Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa
File: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (raw, json)
Hash identifier: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=
Subject key identifier: 36:B5:3F:32:3F:75:46:22:37:D7:E7:DF:9F:58:9B:03:43:C7:D9:9D
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 3FFF7B7C18037ADD21063C1AA90D22ED04C7959D
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa
Signing time: Tue 18 Feb 2025 17:36:12 +0000
ROA not before: Tue 18 Feb 2025 17:31:12 +0000
ROA not after: Tue 17 Feb 2026 17:36:12 +0000
asID: 48435
IP address blocks: 195.42.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:7b:7c:18:03:7a:dd:21:06:3c:1a:a9:0d:22:ed:04:c7:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:31:12 2025 GMT
Not After : Feb 17 17:36:12 2026 GMT
Subject: CN=36B53F323F75462237D7E7DF9F589B0343C7D99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:89:f0:8f:ab:41:8a:c3:a6:e9:08:b9:00:
2e:f4:c9:d7:f7:cf:99:9b:34:9e:df:f5:90:70:b3:
00:a4:fd:ed:d9:d2:70:ac:bb:36:c6:05:e8:e9:17:
14:a9:5f:ec:40:61:10:7b:5b:a3:c5:99:cf:db:54:
21:e6:43:99:65:e3:af:64:75:89:e0:44:9d:72:c2:
76:29:8a:fe:d8:92:a1:97:dd:e0:a0:19:b2:c8:b0:
19:ab:9d:43:5c:d6:1a:23:36:2a:ad:4a:b2:da:31:
64:ac:88:d5:96:27:28:9a:06:e5:bb:ed:98:39:4a:
c7:23:06:8c:de:0d:b9:38:aa:52:7d:c4:db:c5:28:
cc:9f:03:31:ec:77:58:54:14:a2:3b:f8:78:19:50:
df:bd:a2:ab:cf:ca:0b:8b:ce:19:e3:3c:af:73:14:
69:02:73:dd:d3:bb:34:a2:07:f7:f5:fd:86:29:1b:
07:59:45:31:b6:ae:61:1a:93:68:81:84:76:85:72:
ec:ab:4b:3d:2f:f7:ff:8c:89:68:8c:1c:12:2d:be:
c4:29:4a:f7:7f:1e:d2:b5:90:97:a9:44:d6:29:04:
b2:6f:eb:cd:b2:78:d9:8f:47:31:1d:51:e4:75:1f:
2a:1f:07:bd:f7:cc:ce:ff:05:3e:31:7c:19:44:e6:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:3F:32:3F:75:46:22:37:D7:E7:DF:9F:58:9B:03:43:C7:D9:9D
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
03:bb:7e:aa:7b:91:bb:f8:9b:f2:ac:a7:7b:5d:eb:6a:c3:81:
bc:95:5a:11:de:db:53:2a:df:14:b7:f8:db:0f:1a:d3:95:9a:
8b:a7:04:6b:61:77:05:d5:e3:ff:f0:60:20:67:fd:6e:3f:dc:
df:ae:5c:e7:05:bb:20:39:7b:b7:24:de:6a:d9:9a:ac:1b:90:
9e:a6:0f:32:9f:54:e5:68:40:3f:82:04:88:0d:3d:e0:8c:19:
19:93:6b:a6:de:36:e0:df:bf:38:a8:be:e6:44:79:9a:52:25:
36:8c:75:96:8b:ea:03:0c:8e:47:34:ed:01:9c:6f:3b:46:03:
42:65:e4:e9:d7:cc:33:ed:26:9e:b8:48:fc:9c:14:47:b6:73:
f5:46:89:f7:48:42:c8:c6:e5:59:76:25:de:7c:76:44:32:f3:
f3:6c:99:c0:da:34:d7:8d:e1:ea:0a:72:6c:44:77:e0:8b:53:
9f:37:20:ce:0f:a2:78:49:a3:e0:3b:1b:36:a0:2e:bf:9b:fd:
96:84:af:28:11:95:44:4d:cd:ef:f2:5b:3a:69:3e:51:ca:30:
32:3f:87:4c:ba:aa:36:e7:c1:4e:7e:df:ae:3a:af:7d:b3:4d:
8c:31:23:88:6a:9a:72:6e:c7:e9:b5:e2:4c:39:0f:44:69:69:
6b:9f:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:15 2025 by rpki-client