Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Aesp-0bkacoacCkCpfhQPmoA2Jo.roa
File: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (raw, json)
Hash identifier: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=
Subject key identifier: 01:EB:29:FB:46:E4:69:CA:1A:70:29:02:A5:F8:50:3E:6A:00:D8:9A
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01942143F05D7400BEAF84BA5C2CE59A7BB3
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Aesp-0bkacoacCkCpfhQPmoA2Jo.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53587
IP address blocks: 116.206.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f0:5d:74:00:be:af:84:ba:5c:2c:e5:9a:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01eb29fb46e469ca1a702902a5f8503e6a00d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:9e:75:af:5a:c5:09:fd:43:0f:61:df:31:
88:29:5d:f7:c5:ea:bc:f2:9a:e9:9e:d8:07:08:58:
e5:5c:d7:50:7b:6d:43:c7:7a:ea:fe:85:be:a0:57:
c9:41:fe:55:5e:41:91:bc:b5:4b:53:0b:69:d5:8e:
1b:59:96:b3:75:67:8e:e4:6c:94:94:99:ef:ab:b8:
e5:bd:2a:0c:ea:94:fa:47:39:50:cc:83:51:d1:cb:
f7:a9:be:42:77:a0:1e:11:51:2a:9f:cd:d3:bd:e2:
4c:d4:f6:2a:ae:fb:6c:82:6a:7b:88:1f:a9:1b:a6:
57:43:d2:75:eb:c1:aa:3d:94:9e:af:4c:a2:6c:20:
4b:a0:f6:81:ec:7d:19:d1:d5:37:4a:6d:6b:d0:a6:
6e:31:01:05:fc:ce:22:36:53:46:92:7a:26:eb:8c:
2d:93:26:09:b7:b2:36:73:53:f3:5b:83:6f:87:8f:
3e:ad:ae:f8:28:e2:80:23:04:79:3e:ef:4a:2d:49:
fc:4f:8a:65:a9:e4:b8:bd:1b:48:c6:c1:8d:67:31:
ad:dd:60:f4:a1:72:7a:74:5e:28:1f:a3:aa:6f:de:
3f:17:d5:75:43:e9:d2:82:07:17:a5:0d:15:c9:21:
72:7c:f4:e6:30:bb:06:4a:3e:d7:78:34:9f:37:9a:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:29:FB:46:E4:69:CA:1A:70:29:02:A5:F8:50:3E:6A:00:D8:9A
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Aesp-0bkacoacCkCpfhQPmoA2Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:3d:79:55:0c:e9:2c:d1:c1:da:5f:9c:3f:34:7b:48:da:2d:
f5:06:3e:cd:76:37:18:7c:63:51:6f:4c:03:70:05:30:63:72:
56:2a:a6:9c:d0:15:ba:43:5b:32:a4:3f:08:44:f0:4e:e7:0d:
61:7b:b1:3e:23:85:c5:e3:f6:ec:e8:dc:e3:3e:80:d5:6e:49:
84:c6:33:20:16:a3:5e:d9:5f:c3:af:96:09:5c:27:fe:c3:ea:
4e:3b:cb:2f:46:b1:a6:4b:ba:c5:c0:67:6c:f6:fd:81:b8:ca:
bd:72:9a:95:6e:0e:e4:35:44:be:01:e5:1e:85:5f:f7:5b:05:
00:b8:d9:e9:26:39:69:cc:b1:97:7f:48:53:f1:a1:43:22:22:
d0:90:6e:43:8f:6e:ef:cb:97:fe:45:48:db:1f:14:e2:a8:35:
ed:9f:07:cd:53:55:75:b6:cb:60:46:5f:83:b9:d9:09:b8:d1:
60:6b:d9:84:13:95:8a:3f:f8:7d:d6:aa:b7:f4:eb:74:80:8b:
c1:a6:d3:a8:fd:63:2f:7c:c8:35:46:fe:bd:0c:72:d1:be:36:
9c:fa:e7:b8:da:12:9c:33:2f:cd:a8:06:e4:d6:f3:fa:f9:5e:
be:2e:c6:be:da:f7:81:94:d9:9e:a9:fd:d7:ea:ff:dc:f9:2c:
5b:0c:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:38:29 2025 by rpki-client