Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
File: AS19577.roa (raw, json)
Hash identifier: sqSXcB1MIC5sA/2wAcHOVF/CSLqZVhAkoX/B1SH0/XA=
Subject key identifier: 27:62:29:A2:E6:2D:30:93:96:2C:22:EB:A0:61:B5:41:1F:61:AF:0C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6E168AB2FEE4864C8AC0C3410EECDD13506423
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
Signing time: Sat 22 Mar 2025 21:31:11 +0000
ROA not before: Sat 22 Mar 2025 21:26:11 +0000
ROA not after: Sat 21 Mar 2026 21:31:11 +0000
asID: 19577
IP address blocks: 46.202.33.0/24 maxlen: 24
46.202.40.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:16:8a:b2:fe:e4:86:4c:8a:c0:c3:41:0e:ec:dd:13:50:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 22 21:26:11 2025 GMT
Not After : Mar 21 21:31:11 2026 GMT
Subject: CN=276229A2E62D3093962C22EBA061B5411F61AF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:c1:b3:88:bb:97:2e:47:3b:af:c2:ab:4d:
11:84:e7:4f:a8:18:38:ee:6a:34:9e:5c:1c:b6:c6:
41:25:0c:7a:04:26:59:79:e6:1b:89:96:2c:a4:e8:
08:f7:04:cd:9a:c0:3a:5b:64:ca:51:04:78:fb:22:
ad:fe:62:f1:f2:8c:2b:37:cf:09:82:ff:40:36:42:
db:1b:f1:5b:95:21:e4:30:d3:cd:a5:d8:7e:c4:43:
de:c7:9a:38:28:e6:8c:fd:9f:95:5e:48:24:f6:82:
e7:23:80:63:1a:af:66:ad:fe:eb:2c:39:b5:b6:3a:
50:87:39:a6:b8:39:08:6d:c2:16:71:49:a6:83:ab:
8d:26:e7:e9:ce:c7:74:c7:cd:67:9f:f0:3e:b8:15:
6c:49:4a:1f:c1:b8:b0:25:f9:0d:e7:50:55:fd:de:
fe:2d:08:ad:04:6e:38:85:05:f0:46:e2:05:fa:e9:
8d:1c:13:2d:5f:5c:24:68:0a:66:05:d0:3f:07:be:
f7:f8:d0:d4:af:55:0d:30:77:f4:cd:75:70:9e:f3:
7c:54:4b:1d:7b:2c:0b:55:39:3f:bf:4c:dd:44:85:
d6:78:34:16:a9:c0:30:25:21:25:30:17:2a:1c:e3:
58:1c:03:ed:69:41:0e:e9:66:d3:a5:7e:0a:40:e9:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:29:A2:E6:2D:30:93:96:2C:22:EB:A0:61:B5:41:1F:61:AF:0C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.33.0/24
46.202.40.0/24
91.124.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ff:78:61:9f:ca:54:85:4c:a0:37:23:5b:f0:f4:ba:00:02:
9a:f6:7d:f5:02:1a:66:bf:90:df:e4:13:c1:35:5c:b8:5a:5c:
a7:8b:de:33:15:b7:bb:4c:6c:98:55:1d:0c:b8:3a:a5:d6:a4:
73:6e:0b:c4:34:26:ef:c6:e7:2d:4d:60:5f:2c:6e:c2:da:9d:
4b:43:56:a9:97:04:66:b1:51:23:f2:57:8a:66:7b:62:f2:13:
20:b1:23:69:5a:43:40:c5:45:92:47:64:e3:a4:73:14:fc:75:
3a:91:c4:cb:89:d3:a0:86:20:72:d2:00:0b:4b:99:81:65:34:
3a:0e:ac:07:fd:db:7c:e0:e5:0f:c5:5c:93:6c:7a:09:de:81:
21:e1:81:9a:54:34:fa:15:ee:47:ff:2f:89:b6:7d:3e:77:e0:
e8:ac:f3:b2:95:20:e5:82:1b:e5:ae:49:4b:af:3a:ab:cd:ec:
28:85:0e:f1:94:ad:50:fa:b4:41:6d:c1:bc:ef:2c:59:7c:ce:
3d:54:83:46:53:58:cc:2f:71:54:40:9c:a5:73:0f:e8:77:55:
9a:65:58:32:85:31:06:cf:30:a0:19:15:43:2f:40:8e:6c:ed:
8a:d2:94:81:13:ac:10:35:da:51:1e:3b:50:2a:7d:04:33:82:
46:9d:5f:d3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgITbhaKsv7khkyKwMNBDuzdE1BkIzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5YmQ4MTMzOTFlNGFmMmFlMzEwM2MxODkxYjIyNzJkNGQ1
YzEzYjVmMB4XDTI1MDMyMjIxMjYxMVoXDTI2MDMyMTIxMzExMVowMzExMC8GA1UE
AxMoMjc2MjI5QTJFNjJEMzA5Mzk2MkMyMkVCQTA2MUI1NDExRjYxQUYwQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANlTwbOIu5cuRzuvwqtNEYTnT6gY
OO5qNJ5cHLbGQSUMegQmWXnmG4mWLKToCPcEzZrAOltkylEEePsirf5i8fKMKzfP
CYL/QDZC2xvxW5Uh5DDTzaXYfsRD3seaOCjmjP2flV5IJPaC5yOAYxqvZq3+6yw5
tbY6UIc5prg5CG3CFnFJpoOrjSbn6c7HdMfNZ5/wPrgVbElKH8G4sCX5DedQVf3e
/i0IrQRuOIUF8EbiBfrpjRwTLV9cJGgKZgXQPwe+9/jQ1K9VDTB39M11cJ7zfFRL
HXssC1U5P79M3USF1ng0FqnAMCUhJTAXKhzjWBwD7WlBDulm06V+CkDpSAMCAwEA
AaOCAhUwggIRMB0GA1UdDgQWBBQnYimi5i0wk5YsIuugYbVBH2GvDDAfBgNVHSME
GDAWgBSb2BM5HkryrjEDwYkbInLU1cE7XzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9jNDc4ZjZmNS00NDlhLTQ4MjctOTlkNS1iZjZiOTNhOGY2
YjQvMC85QkQ4MTMzOTFFNEFGMkFFMzEwM0MxODkxQjIyNzJENEQ1QzEzQjVGLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbTlnVE9SNUs4cTR4QThHSkd5SnkxTlhC
TzE4LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00
ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvQVMxOTU3Ny5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC7KIQME
AC7KKAMEAFt88TANBgkqhkiG9w0BAQsFAAOCAQEAPP94YZ/KVIVMoDcjW/D0ugAC
mvZ99QIaZr+Q3+QTwTVcuFpcp4veMxW3u0xsmFUdDLg6pdakc24LxDQm78bnLU1g
XyxuwtqdS0NWqZcEZrFRI/JXimZ7YvITILEjaVpDQMVFkkdk46RzFPx1OpHEy4nT
oIYgctIAC0uZgWU0Og6sB/3bfODlD8Vck2x6Cd6BIeGBmlQ0+hXuR/8vibZ9Pnfg
6KzzspUg5YIb5a5JS686q83sKIUO8ZStUPq0QW3BvO8sWXzOPVSDRlNYzC9xVECc
pXMP6HdVmmVYMoUxBs8woBkVQy9AjmztitKUgROsEDXaUR47UCp9BDOCRp1f0w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net