Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: DSY4b+zIMneP9PyZJiKAyRqozFwMPi9BbK2DsP1fw3Y=
Subject key identifier: 48:2F:DC:81:83:45:38:FB:54:60:9C:83:C7:9C:46:F2:5A:87:37:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0434317DB5BBD349695CECE4166471771581FE91
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Fri 10 Jan 2025 10:51:42 +0000
ROA not before: Fri 10 Jan 2025 10:46:42 +0000
ROA not after: Fri 09 Jan 2026 10:51:42 +0000
asID: 10103
IP address blocks: 96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.190.0/23 maxlen: 24
96.62.216.0/21 maxlen: 24
96.62.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:34:31:7d:b5:bb:d3:49:69:5c:ec:e4:16:64:71:77:15:81:fe:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 10 10:46:42 2025 GMT
Not After : Jan 9 10:51:42 2026 GMT
Subject: CN=482FDC81834538FB54609C83C79C46F25A8737AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:90:a3:ed:41:b0:39:06:bc:b3:67:c3:78:
3d:cb:16:bf:04:f6:36:8f:37:df:64:4d:9f:36:f4:
88:7d:2e:cb:10:9f:3b:d3:72:b2:e7:22:cd:97:2f:
41:ca:6e:f3:db:5d:b2:10:e6:8d:26:27:b7:c2:14:
bb:0e:d3:64:af:74:36:02:30:3e:47:ac:25:d5:c2:
86:6f:4c:18:62:a5:d9:7e:9a:7a:22:b0:b5:95:72:
fc:cf:83:c7:c8:83:68:37:19:cf:cc:1a:1f:94:4b:
47:d9:0d:ce:b0:e7:9d:3c:1e:ab:85:fb:eb:b1:5a:
1e:7f:98:ee:97:dc:fb:45:cf:8b:c8:53:7f:97:d0:
4a:8a:11:6d:ed:20:5b:c9:ff:bc:4c:95:e1:36:6a:
3a:06:e9:30:20:ae:77:60:a7:57:4f:45:03:35:3f:
ec:a2:0b:27:8f:fa:d0:ab:39:cc:a6:9e:3f:99:54:
37:88:33:bf:7c:35:40:78:b6:38:91:4f:a7:6c:43:
ef:e9:88:b3:6e:73:a3:fd:7d:fc:a1:3b:cb:f0:5d:
dc:50:4f:9f:65:74:c8:d8:4f:09:f6:a9:8f:c9:5f:
25:8d:35:c8:2a:8a:f8:1e:f7:47:0c:0f:03:c2:44:
da:e8:54:40:e7:81:59:39:b2:04:22:c7:2f:c5:cf:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2F:DC:81:83:45:38:FB:54:60:9C:83:C7:9C:46:F2:5A:87:37:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/21
96.62.190.0/23
96.62.216.0/21
96.62.228.0/23
Signature Algorithm: sha256WithRSAEncryption
35:9f:8c:26:6e:37:b2:34:1a:94:b2:2d:53:1b:c3:35:27:65:
56:cc:0f:8e:f4:04:e8:86:b8:72:42:2b:a1:65:e0:f4:a7:4e:
0b:04:b2:7e:d8:50:e5:ab:41:b2:33:52:58:29:40:82:86:84:
e5:bb:ee:45:f0:96:4c:98:aa:63:ba:43:a9:ce:25:bd:51:a6:
35:c8:30:a2:b0:77:32:c3:5c:2e:97:62:53:3a:4e:47:be:07:
0c:06:1b:f7:67:b1:71:5e:64:2e:3f:b4:76:af:46:df:03:54:
9b:38:97:2d:07:80:05:34:04:96:f1:54:ae:0f:85:a4:31:ae:
19:0d:dc:68:ec:d5:86:36:0a:eb:2e:d2:4d:b8:53:b0:10:8c:
e4:71:13:d1:fc:4c:a6:ac:e9:75:48:b6:8b:2e:23:16:e1:2c:
4a:76:ed:17:f7:42:c0:84:88:3f:f4:a6:8d:0b:d8:3a:34:1e:
2a:02:20:f2:fb:4d:9d:1f:64:bc:60:d7:0f:d3:56:9b:a3:c2:
5a:a3:60:bb:c6:0e:e8:2f:fd:82:ef:e0:b3:6a:41:37:20:56:
4f:6d:a3:f9:a7:40:ef:c3:aa:85:03:62:a9:7d:19:c2:39:fe:
01:1f:ac:b0:95:1a:bd:9c:c9:24:f7:f2:f1:89:e0:5e:c1:6d:
61:67:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:17 2025 by rpki-client