Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa
File: 3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa (raw, json)
Hash identifier: 4MSVPqiQDKA8SKRIIRsT8w0YWOClRX08NcPzC8FEPc0=
Subject key identifier: 48:91:25:5E:DB:85:68:2D:D1:3D:C1:F8:35:70:EE:91:4E:03:5C:44
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 2A5890C0CA8AA8DA7F7AB19C0A0AE3E5D9C0C215
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa
Signing time: Mon 10 Feb 2025 17:36:49 +0000
ROA not before: Mon 10 Feb 2025 17:31:49 +0000
ROA not after: Mon 09 Feb 2026 17:36:49 +0000
asID: 211014
IP address blocks: 109.234.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:58:90:c0:ca:8a:a8:da:7f:7a:b1:9c:0a:0a:e3:e5:d9:c0:c2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 10 17:31:49 2025 GMT
Not After : Feb 9 17:36:49 2026 GMT
Subject: CN=4891255EDB85682DD13DC1F83570EE914E035C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:3f:54:c0:75:51:9f:f9:30:89:bb:c9:2a:
cf:be:d1:2e:12:96:e3:fb:68:bd:9d:f4:80:d4:95:
2d:81:5b:35:a1:a5:52:17:8f:0c:0c:05:b1:ff:98:
1f:89:fa:6e:fa:ee:63:2d:8e:e7:17:a3:48:42:47:
0c:e2:34:82:ff:f7:a0:17:8c:34:ac:b9:2e:e5:62:
72:a9:80:91:4d:6a:12:e8:45:52:d1:e7:5d:5b:83:
be:30:c1:73:a8:78:02:bb:80:18:2c:b2:5c:c6:4e:
eb:78:f1:eb:07:0c:eb:96:55:38:1b:9c:4b:fa:5e:
4e:3d:65:db:fd:c7:b0:da:66:2a:1d:9c:a6:81:c1:
e0:93:90:42:70:36:77:54:47:ac:c2:ca:60:e6:2a:
29:1e:ca:c7:17:de:a8:d1:c7:aa:b9:8d:45:8a:f4:
a4:8f:40:cd:fd:58:7c:03:f7:d5:ac:7c:47:dc:10:
34:3a:ec:2d:e8:db:a0:06:68:20:da:60:f7:48:a3:
8e:e6:72:a2:af:a6:e7:9e:af:1f:8a:7a:aa:e9:ea:
1f:9b:5c:1a:3c:6d:01:ae:ab:5e:4d:b8:fe:1d:90:
5e:a6:99:cd:77:23:c8:6d:11:85:43:bc:00:e2:49:
07:9d:e0:7d:c9:dd:38:f6:79:ab:44:ea:76:a2:88:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:25:5E:DB:85:68:2D:D1:3D:C1:F8:35:70:EE:91:4E:03:5C:44
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a7:2b:c9:56:4f:dd:2b:4f:68:71:1b:83:51:71:af:7d:aa:
d5:a6:bd:98:8b:0b:09:d8:69:d9:8b:0d:a3:23:65:0a:cc:e0:
42:cb:39:18:6d:b5:c9:0b:fd:08:0f:31:f4:1a:1c:ad:7d:50:
63:4a:95:cf:fa:fe:c6:ac:0b:66:7e:ae:39:ff:ca:37:f2:5e:
11:31:4e:a0:cc:f3:e5:2a:91:a5:ba:e8:ba:8f:52:f1:af:c2:
7e:44:ce:d2:d9:b2:a1:47:7c:69:61:e4:28:ef:ef:7e:00:33:
fe:ed:5c:02:73:e4:c4:b7:f2:ae:f0:58:f9:2d:17:80:de:f3:
bd:c5:c4:c5:5c:7e:e7:94:a9:e1:ea:a9:98:cb:4a:4e:20:0b:
2b:c0:8d:95:72:32:cd:d1:43:3b:16:c5:85:17:3a:88:84:cf:
dc:84:f6:60:a0:78:28:08:68:be:89:72:ef:69:53:7a:27:b6:
f0:f5:31:fb:71:83:d3:8b:63:d1:9c:82:c5:42:91:45:51:b7:
cd:ae:e3:0b:a1:7f:7c:ce:54:98:21:a9:9e:75:dd:32:90:cc:
c2:69:e0:1b:d0:f6:de:0c:14:dc:83:ec:13:d7:3a:6b:21:1c:
8e:d7:8f:52:4e:40:32:4a:dd:80:aa:68:51:0c:21:0a:ba:d4:
ef:15:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:01:00 2025 by rpki-client