Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: FfWoaH3u/CNsjXfbiS1YvVIzcnFIgU2SV7LdRU7BPno=
Subject key identifier: CA:A2:B9:7C:7F:45:D8:B1:8A:F0:5E:43:D2:28:50:4B:A6:97:EA:AF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3487D11FB6470B9604E19A58D9A84395CA59FD8C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Wed 02 Apr 2025 15:29:56 +0000
ROA not before: Wed 02 Apr 2025 15:24:56 +0000
ROA not after: Wed 01 Apr 2026 15:29:56 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.103.0/24 maxlen: 24
96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.190.0/23 maxlen: 24
96.62.216.0/21 maxlen: 24
148.135.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:87:d1:1f:b6:47:0b:96:04:e1:9a:58:d9:a8:43:95:ca:59:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 2 15:24:56 2025 GMT
Not After : Apr 1 15:29:56 2026 GMT
Subject: CN=CAA2B97C7F45D8B18AF05E43D228504BA697EAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:a0:8c:a9:63:4f:4c:bb:7a:d0:19:4d:ff:
cf:e1:fb:ad:d7:19:36:47:e4:68:49:cc:62:48:c2:
fb:44:92:6e:3d:d8:2a:a2:fb:49:dd:6e:72:62:0d:
96:01:b3:a7:67:94:52:a4:c7:6b:54:ce:3c:60:de:
10:c3:6d:6a:99:5f:56:e9:13:2f:41:00:db:04:5c:
f5:93:cb:12:83:e0:c4:c0:7a:b0:8f:9b:42:b2:ff:
6f:c7:40:d7:a0:07:fc:a9:16:d6:ff:3d:44:1e:6f:
ac:82:e3:89:20:60:a7:db:bc:70:11:09:58:4d:8f:
6d:6a:cc:57:c5:42:6d:78:08:ab:22:a8:b6:b1:4a:
83:f2:4f:1c:17:90:05:57:32:5b:b4:08:e7:ad:f6:
5f:2e:45:e0:51:92:bb:a2:47:6a:cc:17:5d:2c:30:
1c:c9:23:91:26:db:57:89:1c:c4:40:7f:66:83:5a:
6e:fe:77:12:ad:3e:4b:1b:78:91:28:2d:7e:d2:85:
d9:18:45:bf:32:45:b2:c3:36:b8:90:9a:8b:3c:4c:
75:a1:da:39:73:69:14:ab:f3:f3:5a:ab:fb:ad:6d:
5f:4f:b9:f1:42:0e:c0:54:93:c9:a2:a8:68:c9:bd:
92:e6:76:a8:fc:65:e2:d3:ca:8e:7f:9b:b8:0b:be:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:B9:7C:7F:45:D8:B1:8A:F0:5E:43:D2:28:50:4B:A6:97:EA:AF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.103.0/24
96.62.152.0/21
96.62.190.0/23
96.62.216.0/21
148.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
40:80:b7:42:38:e1:29:55:7e:0f:19:ca:66:f7:5e:dd:1e:f1:
d6:b8:94:f4:85:25:8f:d1:67:8d:6e:ca:88:45:7e:ef:d8:e8:
15:fb:ef:5d:8c:ca:b4:cc:13:5a:6f:b4:86:9c:09:bc:e0:16:
ed:5b:16:5c:e4:54:d1:41:c0:9c:33:28:3b:65:44:71:7a:d0:
2b:8a:9c:8b:7a:66:b5:10:fa:29:c3:ba:bb:ee:1a:d0:4d:27:
18:33:82:d6:0f:32:56:11:4f:e9:aa:26:e0:5b:35:a7:b8:95:
de:53:1c:99:55:b3:85:27:9d:3d:66:d0:48:fc:15:01:41:e4:
80:2f:89:48:de:43:11:dc:b9:47:71:97:dd:4a:f8:c2:d3:ae:
14:f6:0f:7f:27:4b:70:c5:0f:5b:47:1c:cc:c8:77:7c:d7:94:
f2:2e:20:a2:d4:ee:51:c6:27:ae:14:3f:86:26:3c:11:b5:29:
2b:56:a5:de:75:71:3e:9b:89:fc:7b:67:f2:3c:a1:e2:63:39:
2d:51:78:3c:e2:7a:64:92:9e:eb:cc:18:ee:25:56:5a:56:bc:
4f:6a:73:b7:80:47:df:9e:29:1d:df:8a:44:b2:dc:5b:63:93:
b4:c4:4d:e2:b9:0a:66:a1:ee:87:5f:70:c1:23:f0:90:70:d6:
8c:05:a5:a9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUNIfRH7ZHC5YE4ZpY2ahDlcpZ/YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA0MDIxNTI0NTZaFw0yNjA0MDExNTI5NTZaMDMxMTAvBgNV
BAMTKENBQTJCOTdDN0Y0NUQ4QjE4QUYwNUU0M0QyMjg1MDRCQTY5N0VBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkqCMqWNPTLt60BlN/8/h+63X
GTZH5GhJzGJIwvtEkm492Cqi+0ndbnJiDZYBs6dnlFKkx2tUzjxg3hDDbWqZX1bp
Ey9BANsEXPWTyxKD4MTAerCPm0Ky/2/HQNegB/ypFtb/PUQeb6yC44kgYKfbvHAR
CVhNj21qzFfFQm14CKsiqLaxSoPyTxwXkAVXMlu0COet9l8uReBRkruiR2rMF10s
MBzJI5Em21eJHMRAf2aDWm7+dxKtPksbeJEoLX7ShdkYRb8yRbLDNriQmos8THWh
2jlzaRSr8/Naq/utbV9PufFCDsBUk8miqGjJvZLmdqj8ZeLTyo5/m7gLvsgpAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUyqK5fH9F2LGK8F5D0ihQS6aX6q8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTAxMDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAVgPgAD
BABgPmcDBANgPpgDBAFgPr4DBANgPtgDBACUh6EwDQYJKoZIhvcNAQELBQADggEB
AECAt0I44SlVfg8Zymb3Xt0e8da4lPSFJY/RZ41uyohFfu/Y6BX7712MyrTME1pv
tIacCbzgFu1bFlzkVNFBwJwzKDtlRHF60CuKnIt6ZrUQ+inDurvuGtBNJxgzgtYP
MlYRT+mqJuBbNae4ld5THJlVs4UnnT1m0Ej8FQFB5IAviUjeQxHcuUdxl91K+MLT
rhT2D38nS3DFD1tHHMzId3zXlPIuIKLU7lHGJ64UP4YmPBG1KStWpd51cT6bifx7
Z/I8oeJjOS1ReDziemSSnuvMGO4lVlpWvE9qc7eAR9+eKR3fikSy3Ftjk7TETeK5
Cmah7odfcMEj8JBw1owFpak=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net