Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209474.roa
File: AS209474.roa (raw, json)
Hash identifier: C5ejbsuHkTwFq7uWpe+33C3Bf+LU5k6SCikXJt4tscE=
Subject key identifier: B2:38:7F:08:FC:52:7B:C3:CC:19:53:EB:8F:D9:2F:2A:41:00:D3:EF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 179A5F41F132DA0096E5D8E280B9B35CE0C0405B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209474.roa
Signing time: Wed 19 Mar 2025 13:53:58 +0000
ROA not before: Wed 19 Mar 2025 13:48:58 +0000
ROA not after: Wed 18 Mar 2026 13:53:58 +0000
asID: 209474
IP address blocks: 91.124.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9a:5f:41:f1:32:da:00:96:e5:d8:e2:80:b9:b3:5c:e0:c0:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 19 13:48:58 2025 GMT
Not After : Mar 18 13:53:58 2026 GMT
Subject: CN=B2387F08FC527BC3CC1953EB8FD92F2A4100D3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:27:98:39:8d:7e:4a:3d:a4:e0:0d:ab:06:
c8:27:8b:da:1c:93:d8:9a:bd:88:e2:81:26:25:83:
d5:36:ec:56:cc:40:ba:83:06:ab:10:dd:cb:f7:68:
a2:6f:bd:c3:66:4d:2e:c2:4c:47:a8:99:14:31:75:
3b:af:8d:92:14:61:4e:28:31:8d:62:03:b6:a1:c3:
ea:5c:ef:ce:70:eb:41:1e:76:82:1d:ad:e9:47:a1:
18:e0:0f:f6:02:00:14:19:da:de:00:7c:f7:4a:a6:
b5:2c:ea:47:86:78:df:68:9f:54:ae:28:b8:bb:b5:
a0:d0:5e:4e:b7:2f:5a:35:e5:30:9f:78:33:2b:4d:
50:3f:c7:5c:e4:e4:49:57:99:97:cc:5e:2d:4b:51:
e3:91:47:f7:b7:db:eb:fd:7b:9a:02:5d:b1:09:0b:
4d:b2:6c:93:15:bc:e9:a1:64:e3:a9:c8:98:89:34:
d0:f9:77:51:a3:12:6e:96:d8:de:2c:1d:36:e3:2f:
77:e1:3a:5f:e7:42:83:c2:fe:69:38:80:fa:b5:cf:
48:5c:0c:e1:17:73:04:d9:7b:17:e7:87:69:a2:98:
b0:e4:11:0e:cd:8b:5f:7c:a1:7a:49:64:25:99:67:
c4:d5:45:9a:34:0e:7b:ff:06:04:51:42:99:4b:d3:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:7F:08:FC:52:7B:C3:CC:19:53:EB:8F:D9:2F:2A:41:00:D3:EF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:30:06:12:97:19:db:1e:e2:a7:74:e4:9d:00:cd:e4:b1:3e:
37:c1:99:b2:e0:63:0f:51:14:cf:de:00:24:0a:df:5d:3c:f8:
b7:bf:10:b1:72:ed:1d:74:0f:02:45:17:4e:b2:63:17:7c:be:
4b:c0:5a:f1:87:48:b0:06:d1:10:18:23:44:8b:6c:57:c8:81:
55:3a:c9:07:81:29:d4:ca:22:59:b0:39:04:44:b2:f4:df:5f:
ca:3c:83:15:b0:f2:ed:d5:e9:ef:f7:a5:4c:ed:31:0d:4b:c4:
27:a2:8b:25:61:cb:47:66:96:74:83:af:33:4c:24:09:28:b6:
0a:b3:90:1b:74:44:d9:46:a4:b4:24:fc:ce:48:1d:1a:4a:20:
09:e5:36:bb:6c:46:8b:3c:f2:a2:4f:d1:98:f7:3a:0d:1b:fc:
52:70:e7:90:f1:f6:9b:22:41:0e:83:68:a9:e9:89:52:05:36:
38:fc:3a:d3:aa:fa:09:43:3d:ac:c5:7e:d6:ee:de:74:4c:0d:
2c:d2:f4:2c:e5:f7:55:fd:1b:e1:c6:08:b2:a7:e8:65:bd:ea:
eb:51:a6:81:f7:68:9e:38:09:94:03:ec:a8:f6:c2:47:5e:a4:
10:bb:77:95:de:a5:71:31:2c:6d:5e:ff:7c:91:de:9f:d3:c2:
61:9c:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net