Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: RhxBwQvaqgIYGlsf+mdEULFbOJ7yKnijWv2yDCWc3oQ=
Subject key identifier: 0D:17:BA:96:F1:21:19:D4:63:09:A5:36:A0:3C:72:44:66:D4:2C:06
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7A7CF7D26BBE307BB9EA7BE1E3A86B578E401749
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Mon 03 Mar 2025 12:32:06 +0000
ROA not before: Mon 03 Mar 2025 12:27:06 +0000
ROA not after: Mon 02 Mar 2026 12:32:06 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.103.0/24 maxlen: 24
96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.190.0/23 maxlen: 24
96.62.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:7c:f7:d2:6b:be:30:7b:b9:ea:7b:e1:e3:a8:6b:57:8e:40:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 3 12:27:06 2025 GMT
Not After : Mar 2 12:32:06 2026 GMT
Subject: CN=0D17BA96F12119D46309A536A03C724466D42C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:b8:43:31:f9:6b:be:72:48:1b:bf:27:58:
66:4b:2e:09:a2:7b:ae:36:b7:93:c0:a9:6b:8b:ed:
59:32:12:9b:e4:37:c1:b5:c5:d7:e3:4f:78:52:4c:
69:7a:81:4d:7d:09:95:10:b5:b3:68:a7:a9:3d:95:
67:3a:90:28:58:ad:10:d8:50:c1:a5:ef:42:37:4f:
bf:f9:5c:ba:cd:da:a8:c0:79:c5:e5:13:2d:86:48:
da:c6:36:65:d0:aa:f2:de:23:f1:57:1b:65:b4:55:
2a:57:b2:d6:eb:58:be:d3:4d:02:d2:e4:3e:54:95:
15:d2:02:d6:be:8a:75:1f:af:ee:91:d0:1b:52:07:
a0:43:af:07:47:7a:80:45:f3:46:87:2a:77:4e:c9:
cb:01:68:d8:ff:1d:60:01:67:de:8b:38:f4:bd:fc:
55:ba:61:79:f0:bf:b8:82:a1:59:76:88:15:d5:ec:
c9:cd:63:e5:28:ab:8f:01:3b:47:3e:9c:cc:e2:ee:
4f:fd:a7:a1:ce:f4:28:db:ec:97:0d:38:ac:84:27:
e5:d6:80:ba:a0:f4:f5:c4:bb:73:32:e5:e5:2c:93:
2d:dc:ae:56:ab:22:6f:7f:39:b1:41:52:e1:fc:40:
24:d5:15:e7:c9:4a:47:6b:26:22:69:73:04:82:bd:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:BA:96:F1:21:19:D4:63:09:A5:36:A0:3C:72:44:66:D4:2C:06
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.103.0/24
96.62.152.0/21
96.62.190.0/23
96.62.216.0/21
Signature Algorithm: sha256WithRSAEncryption
02:bf:b8:3d:30:63:2e:0d:7b:18:1f:32:01:2c:0e:59:3b:45:
e0:5a:74:50:89:bc:24:50:5b:0b:71:61:d5:82:92:83:c2:2a:
02:b9:2a:42:2b:f3:c0:c8:a8:ce:a7:7e:9d:b1:aa:4e:77:4e:
6c:8b:ef:43:38:a1:4c:c1:ca:e2:de:34:77:32:54:41:07:5f:
69:1e:a8:5f:67:c9:99:27:da:f8:4a:ff:4f:93:61:f9:8b:83:
35:ad:2c:09:a9:54:f5:6b:ad:8e:4b:f3:0c:00:ee:06:4d:9a:
f2:40:1e:53:61:72:f4:7a:e2:ac:12:a8:86:36:4a:ee:92:31:
4b:68:a5:fa:7c:b7:b8:3a:f9:fe:21:cc:bf:75:1d:73:95:a1:
ad:18:aa:5a:d5:d8:ab:e8:00:df:6f:48:42:0c:fe:83:7a:12:
50:4d:92:63:3d:77:de:5e:1d:44:0a:ea:50:d5:ea:f5:04:70:
e6:6e:87:54:76:ce:58:d7:bd:88:6a:38:9b:31:3d:e8:f3:19:
97:f2:3b:4a:2a:f4:1d:d0:fa:af:24:1f:ad:bd:90:11:81:15:
3d:37:17:69:c5:d8:8d:5a:6d:6d:c3:03:aa:e7:89:84:ac:05:
dd:40:9d:eb:48:45:38:82:27:24:72:88:02:24:1e:83:43:3d:
1a:c9:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:29 2025 by rpki-client