:5b:3f:c9:97:cc:1d:a5:84:91:59:ca:30:54:75:
0c:f6:3f:2f:fd:60:bc:74:08:32:f2:70:9f:b8:ba:
eb:be:ca:e1:11:4a:12:43:94:e9:fb:ea:d0:93:c3:
02:3f:f3:67:ae:85:69:7d:07:b5:b3:dc:37:ad:00:
db:a4:d1:5a:3b:45:ba:d6:88:dc:70:a9:3b:4b:9b:
79:23:ad:3d:44:ec:15:3e:99:7e:6c:a4:3b:ef:4a:
9e:00:ba:7a:11:fc:5d:a1:0e:8c:e8:05:b9:29:cf:
28:73:d1:b5:f6:21:93:29:e0:02:69:e8:95:14:90:
f5:27:82:39:b4:63:bc:2b:b4:ee:3f:fc:3f:8e:10:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:2E:64:92:9F:74:53:28:F3:2E:EA:3F:A6:BF:68:CD:BA:7E:83
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:97:74:7b:0b:8f:a2:5f:4f:d6:d8:d2:71:53:56:cc:59:82:
61:88:6d:fc:b0:44:5a:37:fb:2d:bc:39:77:87:41:e1:56:a3:
b9:59:7e:a8:bd:76:7d:69:da:31:57:2e:5a:18:36:59:17:b7:
4f:7b:d2:e6:b8:9c:1a:e0:72:f4:7e:96:4f:6d:3f:73:01:39:
a4:8a:5a:46:cc:7e:e2:7f:ec:0a:29:47:b4:31:3d:09:bf:34:
68:c5:9f:09:cc:96:98:b1:f3:c4:06:7b:5f:2f:d8:d9:80:2e:
15:10:d0:99:0d:ad:78:9b:41:32:06:46:b8:2b:6a:8f:69:e8:
da:d1:d7:1a:62:d9:61:47:69:b3:ad:64:6a:09:ca:2c:82:b3:
4f:01:cf:3d:22:13:47:0b:90:fa:55:fc:c5:4c:57:1c:2e:bb:
19:4a:27:bd:0d:b8:e0:fa:96:72:47:7d:c7:28:f7:5d:a2:a8:
19:53:f7:f0:74:84:e4:81:36:5e:77:dc:7c:d0:46:fc:ce:95:
e1:1d:fc:6d:85:fb:ee:1d:7e:57:73:34:4e:02:b7:0c:cd:d2:
92:47:8c:df:fe:b3:45:a4:bc:8a:3c:f5:3b:d0:a7:2f:49:2f:
b2:9e:56:83:ae:3d:2d:df:6b:e5:9d:5c:38:49:7c:47:b8:a0:
30:11:e2:8f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUD0x8j/rm2MUtOdWCtqMzuL3DtsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAyMTkwNTQ0MjJaFw0yNjAyMTgwNTQ5MjJaMDMxMTAvBgNV
BAMTKEEyNDcyRTY0OTI5Rjc0NTMyOEYzMkVFQTNGQTZCRjY4Q0RCQTdFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpS1zc85+4qk4lOyKlIs7Wd1f
7hAgoV5HvoB2O36cQcl3fRqbODu3TsyPp4hnzsRN5j7qtl2FLzhSBqIP1JJRs1cD
HdHHXl5pcWB7s0HP5v51GHzzggnoJgqKsfzArYE4oWM+Kc8rHrBl1WP/U6v8nvm4
fOJ7j7dbP8mXzB2lhJFZyjBUdQz2Py/9YLx0CDLycJ+4uuu+yuERShJDlOn76tCT
wwI/82euhWl9B7Wz3DetANuk0Vo7RbrWiNxwqTtLm3kjrT1E7BU+mX5spDvvSp4A
unoR/F2hDozoBbkpzyhz0bX2IZMp4AJp6JUUkPUngjm0Y7wrtO4//D+OEHcVAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUokcuZJKfdFMo8y7qP6a/aM26foMwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjM0NzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBJi4w
DQYJKoZIhvcNAQELBQADggEBAAyXdHsLj6JfT9bY0nFTVsxZgmGIbfywRFo3+y28
OXeHQeFWo7lZfqi9dn1p2jFXLloYNlkXt0970ua4nBrgcvR+lk9tP3MBOaSKWkbM
fuJ/7AopR7QxPQm/NGjFnwnMlpix88QGe18v2NmALhUQ0JkNrXibQTIGRrgrao9p
6NrR1xpi2WFHabOtZGoJyiyCs08Bzz0iE0cLkPpV/MVMVxwuuxlKJ70NuOD6lnJH
fcco912iqBlT9/B0hOSBNl533HzQRvzOleEd/G2F++4dfldzNE4CtwzN0pJHjN/+
s0WkvIo89TvQpy9JL7KeVoOuPS3fa+WdXDhJfEe4oDAR4o8=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:45 2025 by rpki-client on console.sobornost.net