Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: Dq3KFtk4bL2tgCYh++tOjNjzakLPuigMdzF0vRAwNBg=
Subject key identifier: 62:C7:20:D6:23:87:B1:16:34:07:E4:BE:CF:8C:BD:C8:7E:16:63:EC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0C35892EF8B7085E7338A147A2446CF800C17501
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214025.roa
Signing time: Thu 28 Nov 2024 12:00:47 +0000
ROA not before: Thu 28 Nov 2024 11:55:47 +0000
ROA not after: Thu 27 Nov 2025 12:00:47 +0000
asID: 214025
IP address blocks: 140.233.185.0/24 maxlen: 24
148.135.172.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
148.135.174.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:35:89:2e:f8:b7:08:5e:73:38:a1:47:a2:44:6c:f8:00:c1:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 28 11:55:47 2024 GMT
Not After : Nov 27 12:00:47 2025 GMT
Subject: CN=62C720D62387B1163407E4BECF8CBDC87E1663EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:c5:ed:75:1f:07:dd:e8:5c:58:6e:45:fe:
f3:10:69:77:12:83:7d:21:30:c9:e0:5a:95:73:aa:
d8:17:45:d3:b9:b4:a7:f8:39:b4:fb:6c:97:8f:15:
da:f9:4c:59:cf:e0:aa:b8:e0:6d:64:7d:0c:4d:d3:
01:95:e6:7b:e4:50:ac:18:02:a2:54:bd:43:5e:70:
bf:86:7d:68:c5:69:0d:89:e3:23:f0:0f:01:2c:87:
a1:87:94:99:58:ec:b5:16:11:01:51:6a:a5:7a:2a:
e6:12:01:ca:04:a3:94:3a:5c:7d:43:82:60:30:6b:
62:67:9c:7b:3a:d1:07:bd:0f:cd:93:91:2a:33:6d:
d7:45:36:3b:0d:51:cf:9e:e7:b7:e1:06:7b:e4:d8:
10:c3:35:3f:3b:8f:3c:fc:a4:01:7e:86:c9:2c:15:
11:ae:95:49:97:49:c5:af:45:b3:79:07:ea:7a:52:
62:dc:ab:e3:47:18:7e:4d:9c:75:80:67:de:bc:ef:
ed:f9:35:71:56:b6:20:4d:50:15:bc:87:cd:d4:c7:
08:7e:26:b6:b0:66:50:76:3e:44:58:44:fe:f5:e4:
e8:4e:61:34:85:71:b8:f9:4f:31:02:51:7d:1a:b2:
b2:39:85:e1:95:74:7b:b7:70:65:8a:f9:c8:b5:6a:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:20:D6:23:87:B1:16:34:07:E4:BE:CF:8C:BD:C8:7E:16:63:EC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.185.0/24
148.135.172.0/22
148.135.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:a7:3c:09:59:a5:af:c9:fc:bd:f1:42:9f:1a:9c:57:fb:db:
ce:fc:f4:7a:ba:34:cc:61:40:07:4c:69:52:11:cf:90:0d:ae:
3a:b9:d0:1f:7b:1e:e4:8a:b0:74:bc:f8:02:9a:24:ab:e1:2a:
dc:2d:f9:1d:c5:f8:5f:8c:f6:da:16:df:04:fd:1d:df:8d:ba:
1d:de:e6:2d:6a:b4:f7:f8:07:4e:7b:a0:fc:3e:94:b0:e9:a3:
53:63:62:88:cc:12:d7:ab:1c:50:0b:24:02:99:0a:5d:02:68:
cb:75:e0:ca:6b:d2:c7:6c:10:cb:03:03:14:05:48:fe:72:91:
34:0d:05:13:f7:3f:60:c4:b2:42:47:21:62:d6:66:21:5c:b5:
59:ae:00:23:09:0b:47:99:a4:20:b5:40:3a:fc:72:0a:4b:39:
3c:aa:b1:19:7e:06:35:16:6e:11:1f:5b:95:81:38:4f:82:3b:
7f:a0:40:fa:24:0d:c7:a3:e5:c4:8e:67:60:10:ea:2f:85:73:
5f:1a:8c:59:4a:df:b9:33:9b:e6:73:7e:1c:5e:e8:e6:2f:af:
8a:e8:b0:7a:90:5a:27:98:a7:7b:03:8a:9d:9a:f3:43:a8:9a:
e9:23:8a:0f:33:4e:7f:b2:d0:48:21:6c:c8:4b:10:c9:1b:1c:
3a:6d:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:06 2025 by rpki-client