Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: rPbQ53Bda8XHKGrcbtxm/Q0y0Si5tlKIdOB8kDSU17k=
Subject key identifier: 83:DD:53:EA:00:8E:7D:A7:3E:39:19:3C:C6:08:76:06:DF:0C:AC:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 589C283E0F1CF9ED0E4C78413B99F176AAB4C5A0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401190.roa
Signing time: Mon 24 Mar 2025 12:21:34 +0000
ROA not before: Mon 24 Mar 2025 12:16:34 +0000
ROA not after: Mon 23 Mar 2026 12:21:34 +0000
asID: 401190
IP address blocks: 82.29.28.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9c:28:3e:0f:1c:f9:ed:0e:4c:78:41:3b:99:f1:76:aa:b4:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 24 12:16:34 2025 GMT
Not After : Mar 23 12:21:34 2026 GMT
Subject: CN=83DD53EA008E7DA73E39193CC6087606DF0CACF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:a5:89:fe:a9:f6:c1:8b:db:bc:70:02:4e:
84:42:0b:9a:4a:a5:d3:2f:13:63:cc:99:c1:73:25:
b9:09:bb:ee:91:77:69:e9:1b:77:3d:d0:0f:98:2d:
2f:5f:5c:e9:ce:09:94:4d:c0:ee:a2:44:b9:c7:5c:
18:31:b2:f3:2e:a6:0d:4a:b2:ae:a1:36:41:df:22:
83:87:15:31:19:68:a5:d9:3d:1c:81:52:ab:66:2d:
25:34:93:31:0d:4d:c0:ce:59:f9:23:64:9c:7d:d2:
64:15:10:5a:ac:97:cb:2a:37:ad:39:da:fb:2b:6d:
62:69:c5:26:47:9b:4f:47:91:3d:9d:f8:21:eb:01:
c3:49:2f:d0:e0:17:a5:1a:c7:5b:26:f9:02:71:d8:
b0:58:42:07:f5:d0:c6:19:c1:44:ad:55:64:36:67:
2b:8f:6b:fd:fe:c0:2d:e7:14:29:0c:46:4c:68:a9:
fa:f3:b6:10:10:a9:2f:45:9e:cc:37:62:fc:09:47:
21:39:1f:e1:e6:ac:34:17:47:ab:6f:a2:93:30:b8:
ae:50:b6:a9:28:c2:28:e5:c3:45:d3:81:d9:0c:93:
61:77:72:b4:ef:86:ae:38:41:c1:c9:f5:fb:3c:ae:
93:07:f4:a1:3f:19:d2:6f:23:48:07:40:99:e5:66:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DD:53:EA:00:8E:7D:A7:3E:39:19:3C:C6:08:76:06:DF:0C:AC:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.28.0/24
82.29.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d1:cc:2a:4a:63:cd:83:fe:6e:6c:d9:ca:7e:aa:7c:61:02:
27:54:ea:f5:42:52:af:23:2d:00:ce:86:5c:58:6c:d9:a6:d8:
c2:09:70:7c:7b:86:f7:89:60:59:90:16:70:1d:62:48:f1:65:
9b:58:e7:d7:44:99:03:63:7e:32:fe:7d:bd:fe:2d:8a:5a:bd:
6f:bf:ee:39:68:d2:42:85:58:92:66:c1:29:c3:f3:43:e7:67:
34:a2:7b:ca:bd:bc:a5:dd:0d:dd:71:11:4b:37:e2:94:23:d9:
d9:dd:92:da:ff:bb:44:cc:d6:f3:99:e5:ee:01:ee:46:75:d1:
93:1c:e4:99:dc:de:4d:7d:28:27:09:24:6e:ec:0b:2e:83:1e:
37:fd:92:1d:0b:2d:b7:7e:cc:5b:50:3d:99:00:9a:1c:e8:cd:
d1:0a:0a:fe:93:1b:7e:fd:4a:28:71:8d:d9:36:f0:84:29:9c:
e8:e1:eb:b8:96:57:b8:de:96:64:e1:55:85:e0:6e:ff:70:e5:
17:23:c6:19:0a:92:15:82:59:92:56:ab:5b:22:44:35:b0:48:
4d:bb:6c:b7:dc:7a:02:b1:eb:1b:b8:81:e3:6c:a1:e1:bb:5d:
17:02:02:fb:4d:12:54:a7:8a:e4:08:c4:07:c0:6b:eb:18:e8:
5d:20:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:51 2025 by rpki-client