Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/AUThtEaMt8aPJTPbVgcuq62kxQA.roa
File: AUThtEaMt8aPJTPbVgcuq62kxQA.roa (raw, json)
Hash identifier: czDZteG7pPqWWcX7VvpRLnTlFJ8uAjHDP8qBW/wgGIo=
Subject key identifier: 01:44:E1:B4:46:8C:B7:C6:8F:25:33:DB:56:07:2E:AB:AD:A4:C5:00
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 0194228E2601C3285EBB60E7F5B0AE3EFFC4
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/AUThtEaMt8aPJTPbVgcuq62kxQA.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47773
IP address blocks: 193.162.105.0/24 maxlen: 27
2a10:8dc0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:01:c3:28:5e:bb:60:e7:f5:b0:ae:3e:ff:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0144e1b4468cb7c68f2533db56072eabada4c500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:50:4e:25:d2:38:34:40:7d:97:0a:43:82:
d2:63:77:7c:51:05:ef:98:8f:01:b8:2e:ae:34:d0:
8e:7b:70:87:26:d2:1e:c3:cc:80:b0:6d:a5:6c:20:
0f:13:4a:87:da:36:76:91:1d:25:f7:aa:0e:0e:67:
ed:11:71:b0:da:f8:dc:81:46:e6:87:ec:88:c6:af:
85:8d:92:1e:db:4e:91:e7:52:54:fd:f1:1a:63:c1:
77:7f:95:7d:0b:7b:e7:45:cb:fb:40:a5:43:d3:09:
27:a6:cf:82:19:c6:29:8f:d3:8f:05:87:b3:3a:e2:
db:ae:77:c6:ed:2e:04:7c:f5:a0:fe:14:9b:0e:2c:
e2:6d:a9:20:40:a6:75:1a:a1:84:24:c0:c9:0c:6d:
18:48:3e:e7:38:28:36:93:91:1b:42:26:e5:78:9d:
19:33:3c:53:be:35:09:97:19:d8:20:db:42:8a:ff:
1b:41:ce:cb:65:05:91:d3:6c:66:1e:35:ce:1e:e6:
cf:b7:8d:1d:3a:d5:8c:1f:3d:67:f6:59:46:fb:11:
ee:f6:96:49:52:ee:3d:69:99:15:6f:44:80:cd:c6:
37:31:e3:59:c8:9b:5e:14:38:1c:1f:57:f6:5c:c9:
17:4f:83:0d:42:cb:d4:7f:49:90:dd:38:6a:e1:98:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:E1:B4:46:8C:B7:C6:8F:25:33:DB:56:07:2E:AB:AD:A4:C5:00
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/AUThtEaMt8aPJTPbVgcuq62kxQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.105.0/24
IPv6:
2a10:8dc0::/32
Signature Algorithm: sha256WithRSAEncryption
01:65:e0:6f:36:36:f1:3a:52:76:b3:39:89:52:ff:a6:74:da:
29:8a:49:42:73:d2:44:dd:f9:2b:2d:13:fe:ed:32:a9:b5:9b:
ca:4c:53:c6:40:72:50:4d:e9:51:7d:fd:91:fd:5f:f2:63:60:
e6:eb:ff:92:e9:4b:49:3d:2f:86:5e:62:b2:ff:ba:07:4c:69:
b9:fe:0d:32:91:dd:be:6e:2c:fc:f4:2e:84:49:fe:7c:f7:21:
0c:2c:40:ee:07:47:2b:f0:fe:89:59:f4:84:d8:ca:8c:4c:97:
37:9f:da:c6:74:1a:9f:64:93:17:08:8a:d8:8a:e7:ac:81:2b:
f6:23:95:6f:f3:f6:bf:7b:3d:a3:82:03:e8:ce:6c:d6:97:d6:
59:b6:73:ad:56:20:51:89:a0:2b:01:63:a6:29:57:97:08:f3:
57:09:f4:d9:72:13:ec:5a:91:73:8f:2f:a5:e8:ee:fa:f2:ff:
93:35:20:37:d9:e7:09:c4:e3:9b:d7:51:95:e8:39:43:cc:15:
c3:4a:f2:57:f1:6d:71:3f:a4:c0:78:b4:40:07:f1:30:09:b9:
22:83:b8:ba:0a:b6:44:d0:7c:43:b1:fb:fa:f1:47:ec:c2:ff:
97:3b:fa:b4:cd:e8:be:96:a6:98:00:71:32:ec:ca:a1:3a:a4:
81:69:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:13 2025 by rpki-client