Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: F4Ha9r7g5emUIv/TE1rjV7ohISw2EeLl9n1ZOenRbz0=
Subject key identifier: 97:D8:DB:ED:62:40:15:71:B6:4C:FB:EB:B7:84:D7:8E:C3:D5:34:8D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 26DDD9713130514B9433CE0475C61996743C6F32
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
Signing time: Sat 12 Apr 2025 07:05:53 +0000
ROA not before: Sat 12 Apr 2025 07:00:53 +0000
ROA not after: Sat 11 Apr 2026 07:05:53 +0000
asID: 996
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:d9:71:31:30:51:4b:94:33:ce:04:75:c6:19:96:74:3c:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 12 07:00:53 2025 GMT
Not After : Apr 11 07:05:53 2026 GMT
Subject: CN=97D8DBED62401571B64CFBEBB784D78EC3D5348D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:68:42:27:16:b9:e3:9c:88:c6:bf:49:3a:
65:dd:e3:54:31:9a:93:26:cf:cf:ce:0a:55:91:4c:
33:fc:f3:14:68:51:24:cc:fd:d6:fa:d8:d3:72:61:
d2:2a:8e:17:d1:a8:bf:ef:bd:b0:db:22:57:2f:8f:
8d:2f:7d:36:90:f6:50:99:b1:8d:47:81:20:29:c6:
a7:69:d0:80:b3:ad:1f:ab:3b:1d:7c:30:fb:34:d3:
d8:f1:08:cf:8f:87:1b:25:57:3c:48:ff:10:00:0f:
a0:3e:d9:8f:ec:26:2a:03:a1:14:4c:9f:62:3a:04:
75:17:2f:a3:ce:4c:ef:db:4a:08:12:b3:7a:89:94:
ea:61:05:66:18:6b:a5:bf:bd:5a:7b:42:b0:0d:00:
2f:b3:db:92:34:69:36:be:eb:0d:0d:f9:2c:df:6f:
21:01:6a:c9:f9:e0:50:32:be:b2:47:79:94:2f:08:
fb:eb:e5:ad:58:12:a0:9c:ad:c2:fb:47:bf:4e:a9:
28:4a:81:85:f3:3c:73:08:8d:ac:e9:69:2d:51:e3:
a5:aa:2d:79:84:65:b7:3f:d2:b0:79:56:76:19:4d:
c0:14:c9:6e:4d:9c:79:74:4a:1e:a2:b9:f8:6b:e0:
fb:f0:f1:64:37:49:84:de:a4:cc:ed:6f:63:3d:4b:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:DB:ED:62:40:15:71:B6:4C:FB:EB:B7:84:D7:8E:C3:D5:34:8D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.168.0/24
46.203.177.0/24
92.112.55.0/24
92.113.15.0/24
92.113.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e2:39:5c:38:71:ae:0d:17:ac:04:1e:20:fb:d6:ba:0d:dc:
22:30:7b:e1:9f:ef:7a:69:ac:ad:e6:ca:e3:d3:c4:9d:c2:51:
33:d3:d8:5a:b5:39:72:12:ad:fd:68:0a:13:7e:c4:f0:f9:68:
d3:07:23:fc:0b:9c:b8:93:74:e8:10:7b:ac:d9:ee:6f:c4:9b:
a2:05:17:14:f8:27:0d:4f:ef:1e:6e:24:84:26:30:74:14:4e:
b0:3b:fc:d2:f7:13:c7:fd:ef:81:ff:48:e4:6b:71:5d:ea:73:
f0:c2:64:3c:9f:e5:dc:a1:92:3d:43:b8:39:76:59:cf:e7:d2:
fd:88:e9:44:27:ab:a9:e1:f1:f3:87:0c:72:ca:27:3f:6b:1a:
9c:f5:cb:27:15:8f:37:be:1e:85:c4:33:7b:1b:57:cf:04:ab:
ab:26:12:c9:c2:cc:eb:e7:6c:96:d6:f4:c8:48:59:00:3c:6d:
d9:80:8a:25:f9:1e:d9:7b:7c:cf:1e:dc:6c:0c:66:11:3e:8a:
8d:c5:d0:1d:16:08:7d:36:8c:46:b5:c5:b1:8f:33:f5:4c:13:
6c:a5:d7:0d:7c:84:fd:f7:00:3a:9e:08:ba:10:3e:65:3a:2c:
64:63:eb:ad:4c:ed:86:f4:ca:f3:9a:0c:64:13:1d:be:fc:ab:
30:1d:26:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net