Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303631.roa
File: 3130392e3131302e3136372e302f32342d3234203d3e20323136303631.roa (raw, json)
Hash identifier: QhZQycRQChezIrgQGHj4toPlmTy+HRk3lrvFH+bGaxA=
Subject key identifier: 1D:F7:09:FF:6D:BF:41:D5:8C:93:03:EA:55:AA:82:12:A2:1A:D6:3B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6EF27ABDC35A86A48DE0A8A09F726D367FB8CB5F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303631.roa
Signing time: Tue 01 Oct 2024 17:22:45 +0000
ROA not before: Tue 01 Oct 2024 17:17:45 +0000
ROA not after: Tue 30 Sep 2025 17:22:45 +0000
asID: 216061
IP address blocks: 109.110.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f2:7a:bd:c3:5a:86:a4:8d:e0:a8:a0:9f:72:6d:36:7f:b8:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 1 17:17:45 2024 GMT
Not After : Sep 30 17:22:45 2025 GMT
Subject: CN=1DF709FF6DBF41D58C9303EA55AA8212A21AD63B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:61:d5:dd:14:39:5b:a8:c6:18:c4:84:39:
64:33:72:71:63:9f:f0:92:c4:b9:4a:56:4a:8e:0e:
0f:20:ba:8e:1a:ca:d0:b4:7b:df:54:b2:f9:3d:5d:
7d:30:f9:47:a2:d6:9e:88:13:2f:99:0a:1b:98:51:
d8:ed:19:22:e1:d3:38:e6:4c:80:d2:dc:72:6b:84:
2c:f4:31:a6:08:03:7b:b5:fe:e0:da:bb:70:52:dc:
1f:ab:68:4e:65:01:0d:fe:c7:63:2e:78:fa:e2:d8:
38:4a:ce:07:4e:d2:93:eb:43:f6:d0:c5:5d:be:42:
67:c0:55:41:53:d1:52:97:1b:00:77:81:7d:c6:f7:
e9:b9:2f:ee:59:c7:a4:10:a4:c7:0a:9c:b7:88:9a:
b2:23:f2:6a:24:56:18:1f:f9:0f:2c:1e:55:cb:94:
74:02:1c:a4:37:7e:b7:2c:24:e9:6e:8b:fc:c2:a2:
4a:a8:b2:c7:9a:11:cc:e5:d0:d8:41:c8:a8:e5:90:
50:dd:0a:db:f9:6e:d9:06:a3:07:ae:8c:08:2f:85:
b6:a6:69:52:56:e4:8b:9a:fb:c6:1e:dc:5e:19:75:
52:51:cf:cc:86:f0:92:bb:fe:b7:77:b0:15:72:61:
19:00:7a:2a:bb:40:44:70:59:d8:bc:31:82:df:26:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:09:FF:6D:BF:41:D5:8C:93:03:EA:55:AA:82:12:A2:1A:D6:3B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136372e302f32342d3234203d3e20323136303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:20:ea:ef:28:7c:14:f0:be:d2:da:62:56:69:5b:5f:f7:78:
75:29:b3:eb:b1:e6:74:6b:cd:73:fb:aa:14:87:15:ee:71:98:
c3:6d:d7:ed:25:bf:ab:d5:c6:51:49:2b:e1:90:9f:19:e3:ce:
97:ff:41:88:92:f1:6c:f1:b1:af:3e:5e:f2:7f:d7:61:fd:e1:
2f:ab:b4:47:9c:d0:3e:17:41:4e:2c:f5:67:f8:d8:b1:19:c8:
45:29:19:71:b6:f1:3f:a7:76:a3:dd:40:f7:39:dc:9e:79:62:
d7:dd:26:c5:8d:c7:c5:1f:2a:32:cc:72:20:44:1c:97:55:28:
8f:3c:54:c5:15:77:8b:41:db:2b:17:62:97:8c:94:34:6a:8e:
3e:ea:f5:72:db:25:47:d3:af:24:2d:09:28:89:a8:5e:4a:c3:
b5:89:8a:40:ca:03:35:5b:17:9d:4c:ee:5a:2b:39:5e:e2:cc:
6b:ed:3f:3f:32:66:dc:94:f0:c2:ef:da:df:5f:9d:c7:f3:15:
b6:5b:d2:c7:b8:20:1e:fa:19:8f:d0:29:9c:41:22:49:01:53:
52:11:b8:98:4c:96:1f:cb:0f:81:46:e7:59:3e:9d:e9:82:6f:
37:90:85:49:0a:c2:38:d0:fe:c1:31:5e:5b:00:be:a3:87:ce:
b3:58:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:11 2025 by rpki-client