Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44382.roa
File: AS44382.roa (raw, json)
Hash identifier: 42qWg1v+4z3Gj0UQt32ryc7G+5URpoOYUXp+FCuBBHM=
Subject key identifier: 8B:35:60:15:EF:5D:39:80:D2:7C:A9:F0:6F:62:03:65:CF:BF:10:0A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3E40B739A11FFFD63C7C407D64081ECCBDD03858
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44382.roa
Signing time: Thu 13 Mar 2025 20:44:09 +0000
ROA not before: Thu 13 Mar 2025 20:39:09 +0000
ROA not after: Thu 12 Mar 2026 20:44:09 +0000
asID: 44382
IP address blocks: 141.11.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:40:b7:39:a1:1f:ff:d6:3c:7c:40:7d:64:08:1e:cc:bd:d0:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 13 20:39:09 2025 GMT
Not After : Mar 12 20:44:09 2026 GMT
Subject: CN=8B356015EF5D3980D27CA9F06F620365CFBF100A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:97:63:d7:96:06:98:33:16:90:b8:79:96:
59:7e:c0:2e:af:c5:7f:21:ee:aa:8f:19:1e:1c:34:
15:fb:3a:da:2e:95:ff:a8:aa:34:3e:a9:24:19:f3:
f7:f7:07:dd:ee:24:37:b9:52:d0:67:d0:82:aa:4e:
3f:af:26:b7:14:a0:41:d1:39:b3:5c:67:46:1a:c4:
80:4b:7c:4e:a9:6f:f8:be:78:bf:6c:24:da:7a:03:
b5:92:33:4e:bc:33:b2:ce:31:4a:26:f0:3d:0f:73:
de:5c:62:27:d2:dd:97:46:51:40:62:42:d2:45:b0:
37:87:3c:e8:4a:ef:e6:6e:e3:36:da:8a:ce:71:24:
ee:84:5f:04:35:e2:1f:e9:6c:e5:03:3a:63:e1:2e:
23:3d:16:52:7e:51:10:e4:e7:06:53:21:d1:46:82:
12:c3:c6:dd:95:fe:3c:7b:f8:a0:e8:66:f9:20:94:
32:23:c9:d2:a1:4e:e3:32:37:80:9b:d8:53:55:72:
18:9f:47:37:71:cf:bd:8f:cc:ad:fd:17:a3:99:ff:
72:82:2c:79:0f:7a:a7:bd:c5:18:8d:df:99:99:e7:
db:e9:96:7c:c7:02:fe:7c:08:44:ea:a2:75:97:31:
db:2e:7f:53:dd:38:20:ad:5a:3e:c1:bb:c2:38:fc:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:60:15:EF:5D:39:80:D2:7C:A9:F0:6F:62:03:65:CF:BF:10:0A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS44382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.105.0/24
Signature Algorithm: sha256WithRSAEncryption
39:89:9f:32:38:fc:f0:f6:d9:24:d5:bb:c3:0a:04:e9:70:8b:
57:25:a8:8f:16:70:4b:e4:c7:b7:44:19:60:69:36:c4:67:92:
64:6b:ba:64:0d:b7:b4:37:28:12:1f:04:74:18:74:3b:8b:1f:
81:5c:0d:3d:27:79:a0:91:c4:87:56:69:7a:79:ed:e5:23:dd:
a6:6b:23:90:87:45:f6:f0:0c:e8:a5:29:1b:b8:20:ee:2d:22:
7c:b7:b5:c2:2b:10:3c:92:05:cb:82:e9:7c:20:e0:6a:c1:b0:
7a:e9:9a:e0:06:fb:76:c4:65:36:df:6d:fa:11:25:1f:c5:38:
17:55:56:2c:ab:af:eb:74:49:e6:ce:f2:43:52:b6:31:55:2d:
17:32:59:22:ce:65:ea:14:f1:e3:be:8f:07:4c:40:fb:0e:c7:
ac:49:b2:b1:0b:c6:5f:15:b3:2c:3c:33:cd:40:0f:91:44:bb:
fe:de:d8:6c:d8:d3:3e:2b:7a:e8:b5:58:6b:7a:4f:6f:53:38:
f8:a3:bd:d9:4d:c4:82:a6:bb:ac:2f:1b:5b:3c:20:0a:5d:21:
01:47:dd:5d:ca:7b:de:0e:33:30:17:88:66:46:06:20:86:d7:
6a:a2:e4:20:8d:a9:ee:a8:53:03:27:4d:d7:a5:95:8e:e1:29:
b8:b7:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:59 2025 by rpki-client