Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/Ayr05U3NKAd6mblS63pAVZbHnEI.roa
File: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (raw, json)
Hash identifier: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=
Subject key identifier: 03:2A:F4:E5:4D:CD:28:07:7A:99:B9:52:EB:7A:40:55:96:C7:9C:42
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 019427482851E9FF83FDEDF6777FD2964206
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/Ayr05U3NKAd6mblS63pAVZbHnEI.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49010
IP address blocks: 193.162.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:28:51:e9:ff:83:fd:ed:f6:77:7f:d2:96:42:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=032af4e54dcd28077a99b952eb7a405596c79c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:8d:e3:a8:cc:0a:c5:4b:cc:9c:28:a7:b0:
46:c4:b9:10:39:db:2b:e1:e1:ab:21:51:38:2d:85:
04:d5:bc:b2:f4:6a:1a:26:f4:bb:f0:19:6b:6f:b9:
b2:80:af:8f:5f:54:59:77:ce:68:84:0c:43:49:19:
e7:fa:8d:ac:5b:59:27:7b:fd:53:0e:93:27:5e:89:
39:de:b8:2c:54:65:b1:72:86:e1:ab:57:7a:c3:bb:
5b:28:b1:26:b3:fc:83:51:c8:53:47:82:6d:f3:90:
77:2f:66:da:f6:94:fe:3a:f0:e6:58:47:f7:25:6f:
c8:d0:0c:af:ad:55:d7:62:c4:10:d8:bc:a4:c6:25:
09:87:ed:28:c5:a2:db:44:d9:bf:6d:f1:4c:0e:81:
18:a6:61:06:5d:8f:fb:be:0f:42:fe:e8:90:18:91:
47:aa:75:f2:ba:8f:f4:d3:25:02:1c:22:c0:b5:f8:
ae:f5:5d:79:9b:80:49:90:25:99:00:55:33:ca:bc:
c1:68:b0:68:c5:35:bf:6c:6d:d1:0e:a5:14:58:1a:
80:f2:8e:42:11:fc:27:f2:ef:90:98:69:d8:45:12:
2e:06:65:dc:85:10:2f:42:be:57:d2:f3:ca:08:f9:
34:54:b1:f2:60:57:00:ec:f2:2f:ee:f0:a9:6e:48:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2A:F4:E5:4D:CD:28:07:7A:99:B9:52:EB:7A:40:55:96:C7:9C:42
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/Ayr05U3NKAd6mblS63pAVZbHnEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e2:70:b0:ec:28:02:b7:a2:5e:2d:d8:82:d1:2a:11:88:5e:
ef:1d:4e:0c:b2:fe:98:2b:3f:26:64:f5:07:dd:56:1e:b0:c7:
bd:58:8f:92:a8:d5:b8:a5:c4:c9:51:0d:3e:eb:bd:60:30:80:
06:48:c2:63:6f:4e:02:04:85:9d:e0:60:33:37:a0:0d:a4:ca:
3d:86:7d:44:b3:e7:41:6c:e0:f8:b3:d5:6e:a9:67:4e:25:7e:
ad:39:42:60:d7:1a:11:0a:f6:67:c3:6f:50:6b:f8:cc:7a:52:
9f:d3:9d:77:7e:7c:09:19:c1:6c:2b:e9:e4:47:6a:ee:49:85:
b3:0e:b6:9f:3d:8e:93:61:fb:a5:78:38:21:9c:73:c1:8f:e7:
5c:bb:84:cf:96:02:c7:83:84:30:e8:f2:6e:ed:39:0e:2d:61:
ff:18:d8:5d:ae:b6:61:78:0b:5e:b0:f0:df:93:10:b5:0c:ef:
c5:7b:1d:15:5f:83:18:7f:4c:64:78:3f:23:29:1b:ee:e9:a9:
5b:62:2b:32:be:68:39:13:59:8b:57:a8:28:49:fe:96:70:09:
9e:7f:24:e4:f7:0c:06:06:51:e4:5f:03:a0:a3:41:3f:7b:b5:
32:74:b5:1d:1f:5b:88:dd:04:d3:a1:1a:dc:97:7c:6a:38:1c:
3e:b6:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net