Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3137302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: sjbtm7B4rQceDOuyitPpZhHux46fYgSnpziOnS6u9JE=
Subject key identifier: 97:4B:75:F8:B5:17:BC:B1:25:85:47:9A:4D:0E:A4:71:41:37:C4:6C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2E156DBF4D48F7A39573296492D954E205409E18
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32332d3234203d3e20383334.roa
Signing time: Tue 14 Jan 2025 00:01:17 +0000
ROA not before: Mon 13 Jan 2025 23:56:17 +0000
ROA not after: Tue 13 Jan 2026 00:01:17 +0000
asID: 834
IP address blocks: 109.110.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:15:6d:bf:4d:48:f7:a3:95:73:29:64:92:d9:54:e2:05:40:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 13 23:56:17 2025 GMT
Not After : Jan 13 00:01:17 2026 GMT
Subject: CN=974B75F8B517BCB12585479A4D0EA4714137C46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:5d:89:9f:95:59:8c:57:f3:5e:3c:6c:f5:
cd:ee:60:0e:83:21:47:ea:a0:fe:74:58:92:5c:bb:
3a:5f:80:d3:99:fe:94:e3:84:71:aa:86:4d:f2:a2:
2a:a5:c0:30:21:60:c1:ad:13:11:d6:43:6a:e3:c9:
f1:54:43:6a:7f:04:33:ed:de:bb:d0:21:6a:0f:47:
43:a5:0e:1e:5b:d7:ec:74:6e:f8:e6:61:da:75:29:
01:0e:f0:00:4e:54:c5:15:6b:ff:84:a6:ed:6a:31:
d2:e4:ab:11:fb:2d:d1:59:bf:4c:96:05:f1:04:90:
ea:f9:c8:8c:30:cf:e8:c3:3f:d0:f2:69:1e:96:5a:
cb:7d:f5:8d:c9:6d:f7:ee:3d:93:80:0b:bc:05:80:
60:0f:09:fc:10:90:9a:ca:2e:4d:c9:b8:21:7e:cb:
8f:fc:b5:c0:d8:88:2c:01:65:5c:a1:17:08:ed:7c:
bd:eb:ed:73:70:3e:06:17:0b:7f:e0:01:04:39:84:
57:28:04:2b:e5:3f:32:66:51:39:6b:08:e9:68:39:
33:81:d4:90:df:6e:86:6b:f1:fe:a7:cf:13:b6:f8:
32:fe:31:44:a7:6b:cb:8c:3d:19:11:05:aa:7d:4e:
e7:c9:ab:29:da:e9:ed:9a:3e:c9:74:62:d5:22:0a:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:75:F8:B5:17:BC:B1:25:85:47:9A:4D:0E:A4:71:41:37:C4:6C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.170.0/23
Signature Algorithm: sha256WithRSAEncryption
76:29:a8:df:0e:cd:b7:60:ce:62:ed:95:e5:2c:33:79:41:61:
8b:1d:bd:3c:ef:dd:03:4e:2c:d0:5f:07:b2:6b:fd:72:29:e8:
a1:ee:76:2a:81:92:62:10:56:8a:b9:ab:6c:7a:66:6b:86:c3:
5e:3e:f5:d6:9e:76:46:17:a6:87:87:36:09:a7:c8:24:be:5b:
16:5a:9b:74:d1:f4:8d:32:b6:00:65:09:dc:77:59:90:ca:0b:
6d:4f:8a:59:24:38:9a:21:8e:2e:1c:54:20:15:ee:1b:5d:82:
5c:56:b6:8d:ad:02:1b:b1:e9:9a:40:26:3c:83:71:57:13:e7:
23:ab:f8:b9:1f:9a:91:99:58:b5:78:c1:a0:ff:ae:53:5e:b3:
f6:11:e9:56:72:e9:79:9e:93:7d:f8:01:54:3d:9f:a0:55:aa:
55:44:7b:61:94:7d:06:1f:4f:bb:eb:05:cf:2e:bd:bc:56:35:
e2:f6:e8:80:ff:74:91:25:a0:6e:f7:4d:57:22:14:e7:6c:2f:
13:f3:8d:c3:92:4f:7f:24:47:57:60:b5:17:43:7f:8f:62:22:
da:ad:95:0f:40:8e:64:79:a8:8c:ee:29:ba:3e:13:03:32:ac:
66:df:9e:7e:95:8e:2d:b5:47:90:d8:df:a9:6e:2d:0a:f3:38:
e4:db:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:22 2025 by rpki-client