Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa
File: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (raw, json)
Hash identifier: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=
Subject key identifier: 02:E4:27:3E:5B:D8:69:72:91:94:CE:0A:FE:A6:27:49:01:FC:5E:15
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0194252171D74925B4EDAD9715FF6326D56C
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44789
IP address blocks: 31.24.184.0/21 maxlen: 21
45.10.94.0/23 maxlen: 23
92.63.240.0/20 maxlen: 20
185.143.202.0/23 maxlen: 23
2a00:9860::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:71:d7:49:25:b4:ed:ad:97:15:ff:63:26:d5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e4273e5bd869729194ce0afea6274901fc5e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:95:28:31:44:68:4d:fe:aa:55:5a:e8:ed:
6d:f8:fd:85:e4:65:fc:d8:2d:95:d3:18:6d:3a:34:
9b:b8:3c:36:9b:64:c0:8a:09:d2:c6:3f:45:c9:f7:
07:45:cf:d8:a6:9e:30:46:27:1c:64:b6:48:aa:ea:
50:b7:6b:bd:b0:34:8e:2a:2a:19:f1:c1:b0:d5:5d:
35:ec:09:b6:06:10:3d:04:48:bf:1a:c6:69:74:a7:
61:72:3e:ec:2c:23:5c:3f:69:fe:fe:1b:5f:08:9a:
df:1a:a5:35:4c:26:3a:3a:95:93:c3:b0:58:5d:1d:
bf:f3:1d:b3:83:25:02:be:51:2c:0f:3e:d6:d5:93:
5a:f9:09:8e:55:5b:b4:58:30:d9:9f:4b:cd:95:af:
1d:ce:60:79:0c:cb:78:90:21:b5:cd:b7:8c:7b:15:
2b:c0:64:c4:6e:8e:8f:92:0e:d4:f1:55:63:70:f9:
ba:c8:6c:d1:5c:df:76:fa:1e:96:59:44:19:67:4f:
a3:9e:81:55:68:25:08:96:e1:b2:a3:d0:f3:8e:68:
a9:d5:ca:a7:f9:a6:58:66:0f:fd:04:9b:92:64:1f:
ca:bf:c8:8e:e1:64:9d:b2:1d:17:aa:43:d9:39:f1:
b7:aa:ae:96:e8:8c:9b:89:65:14:91:90:67:3e:db:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:27:3E:5B:D8:69:72:91:94:CE:0A:FE:A6:27:49:01:FC:5E:15
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.184.0/21
45.10.94.0/23
92.63.240.0/20
185.143.202.0/23
IPv6:
2a00:9860::/37
Signature Algorithm: sha256WithRSAEncryption
4c:a9:4b:c8:8f:28:e6:b5:04:33:3a:9c:bb:ab:06:96:38:47:
06:46:82:c5:47:5a:7a:b9:22:62:91:7a:52:ae:cf:32:6d:b7:
8c:01:f4:a8:2c:78:25:f7:e1:5f:6e:15:e7:46:86:d6:b7:fc:
b9:5a:4a:21:ba:49:d7:54:91:ca:64:ff:2d:38:bf:fe:b8:db:
56:3b:78:1f:12:8d:66:48:9c:e0:15:0f:20:8f:fc:e0:7e:63:
df:19:c9:63:74:04:45:19:e2:a9:a7:84:f6:9f:11:e5:b0:ed:
9b:7c:16:b0:c9:7d:eb:b2:e9:e6:59:36:10:88:d8:14:ed:53:
56:9a:43:d7:d6:b8:e3:17:6e:da:0f:ba:6c:c3:8d:ab:40:77:
8f:f4:3c:0b:96:79:6a:38:6c:04:3f:9d:e8:5d:f4:e9:a6:b8:
f9:06:4d:cb:65:62:7f:62:ed:b1:b4:25:cf:df:a1:56:1c:ea:
54:a4:65:f6:21:b8:bc:94:97:6c:d5:41:cf:04:ef:91:92:d7:
7e:31:a4:27:a4:3e:b9:4c:e0:03:1a:3e:41:3c:bb:e1:cd:b0:
51:50:5f:8a:a6:45:d7:89:b6:4c:79:15:d9:7d:d7:45:02:1a:
23:ee:6f:88:00:07:cc:89:e3:c5:be:73:18:88:52:66:0e:fa:
07:ab:06:04
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQlIXHXSSW07a2XFf9jJtVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjUwMTAyMDM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmU0MjczZTViZDg2OTcyOTE5NGNlMGFmZWE2Mjc0OTAxZmM1ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEiVKDFEaE3+qlVa6O1t+P2F5GX8
2C2V0xhtOjSbuDw2m2TAignSxj9FyfcHRc/Ypp4wRiccZLZIqupQt2u9sDSOKioZ
8cGw1V017Am2BhA9BEi/GsZpdKdhcj7sLCNcP2n+/htfCJrfGqU1TCY6OpWTw7BY
XR2/8x2zgyUCvlEsDz7W1ZNa+QmOVVu0WDDZn0vNla8dzmB5DMt4kCG1zbeMexUr
wGTEbo6Pkg7U8VVjcPm6yGzRXN92+h6WWUQZZ0+jnoFVaCUIluGyo9Dzjmip1cqn
+aZYZg/9BJuSZB/Kv8iO4WSdsh0XqkPZOfG3qq6W6IybiWUUkZBnPtuAzwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFALkJz5b2GlykZTOCv6mJ0kB/F4VMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvQXVRblBsdllhWEtSbE00S19xWW5TUUg4WGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQDHxi4AwQB
LQpeAwQEXD/wAwQBuY/KMA4EAgACMAgDBgMqAJhgADANBgkqhkiG9w0BAQsFAAOC
AQEATKlLyI8o5rUEMzqcu6sGljhHBkaCxUdaerkiYpF6Uq7PMm23jAH0qCx4Jffh
X24V50aG1rf8uVpKIbpJ11SRymT/LTi//rjbVjt4HxKNZkic4BUPII/84H5j3xnJ
Y3QERRniqaeE9p8R5bDtm3wWsMl967Lp5lk2EIjYFO1TVppD19a44xdu2g+6bMON
q0B3j/Q8C5Z5ajhsBD+d6F306aa4+QZNy2Vif2LtsbQlz9+hVhzqVKRl9iG4vJSX
bNVBzwTvkZLXfjGkJ6Q+uUzgAxo+QTy74c2wUVBfiqZF14m2THkV2X3XRQIaI+5v
iAAHzInjxb5zGIhSZg76B6sGBA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net