Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: vuvDvpQH9THwFHQBWkbP0SrqWYPVyjOBvoOIffVjgRE=
Subject key identifier: 42:55:74:28:AE:4B:22:88:89:09:7D:74:3F:5E:05:06:D0:B9:FB:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 168AFF55509132F0402C3A54B8ECAAF4C365A134
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
Signing time: Wed 27 Nov 2024 10:07:24 +0000
ROA not before: Wed 27 Nov 2024 10:02:24 +0000
ROA not after: Wed 26 Nov 2025 10:07:24 +0000
asID: 174
IP address blocks: 140.150.224.0/22 maxlen: 24
140.233.160.0/22 maxlen: 22
140.233.168.0/22 maxlen: 22
140.233.172.0/22 maxlen: 22
140.233.180.0/22 maxlen: 22
147.79.16.0/22 maxlen: 22
147.79.24.0/22 maxlen: 22
147.79.48.0/22 maxlen: 22
147.79.60.0/22 maxlen: 22
150.241.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8a:ff:55:50:91:32:f0:40:2c:3a:54:b8:ec:aa:f4:c3:65:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 27 10:02:24 2024 GMT
Not After : Nov 26 10:07:24 2025 GMT
Subject: CN=42557428AE4B228889097D743F5E0506D0B9FB16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:45:d4:ed:47:65:dc:bc:f6:aa:2f:ae:ca:
84:07:da:92:97:32:43:81:c7:77:4d:ce:f0:e2:14:
85:c0:be:45:f3:45:8b:90:67:a5:a8:6e:29:8d:1d:
a9:d1:9e:81:ec:23:5b:88:53:6b:b0:61:52:70:80:
fb:97:2e:c8:99:a0:48:68:a0:bd:e9:ef:a7:3c:12:
ea:24:08:63:fc:b2:60:17:a2:3d:4b:3a:03:12:eb:
cc:c5:18:c5:42:5f:8c:cd:2e:b7:61:b8:8e:cb:10:
a7:c1:69:aa:65:9a:45:b6:7c:af:10:86:8c:53:6d:
a6:67:78:33:52:93:ea:37:02:c6:dc:4e:5b:54:7b:
f6:2c:4b:fb:ca:bb:86:36:ec:0d:62:86:2d:ce:e9:
fa:0b:1c:3b:b9:13:20:90:13:1d:53:cb:54:5e:85:
68:10:6b:b9:62:30:99:11:13:9d:13:fa:4a:c2:02:
3d:d3:35:15:82:28:df:0a:d9:ac:bf:17:fa:d2:23:
e4:64:0f:59:21:0d:f4:20:39:46:88:9c:3c:7b:90:
bf:e6:0d:81:da:aa:c6:92:64:59:5b:4d:0b:24:39:
fd:0a:78:95:00:4c:ec:08:96:38:3b:0a:f7:1b:f5:
ad:85:89:76:19:85:c9:22:a9:2b:02:38:7c:25:13:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:74:28:AE:4B:22:88:89:09:7D:74:3F:5E:05:06:D0:B9:FB:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.224.0/22
140.233.160.0/22
140.233.168.0/21
140.233.180.0/22
147.79.16.0/22
147.79.24.0/22
147.79.48.0/22
147.79.60.0/22
150.241.136.0/21
Signature Algorithm: sha256WithRSAEncryption
09:61:06:1f:67:b5:da:53:02:c2:26:b0:f0:98:2c:b1:8d:0e:
a1:4b:25:1c:8f:31:92:3e:48:90:12:04:27:1b:49:7d:eb:15:
74:17:24:d9:fa:78:7d:2d:58:ea:4e:db:c5:56:11:3b:ee:40:
e0:59:ca:88:38:2d:3a:c9:1c:b0:b6:30:08:b8:3d:27:1a:51:
7e:bf:fd:59:cb:2e:f1:f9:f9:fb:6a:3f:66:a3:05:54:12:a6:
be:ea:83:49:01:c2:f6:e5:86:3c:bf:fe:18:2b:16:fc:42:12:
db:f2:86:30:d8:bd:42:51:74:ba:16:ba:a9:d6:6a:59:fd:8a:
94:22:64:52:05:d9:8a:b2:ca:aa:e4:27:ea:9c:71:a4:48:05:
a8:11:75:21:90:ed:cf:6b:11:81:ad:a4:b4:e3:29:8b:32:f5:
95:1e:12:a3:24:6d:cd:f5:f7:50:35:40:db:33:2b:aa:bf:e0:
0a:2d:9c:11:fe:af:ca:82:df:c5:46:67:ba:12:0e:d7:ae:c9:
b0:32:a6:e2:77:48:78:a6:c1:9f:9f:d7:d3:60:8d:54:d0:34:
e8:68:12:2d:e1:a0:72:ef:af:21:8b:7d:38:99:92:90:20:00:
8a:cc:4a:a8:00:63:62:e2:58:f1:a5:84:a6:00:0f:9c:d1:20:
ec:da:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:07 2025 by rpki-client