Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/aaNgAPSKR8vu_fi1LUADYjz2Lv0.roa
File: aaNgAPSKR8vu_fi1LUADYjz2Lv0.roa (raw, json)
Hash identifier: +h8wr6vzNAATZJpxTY8KLcPlUyZVd4XJfj0r/9bslDg=
Subject key identifier: 69:A3:60:00:F4:8A:47:CB:EE:FD:F8:B5:2D:40:03:62:3C:F6:2E:FD
Certificate issuer: /CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Certificate serial: 018A6487ACF3B2E600CB58D0336CF1A7F027
Authority key identifier: 62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/aaNgAPSKR8vu_fi1LUADYjz2Lv0.roa
Signing time: Tue 05 Sep 2023 08:48:47 +0000
ROA not before: Tue 05 Sep 2023 08:48:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.162.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:87:ac:f3:b2:e6:00:cb:58:d0:33:6c:f1:a7:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627de978cdc2eb05c3f089061b0abe3c5f698aee
Validity
Not Before: Sep 5 08:48:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a36000f48a47cbeefdf8b52d4003623cf62efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:ea:d0:fb:a4:4b:59:45:04:fe:51:34:a4:
c5:b2:10:f7:c1:a3:25:2e:9a:66:8a:3f:de:ba:3c:
c4:aa:56:31:f3:7e:eb:56:eb:d8:a6:a6:2c:4f:c0:
86:f6:e2:ad:d5:69:e6:0b:d7:e4:01:23:e6:f1:92:
ef:4e:be:4d:2e:9d:9b:fa:1c:55:88:c1:3f:cb:b0:
b8:12:36:94:51:5c:a7:bd:c3:34:4f:a1:e9:59:22:
6d:34:42:0f:3e:d0:08:c3:be:90:20:1c:79:d5:0f:
4f:16:6d:b0:4c:81:d9:4e:4d:09:8f:7a:d9:8e:06:
16:f7:1c:60:5c:95:e3:d5:ba:8e:70:3f:a5:b1:1a:
d0:e7:a2:bb:6f:53:1c:14:8c:bf:18:41:b7:ad:54:
eb:e5:1e:c4:f4:c1:1d:f0:81:ac:16:70:69:d5:fd:
d2:40:a1:b7:58:21:3c:bd:bb:88:58:99:9d:d6:88:
a0:f2:d6:b1:d0:d0:d1:1c:4f:0e:3d:20:c2:20:0d:
e7:3c:4f:fe:dc:0e:18:e2:7e:28:3f:96:02:94:06:
e0:5a:c9:a0:77:0e:b1:54:16:63:96:c9:e9:e3:48:
46:54:9c:7c:cf:05:19:f5:52:47:62:f7:dc:5a:52:
48:1b:2e:7c:85:6c:83:c8:74:32:6c:29:31:c9:6b:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:60:00:F4:8A:47:CB:EE:FD:F8:B5:2D:40:03:62:3C:F6:2E:FD
X509v3 Authority Key Identifier:
keyid:62:7D:E9:78:CD:C2:EB:05:C3:F0:89:06:1B:0A:BE:3C:5F:69:8A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yn3peM3C6wXD8IkGGwq-PF9piu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/aaNgAPSKR8vu_fi1LUADYjz2Lv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ad60e8-4609-4d43-89ff-e3c2f4d2ab3b/1/Yn3peM3C6wXD8IkGGwq-PF9piu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.29.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:df:5b:c4:ed:e6:36:bb:b5:22:8a:1d:46:78:13:a5:24:
bb:eb:3b:8b:18:d4:f9:87:95:17:0e:32:a0:d4:bd:36:cb:75:
bc:38:2e:fc:7f:fe:ed:72:4e:66:0a:57:83:25:c3:d7:b0:25:
91:c8:35:26:74:0c:91:3a:74:bd:a2:a1:64:26:0b:61:31:62:
63:6a:9a:ab:e1:db:b9:4f:61:42:a9:99:8a:3b:7e:42:a9:2c:
94:4f:3a:3b:d0:ce:e8:db:84:c6:ca:7f:5f:a8:28:57:2a:ba:
77:13:df:0d:fa:83:10:16:fe:aa:02:6c:db:7e:13:26:e3:48:
94:fc:dd:f3:00:c2:38:bf:76:1a:d3:c5:06:19:7b:ac:7d:f1:
ef:52:46:57:82:a6:0a:6e:ec:60:c9:24:ab:b8:84:1c:b2:e1:
24:90:f9:87:d6:a2:18:59:10:b8:fc:0b:89:5b:cd:e2:c3:1e:
c9:07:95:99:77:4f:7e:f0:02:d4:06:87:05:f2:d2:5b:51:41:
cf:6b:67:b7:ce:1f:45:e2:40:77:5f:56:d7:69:3c:49:c5:b0:
9e:aa:94:29:2b:18:4b:03:f8:6b:23:f9:e7:c4:b7:0c:2d:9d:
8f:d3:72:d4:89:0a:8d:8a:79:50:fa:c4:20:c4:40:67:8b:40:
eb:68:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:50 2025 by rpki-client