Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=
Subject key identifier: 73:52:21:26:89:48:B6:13:2C:03:F2:E7:CF:43:4E:B2:EA:DA:81:F4
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 6CFDB696C7C3AC0D16E3F68A864C7422A4F86B98
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa
Signing time: Mon 03 Mar 2025 12:32:02 +0000
ROA not before: Mon 03 Mar 2025 12:27:02 +0000
ROA not after: Mon 02 Mar 2026 12:32:02 +0000
asID: 10103
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fd:b6:96:c7:c3:ac:0d:16:e3:f6:8a:86:4c:74:22:a4:f8:6b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Mar 3 12:27:02 2025 GMT
Not After : Mar 2 12:32:02 2026 GMT
Subject: CN=735221268948B6132C03F2E7CF434EB2EADA81F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:86:13:dd:6a:a4:63:ad:e6:47:22:d6:26:
b5:a2:df:45:26:91:10:bc:53:81:aa:f8:7d:58:26:
09:43:f4:d7:91:14:03:19:8f:47:1d:96:0f:d0:f9:
20:e2:7f:9c:67:bd:7a:43:a7:8e:e7:c2:aa:a0:3f:
ec:95:b5:9e:e4:cf:81:5e:91:2d:24:ba:d8:55:0a:
1d:31:1c:15:6b:bb:bc:c2:2e:94:c2:24:5e:46:c1:
a5:42:09:38:41:6d:7b:c6:0a:2f:47:a2:c9:ad:cb:
58:3d:6e:72:17:be:80:aa:1c:10:fb:e6:50:63:51:
85:1f:28:f3:0c:d6:0a:16:93:42:87:43:ce:30:7b:
05:cb:23:d8:c6:e4:b1:87:76:74:9a:59:e8:92:47:
0f:60:8e:cd:96:cb:74:18:91:54:68:d9:23:a3:37:
95:0a:aa:b3:be:75:f2:40:78:af:e3:b4:f6:f8:c7:
3e:d1:e9:66:f3:68:b7:2e:c5:fb:dc:cd:27:0d:cb:
0c:b2:bd:13:3d:69:fc:6b:2c:01:9f:9e:28:32:b9:
61:90:42:f0:d5:c0:a2:0a:df:65:86:98:8e:fe:bb:
14:0c:40:84:93:95:bb:d9:e4:e4:77:df:2c:32:98:
8e:8e:80:f3:f7:85:01:18:67:19:5c:7e:73:66:5d:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:21:26:89:48:B6:13:2C:03:F2:E7:CF:43:4E:B2:EA:DA:81:F4
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ab:e2:d5:61:76:7d:7f:23:87:c2:51:3e:8f:4f:00:c2:eb:
74:65:66:60:ff:e2:02:5c:e2:80:db:dc:f5:1e:fc:ce:c7:ab:
69:2c:95:e0:3a:4e:64:39:7a:8b:36:75:58:5c:b1:c5:a6:bb:
89:64:8d:83:eb:28:94:a9:10:a6:bd:8b:f1:ba:64:7e:b7:2c:
eb:c7:32:31:72:86:3f:21:b3:81:d3:cf:44:bd:21:73:d4:02:
c5:10:12:c0:48:e8:d9:1a:26:bd:70:f4:d7:67:f5:94:54:79:
a8:80:a8:9c:22:23:5b:d6:17:d8:92:ed:44:3f:e8:c5:f2:a6:
b7:c8:61:af:dc:f6:19:3f:6d:2d:b0:db:9c:8c:9e:5c:0e:a6:
c7:4a:e7:11:ad:6a:ab:d3:32:81:b8:10:45:9c:8f:5d:25:71:
9d:7b:ea:0a:2c:9c:bb:e9:d4:9f:d8:b7:cc:43:f5:34:15:d8:
e7:8f:d7:52:d5:98:dc:a5:e8:7d:86:1e:8c:60:67:ab:67:30:
e3:de:ad:57:9e:10:6f:a9:fb:aa:ba:b6:1a:40:77:ac:98:5f:
23:32:93:c2:9c:b0:60:f9:38:9c:74:3c:f0:a9:e3:ef:50:3f:
f2:9a:0c:6f:c5:6f:d7:f4:e8:e2:70:da:cf:43:2a:54:f8:28:
43:ec:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:13 2025 by rpki-client