Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203230343733.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 1fenasM7gpnJqDyjveLqW1Th0cfCazndhXu2GhZG4zc=
Subject key identifier: 5E:4C:D1:0F:BA:B2:7C:81:36:04:C4:ED:A5:BA:AD:89:8C:F9:BD:8F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 397977E5AF3D4E7698378AE6584A80CB5FB971F8
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203230343733.roa
Signing time: Sat 15 Feb 2025 14:35:19 +0000
ROA not before: Sat 15 Feb 2025 14:30:19 +0000
ROA not after: Sat 14 Feb 2026 14:35:19 +0000
asID: 20473
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:77:e5:af:3d:4e:76:98:37:8a:e6:58:4a:80:cb:5f:b9:71:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 15 14:30:19 2025 GMT
Not After : Feb 14 14:35:19 2026 GMT
Subject: CN=5E4CD10FBAB27C813604C4EDA5BAAD898CF9BD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:14:63:30:f8:6c:db:f3:0c:d8:3a:2b:20:
e6:b1:b0:74:5a:06:2b:60:58:d6:cb:64:1a:44:33:
81:0c:c4:3a:da:cc:5a:14:ad:6d:d5:f2:23:36:2a:
3f:f9:9d:70:da:f5:15:68:7f:95:99:ca:7c:f5:29:
48:42:54:7b:bd:ef:c2:f0:08:56:5b:c1:5f:7e:dd:
49:73:2a:5a:ca:7b:d5:cd:9c:ac:a0:d0:a8:a5:0a:
3a:64:08:6a:17:00:d4:d0:44:98:01:c5:c1:a1:d4:
39:9e:29:a4:58:7a:47:9a:2e:37:20:d5:8c:85:72:
e4:34:89:4e:88:31:b1:bd:d8:29:1f:de:f9:99:14:
51:9a:f6:11:13:90:9d:35:9b:0b:aa:26:64:e9:d6:
86:9d:8e:8c:9e:f5:d3:af:59:b3:93:2c:da:0b:6b:
00:b3:78:ea:5d:33:83:03:6c:91:9b:ac:03:e0:bf:
41:04:71:6e:39:c3:95:42:b0:36:78:a7:f0:ce:72:
b4:63:12:bf:45:8b:54:1d:ee:da:be:bf:c2:a7:0c:
16:53:01:38:22:3d:40:61:48:f4:d5:55:a4:a3:98:
da:26:dc:de:c0:d8:2b:da:a1:a2:27:56:ab:fd:70:
0a:b3:80:8c:34:97:2e:fc:24:da:8b:fa:0a:23:7b:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4C:D1:0F:BA:B2:7C:81:36:04:C4:ED:A5:BA:AD:89:8C:F9:BD:8F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a6:44:3f:fb:ea:d2:25:65:11:e4:38:73:e9:86:6a:8c:a9:
55:45:4c:7a:8f:0f:eb:55:43:fa:3c:a2:97:98:72:68:39:47:
1c:92:20:79:c9:b8:00:0d:c9:74:bb:a9:7a:ca:d4:23:04:d3:
35:cc:84:28:c0:8f:fe:2c:26:0f:8b:5c:e3:61:f1:e4:a6:1f:
f6:09:84:49:5c:ad:50:5f:52:00:c8:83:94:62:30:a7:e1:2a:
2a:5c:a1:dc:dd:77:c3:66:06:df:d1:38:5a:29:2f:bb:dd:cb:
d6:da:43:ba:08:30:7b:81:f8:dd:00:5e:34:14:ac:14:a1:f3:
71:f4:39:16:89:a1:9b:33:01:25:c9:41:83:5b:6c:2f:aa:3f:
1f:21:10:16:01:a3:55:93:b4:a2:56:3a:23:57:8b:53:5b:78:
24:86:e9:97:af:32:17:c3:ea:ce:70:14:f4:95:6a:89:65:9c:
d1:68:a4:3a:cc:9d:83:77:cb:2f:7a:8a:2e:94:17:7c:09:cf:
2f:1e:a3:3d:d6:2d:34:26:b8:8d:a7:b2:70:69:d6:52:78:1e:
8d:43:5f:b6:70:c1:b9:22:79:93:e5:24:60:15:81:1a:01:69:
3f:86:17:45:75:7c:c0:db:cb:89:2a:f5:11:53:ee:50:26:06:
df:6c:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:35 2025 by rpki-client