Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: +L9sekvLi2VrqWjyZtLvpmyQq/POfE7jTBCfJZE3GoE=
Subject key identifier: BB:48:DD:EE:99:CA:01:DB:72:DC:ED:35:52:C8:3D:41:22:DF:FC:FC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3D4F8FEC4A09373D47694FD2493CF90F54CC3C72
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
Signing time: Wed 27 Nov 2024 09:22:54 +0000
ROA not before: Wed 27 Nov 2024 09:17:54 +0000
ROA not after: Wed 26 Nov 2025 09:22:54 +0000
asID: 7029
IP address blocks: 46.202.200.0/24 maxlen: 24
46.202.206.0/24 maxlen: 24
46.203.6.0/24 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.112.36.0/23 maxlen: 24
92.112.38.0/23 maxlen: 24
92.112.40.0/21 maxlen: 24
92.112.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:8f:ec:4a:09:37:3d:47:69:4f:d2:49:3c:f9:0f:54:cc:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 27 09:17:54 2024 GMT
Not After : Nov 26 09:22:54 2025 GMT
Subject: CN=BB48DDEE99CA01DB72DCED3552C83D4122DFFCFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:b6:1e:18:6a:5d:71:bb:b6:03:c7:94:4b:
12:f5:3b:82:e4:1f:8a:51:40:3c:2c:13:d3:49:79:
e4:ac:9f:92:80:de:a4:7e:b1:c6:53:e2:d0:8a:3c:
dc:f0:2d:15:71:18:23:95:87:77:2b:0c:03:bc:26:
f7:b1:b0:5b:7b:ac:11:5f:23:ab:3c:d9:17:99:81:
2c:9c:2c:2a:5c:55:d2:4f:18:ae:a9:50:cc:46:ee:
9e:8c:d1:de:5e:8f:05:0a:8a:26:13:54:9b:43:28:
6b:92:1c:5d:5e:7c:24:cb:f4:91:17:23:3e:8e:59:
8a:5c:a5:b3:50:fc:0d:a1:b3:3e:71:30:0e:eb:f6:
2a:c7:25:7e:31:63:8b:f1:0b:0e:f9:d3:bd:c2:ed:
90:3f:b0:b9:83:50:4b:bb:00:69:c1:3f:2b:c2:30:
fb:f2:80:a2:5f:ec:f1:45:dd:0d:d2:72:cc:de:b5:
8a:b5:42:c6:74:a2:9d:5b:b8:98:7a:94:b4:41:42:
8f:7f:71:30:cc:90:09:2f:71:ed:33:55:36:fd:7b:
6b:5f:85:65:e3:c3:ab:69:1d:1f:01:61:d2:68:98:
92:e5:c1:00:20:16:05:28:a2:03:9a:74:f5:4d:7d:
a2:3f:a1:89:6e:6f:d4:09:c0:84:92:6b:01:f7:a0:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:DD:EE:99:CA:01:DB:72:DC:ED:35:52:C8:3D:41:22:DF:FC:FC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.200.0/24
46.202.206.0/24
46.203.6.0/24
92.112.32.0/20
92.112.157.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a7:53:8f:a7:15:c3:56:de:90:6e:35:f1:95:ac:47:1b:33:
78:e0:ed:f8:ad:9e:e6:f9:ee:f7:75:28:51:1b:b8:89:3c:1c:
87:3a:e7:c9:77:14:aa:1e:68:f4:fb:89:7e:c4:eb:bc:5b:7f:
b8:c8:93:a7:e6:25:bd:ed:97:68:44:21:1f:e7:32:bb:80:0c:
5d:5f:01:7f:92:25:2f:53:87:ed:40:6f:02:d3:21:7e:62:50:
e1:26:85:e3:c7:56:9d:0b:cf:94:0b:16:b7:6c:f0:d2:2f:8e:
03:95:42:5d:13:4a:f7:f6:a7:1b:4e:55:55:36:1c:64:cb:e6:
69:1f:9e:f6:da:32:59:d6:24:a2:1d:9c:c3:a4:4c:fd:6d:ee:
e3:6e:8a:ab:2e:99:8b:84:a0:78:e7:15:ce:98:c0:e2:97:f1:
e3:2a:4a:22:94:e4:e3:e8:9a:01:2c:8e:28:da:06:d0:ea:eb:
ab:97:b9:6e:79:32:82:2b:6e:75:f6:11:a0:5b:46:69:54:b6:
62:78:8d:9f:b3:c7:19:08:d8:3d:f3:34:c7:e8:63:85:ff:ad:
f2:de:58:d1:95:5f:29:23:c9:bd:23:a2:52:b8:f0:40:19:25:
2b:29:84:e7:82:87:d1:3f:1b:4e:0a:6a:ce:22:4a:89:f3:2c:
6b:90:5d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUPU+P7EoJNz1HaU/SSTz5D1TMPHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDExMjcwOTE3NTRaFw0yNTExMjYwOTIyNTRaMDMxMTAvBgNV
BAMTKEJCNDhEREVFOTlDQTAxREI3MkRDRUQzNTUyQzgzRDQxMjJERkZDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXLYeGGpdcbu2A8eUSxL1O4Lk
H4pRQDwsE9NJeeSsn5KA3qR+scZT4tCKPNzwLRVxGCOVh3crDAO8JvexsFt7rBFf
I6s82ReZgSycLCpcVdJPGK6pUMxG7p6M0d5ejwUKiiYTVJtDKGuSHF1efCTL9JEX
Iz6OWYpcpbNQ/A2hsz5xMA7r9irHJX4xY4vxCw75073C7ZA/sLmDUEu7AGnBPyvC
MPvygKJf7PFF3Q3ScszetYq1QsZ0op1buJh6lLRBQo9/cTDMkAkvce0zVTb9e2tf
hWXjw6tpHR8BYdJomJLlwQAgFgUoogOadPVNfaI/oYlub9QJwISSawH3oAO3AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUu0jd7pnKAdty3O01Usg9QSLf/PwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzAyOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAC7KyAME
AC7KzgMEAC7LBgMEBFxwIAMEAFxwnTANBgkqhkiG9w0BAQsFAAOCAQEAmKdTj6cV
w1bekG418ZWsRxszeODt+K2e5vnu93UoURu4iTwchzrnyXcUqh5o9PuJfsTrvFt/
uMiTp+Ylve2XaEQhH+cyu4AMXV8Bf5IlL1OH7UBvAtMhfmJQ4SaF48dWnQvPlAsW
t2zw0i+OA5VCXRNK9/anG05VVTYcZMvmaR+e9toyWdYkoh2cw6RM/W3u426Kqy6Z
i4SgeOcVzpjA4pfx4ypKIpTk4+iaASyOKNoG0Orrq5e5bnkygitudfYRoFtGaVS2
YniNn7PHGQjYPfM0x+hjhf+t8t5Y0ZVfKSPJvSOiUrjwQBklKymE54KH0T8bTgpq
ziJKifMsa5Bdiw==
-----END CERTIFICATE-----
Generated at Fri May 2 14:59:11 2025 by rpki-client