Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: PIZRd46yRwft/+0gYTj2dhpszcIhKxA0nW6OSeOYEZQ=
Subject key identifier: 6D:48:18:29:AF:0B:00:17:4A:76:09:AE:BF:74:55:2D:EF:63:BC:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 618D58A8B175743FFDEEA69432F7C4C8D4D06E61
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
Signing time: Thu 05 Dec 2024 16:12:32 +0000
ROA not before: Thu 05 Dec 2024 16:07:32 +0000
ROA not after: Thu 04 Dec 2025 16:12:32 +0000
asID: 29802
IP address blocks: 145.223.50.0/24 maxlen: 24
145.223.55.0/24 maxlen: 24
145.223.60.0/24 maxlen: 24
145.223.62.0/24 maxlen: 24
145.223.63.0/24 maxlen: 24
146.103.4.0/24 maxlen: 24
146.103.19.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
147.79.22.0/24 maxlen: 24
148.135.178.0/24 maxlen: 24
148.135.179.0/24 maxlen: 24
148.135.191.0/24 maxlen: 24
148.135.254.0/24 maxlen: 24
150.241.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8d:58:a8:b1:75:74:3f:fd:ee:a6:94:32:f7:c4:c8:d4:d0:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 5 16:07:32 2024 GMT
Not After : Dec 4 16:12:32 2025 GMT
Subject: CN=6D481829AF0B00174A7609AEBF74552DEF63BCBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:72:91:59:bc:f0:3b:97:84:42:cc:be:52:
6a:86:f2:2b:ae:77:08:d4:0c:4a:0e:bc:26:a5:cf:
a9:92:7e:c6:74:0f:77:5b:0d:3b:8d:b7:f2:7a:28:
1b:b9:c3:bd:a4:f3:0a:a7:53:57:98:b6:97:2d:26:
b6:60:3d:13:e8:c8:bb:1b:ca:53:74:27:e5:43:33:
cb:08:2d:02:5a:c7:83:b8:78:c1:56:71:01:2e:44:
86:58:38:29:d4:aa:01:b8:d3:09:38:0e:79:84:6c:
9e:24:9e:ca:0f:e9:32:14:8e:bc:47:34:42:1c:2d:
c8:55:c0:a4:7e:53:35:7d:b4:54:25:86:ec:81:a6:
b3:57:31:b7:26:86:7d:37:cc:2f:5b:97:42:1c:21:
7f:86:f7:6d:b2:d5:45:d6:d1:f6:d8:08:13:56:72:
ab:aa:57:07:77:05:52:e2:df:31:ad:23:3f:5f:f3:
9a:06:b2:5f:cc:67:88:0f:9e:22:15:d1:c2:f1:40:
ba:56:63:f7:10:20:3b:0d:cf:d5:0f:f5:e6:9f:c1:
e6:dd:2f:0a:07:81:7c:43:a3:54:eb:6f:57:be:21:
31:4b:26:e9:0d:c9:93:62:54:e7:a2:74:73:d9:77:
44:d1:96:4f:14:c6:da:a6:f8:f7:e8:84:ad:dd:fe:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:18:29:AF:0B:00:17:4A:76:09:AE:BF:74:55:2D:EF:63:BC:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.50.0/24
145.223.55.0/24
145.223.60.0/24
145.223.62.0/23
146.103.4.0/24
146.103.19.0/24
147.79.4.0/24
147.79.22.0/24
148.135.178.0/23
148.135.191.0/24
148.135.254.0/24
150.241.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c4:35:1e:af:cd:93:6f:17:76:00:8d:38:21:dd:ac:d5:1c:
1c:06:29:9d:03:b1:67:c3:2c:38:f0:81:a5:7c:a1:16:fa:f5:
f3:77:24:f1:aa:84:53:11:53:84:3a:09:82:5e:ff:33:90:d7:
6d:4b:fa:dd:33:9f:6f:59:8b:33:35:0f:18:67:c8:11:bd:c0:
61:73:f7:db:9c:68:b2:cd:ff:bd:67:b1:61:28:02:c9:f5:9a:
9c:36:d6:59:78:68:cc:85:73:dc:50:5d:53:65:5a:71:bb:21:
13:d1:4d:7e:2a:2d:6a:b3:f5:57:dc:28:cf:be:46:2a:45:c8:
a3:25:b9:b9:ad:9d:8b:16:5e:ad:83:e0:a9:1a:1d:f9:83:68:
1d:71:b1:78:d1:fe:3b:b7:ec:80:fe:30:68:2f:de:e9:02:a9:
cb:12:30:77:3e:e1:2f:52:b5:28:be:3b:1f:86:c3:e0:30:08:
c6:5e:70:59:0d:df:ad:aa:ba:0b:f5:4e:4a:79:0d:4c:37:56:
1f:9c:d1:2f:c1:b7:45:65:db:76:ed:3c:9f:1c:db:3c:44:94:
cc:8f:e6:62:c7:bb:45:e9:63:94:36:4a:c5:0f:9b:c9:99:13:
5b:5e:33:d7:39:1a:6a:e2:e4:85:c0:52:73:28:24:06:6d:be:
15:34:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:42:30 2025 by rpki-client