Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: 47pxgwOcH2pwZ84G7T4A8aTmtAhZnqRdD3Usowik5go=
Subject key identifier: D7:A9:4E:BA:87:AC:88:A8:DC:D7:91:A0:40:1B:5A:87:29:D0:3D:07
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 13A0E223F26FE1A03B8E235CAC1019A5D5080742
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
Signing time: Sun 16 Mar 2025 12:07:31 +0000
ROA not before: Sun 16 Mar 2025 12:02:31 +0000
ROA not after: Sun 15 Mar 2026 12:07:31 +0000
asID: 206119
IP address blocks: 46.202.226.0/24 maxlen: 24
91.124.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a0:e2:23:f2:6f:e1:a0:3b:8e:23:5c:ac:10:19:a5:d5:08:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 16 12:02:31 2025 GMT
Not After : Mar 15 12:07:31 2026 GMT
Subject: CN=D7A94EBA87AC88A8DCD791A0401B5A8729D03D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:79:e3:b7:e6:62:1b:6c:a4:c4:22:71:c4:
71:3e:81:25:48:f1:94:e6:8b:60:ec:3b:ef:e1:f3:
d7:b8:ff:2d:bf:b2:49:6d:0f:71:57:b6:f1:25:d7:
46:f2:7f:29:9b:e4:61:e2:aa:0a:56:bd:81:9d:a1:
38:bf:c2:76:81:88:07:17:8d:46:10:cc:7e:d7:62:
9c:a0:2e:d7:66:48:f5:0c:34:3c:38:66:61:e2:21:
c3:53:b3:e4:87:f4:8a:5a:1e:18:62:aa:9e:0a:ae:
fc:ca:66:dd:0c:9d:78:fa:f6:fb:cc:df:a8:29:4b:
92:a8:1d:8d:4c:49:f0:d6:a7:34:70:38:a5:3e:d1:
62:2e:9b:9a:53:dc:2c:15:65:0d:4a:2c:3b:9c:21:
c0:de:f2:15:23:cb:5e:10:a3:58:31:50:15:18:ca:
92:86:58:a7:37:cc:22:7d:47:a2:bd:57:db:19:e9:
85:f9:a0:c4:47:77:32:fb:83:13:8d:7c:87:82:23:
30:40:47:ee:27:1f:5b:4e:08:5c:0c:6e:a3:48:14:
f4:cf:d9:58:e4:81:7d:f3:bc:d2:26:fb:61:6f:47:
93:6d:aa:0b:19:30:92:82:38:46:a4:49:8f:11:13:
b3:07:d5:5c:4d:82:12:aa:63:77:e2:36:71:1b:11:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:4E:BA:87:AC:88:A8:DC:D7:91:A0:40:1B:5A:87:29:D0:3D:07
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.226.0/24
91.124.91.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fb:c7:90:df:6e:0c:65:f9:29:c8:17:f7:3f:2f:47:b5:61:
01:11:d6:40:66:b2:ac:6f:f2:16:02:cb:c3:17:0a:60:a5:4b:
86:db:8b:f6:81:6a:30:6f:d9:f8:33:24:14:8c:ce:0a:07:3d:
86:7c:5b:15:7a:ab:b8:8a:5c:a6:05:ef:33:97:67:2a:d7:22:
f3:5f:f8:84:96:b6:04:55:9e:64:b9:9b:cd:c4:c8:f8:d1:25:
d5:9a:8a:82:c4:6a:ca:0b:fe:95:40:fa:0b:74:24:9b:4c:13:
10:35:ed:58:07:31:8b:10:82:b2:68:40:c8:00:3f:81:20:a6:
4d:ce:81:ff:2c:93:a0:f9:30:bf:a8:1c:2f:21:6c:13:56:c0:
74:77:c3:a9:8f:73:70:ed:bd:2f:c6:39:05:7f:8d:9d:42:13:
77:32:ba:aa:88:1a:72:e0:9b:e5:6c:70:5e:6d:23:de:67:30:
57:64:77:58:13:da:c2:a6:e3:03:00:3d:6e:ad:2b:02:80:f1:
4e:af:9c:08:9e:42:c3:6b:3c:97:87:65:33:95:f8:22:c1:d9:
d3:b1:b1:f3:69:a4:03:88:08:75:31:c4:24:eb:8b:b3:a9:ce:
0c:7a:e0:b0:cc:e0:ad:d9:93:2d:24:96:45:86:ec:be:d2:bd:
d2:15:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net