Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/AauSAGcl6E2z7FPKdCzU52-L3Mw.roa
File: AauSAGcl6E2z7FPKdCzU52-L3Mw.roa (raw, json)
Hash identifier: Tp98TiuKQZVRhvRMf7uMHRKAb63Ld49Gy988o+ri5Tw=
Subject key identifier: 01:AB:92:00:67:25:E8:4D:B3:EC:53:CA:74:2C:D4:E7:6F:8B:DC:CC
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0195AE8F6C3CA4C9E553CB12271CE7B61AA9
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/AauSAGcl6E2z7FPKdCzU52-L3Mw.roa
Signing time: Wed 19 Mar 2025 13:19:49 +0000
ROA not before: Wed 19 Mar 2025 13:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214652
IP address blocks: 78.153.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:8f:6c:3c:a4:c9:e5:53:cb:12:27:1c:e7:b6:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Mar 19 13:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01ab92006725e84db3ec53ca742cd4e76f8bdccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:3c:d2:1a:38:5e:b5:3a:b2:5b:69:00:a0:
b2:54:b9:97:09:f3:59:e6:91:40:6b:d0:b6:1b:83:
a8:e2:dc:e7:08:92:b3:c0:f1:f7:63:85:e5:69:00:
02:c9:0c:23:d6:91:22:1c:34:67:03:6a:01:ef:be:
0d:b0:87:b9:1b:8a:29:3f:69:ed:b7:5e:76:fc:20:
dd:98:53:b4:fe:0b:b4:30:05:aa:fa:e1:0b:91:67:
fd:13:f3:a2:c5:b7:78:06:0e:c3:7a:6d:06:7d:8a:
16:11:d2:9d:ca:40:bc:28:0a:93:3b:57:12:5d:7b:
ff:d0:55:90:29:b8:9d:86:6a:3b:51:85:53:74:f5:
4f:1c:4f:43:2f:a9:8c:31:cb:ba:20:3e:0c:6d:8c:
89:38:42:04:31:80:ed:c3:87:24:3e:79:2c:97:29:
dc:c8:d3:5e:70:c8:92:38:aa:9c:e0:1e:7d:f7:58:
25:57:53:79:37:f6:1d:39:3c:0e:94:35:85:c5:f9:
5b:4f:6d:a8:2c:43:55:18:55:c5:cf:00:24:a2:b9:
e6:c4:31:f0:6b:1e:46:e6:04:b9:87:c7:9d:87:92:
6e:13:9e:b8:0b:23:31:ee:84:f7:85:03:1b:4d:81:
05:16:12:c8:9f:67:ad:ee:97:ff:ea:31:27:c2:75:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:92:00:67:25:E8:4D:B3:EC:53:CA:74:2C:D4:E7:6F:8B:DC:CC
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/AauSAGcl6E2z7FPKdCzU52-L3Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.96.0/20
Signature Algorithm: sha256WithRSAEncryption
10:2a:d9:cb:37:6a:d9:06:7f:ae:b2:33:2a:7e:58:9e:ef:41:
b1:85:28:e2:6b:d7:9c:09:54:76:65:2d:a7:89:c3:96:58:f6:
02:2a:c8:66:82:fa:b5:1d:03:86:b6:b3:eb:bd:83:02:01:c4:
60:6a:f2:6f:cb:b0:e2:af:e4:69:9d:69:ae:7a:dc:45:40:0a:
ee:24:c1:13:36:12:19:94:f3:16:cc:9f:68:dc:45:0a:bc:8d:
49:4f:5b:1a:d8:fa:c1:38:2f:2b:01:05:cb:d3:cd:10:fe:18:
1c:d1:cc:f6:ef:2c:f0:f1:96:d2:d9:98:e8:bb:32:5b:76:9b:
f3:d5:ae:5e:c1:c4:22:a3:33:8c:cb:3c:9e:f3:86:c8:be:7e:
e3:58:b5:67:49:c7:a8:bd:fb:63:c3:bc:3a:17:0f:49:dc:2f:
32:5d:35:d7:79:88:1d:6a:a8:48:e1:73:b8:df:44:e8:c4:b0:
0e:42:f0:56:ca:1f:d3:89:50:4d:11:56:34:90:90:cc:46:60:
a3:6e:65:28:36:69:d5:e6:cc:f1:5f:91:58:0f:a4:fc:b7:b7:
74:d6:9d:69:cc:dc:a3:b5:1a:c9:02:3c:18:09:0e:02:30:97:
36:5a:04:43:12:b7:75:34:5d:e7:87:be:db:28:6f:6c:88:cf:
d0:1d:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:34 2025 by rpki-client