Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214329.roa
File: AS214329.roa (raw, json)
Hash identifier: sw6gXSdNLVeROB1IgXTq2GE+gnjRs8yzWykntYIZ4Gc=
Subject key identifier: 2A:DA:91:D2:10:B9:1A:FD:74:CE:3A:0C:95:C4:78:C2:77:1D:B5:D9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 65913BBE41CE0B850BDFA526828E817DBFD16B38
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214329.roa
Signing time: Fri 31 Jan 2025 17:47:46 +0000
ROA not before: Fri 31 Jan 2025 17:42:46 +0000
ROA not after: Fri 30 Jan 2026 17:47:46 +0000
asID: 214329
IP address blocks: 92.113.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:91:3b:be:41:ce:0b:85:0b:df:a5:26:82:8e:81:7d:bf:d1:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 31 17:42:46 2025 GMT
Not After : Jan 30 17:47:46 2026 GMT
Subject: CN=2ADA91D210B91AFD74CE3A0C95C478C2771DB5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:b9:c9:1c:6e:22:3c:6d:51:94:3f:07:fa:
e0:12:2c:16:fa:04:dd:eb:af:24:cc:d8:c9:cd:2b:
73:c7:ae:d8:11:af:af:81:3b:5a:37:b9:b8:f2:7f:
97:ac:d3:9a:e2:12:8e:a9:16:55:28:78:c3:b6:56:
64:c4:af:c7:29:5c:81:9e:d8:89:57:ad:81:f6:87:
77:6e:4b:20:53:19:8f:73:05:4c:2a:5f:78:3a:0c:
bc:da:09:c7:dc:22:65:8b:06:0c:fb:f6:af:56:a8:
59:f7:81:d9:4d:fa:ea:e2:e3:10:3b:a9:c6:1a:48:
b0:21:7b:e8:e2:10:cd:6a:4a:30:09:7f:4b:49:7d:
da:0a:98:7b:24:02:21:3d:15:1b:58:c6:ed:69:45:
11:8a:4e:76:d1:93:ff:1a:13:11:48:31:ca:a0:1d:
07:65:ba:1c:c9:de:e5:1f:6d:14:ed:21:6e:2a:af:
73:c2:5d:f5:53:3e:03:43:c1:84:e1:5e:69:ce:09:
92:c9:3b:f1:a6:54:6c:b0:30:bc:ff:cf:14:47:da:
24:a1:09:57:ad:31:b7:da:7e:f9:e6:4b:50:75:eb:
10:9a:b6:17:68:d3:78:5b:c8:f7:bf:c4:65:95:0f:
f8:c9:b6:e7:07:9a:1f:f7:28:94:32:53:96:a5:92:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:91:D2:10:B9:1A:FD:74:CE:3A:0C:95:C4:78:C2:77:1D:B5:D9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.91.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fd:e0:1a:b9:d4:ae:da:5d:b1:bc:47:66:31:f7:cc:a1:6b:
d7:e2:24:8f:05:93:4f:e2:f7:d4:cc:79:c4:07:f5:51:42:52:
94:fe:93:b6:c2:d4:04:7c:b2:ef:7d:f2:88:b6:82:ad:c3:13:
63:99:49:44:df:57:20:34:2d:95:d9:4d:3d:8e:07:0f:9f:15:
bb:da:62:69:39:7b:be:31:fa:46:2c:07:61:7e:0e:60:47:27:
96:aa:95:99:07:a8:ce:0e:24:ec:bf:75:61:79:22:af:5f:80:
12:fe:81:99:59:80:c0:5d:ff:d9:c2:a2:be:6c:e0:d3:8e:eb:
56:26:d0:3f:73:41:dd:bf:c5:8a:42:23:cb:4a:da:50:56:ad:
30:a5:09:97:80:eb:b8:69:62:1c:13:43:cc:dc:6d:80:84:13:
5c:d6:8a:40:c7:48:2f:54:ff:d6:b1:02:8e:88:9e:ef:1a:83:
1d:82:98:2d:43:a5:10:58:7d:3f:7b:64:67:6e:2e:b5:dc:95:
9f:00:24:a5:e6:a0:21:52:45:95:c9:e2:89:ab:67:44:1c:94:
50:4b:34:ad:e9:a4:18:33:9d:92:87:4b:c6:f8:08:25:1b:2b:
16:5a:ad:ce:41:8e:06:11:86:1a:52:2e:d4:00:84:37:2c:32:
1c:e7:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:42 2025 by rpki-client