Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203230343733.roa
File: 3130392e3131302e3137302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: +6LJKbdJzF/aHAhyvcBsU13J38z1400mgOtnn0sbbYk=
Subject key identifier: C8:AA:AA:BF:F3:1F:AE:AD:9D:B8:B9:1E:E4:07:F5:01:97:4E:04:5C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 54886660FCCCE176572E474FA75E83EE48F80533
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203230343733.roa
Signing time: Sat 15 Feb 2025 14:35:16 +0000
ROA not before: Sat 15 Feb 2025 14:30:16 +0000
ROA not after: Sat 14 Feb 2026 14:35:16 +0000
asID: 20473
IP address blocks: 109.110.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:88:66:60:fc:cc:e1:76:57:2e:47:4f:a7:5e:83:ee:48:f8:05:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 15 14:30:16 2025 GMT
Not After : Feb 14 14:35:16 2026 GMT
Subject: CN=C8AAAABFF31FAEAD9DB8B91EE407F501974E045C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:85:7e:67:b5:ee:4d:b6:df:4b:6f:df:7a:
a1:e2:cf:f7:26:92:e5:af:b6:3d:5b:21:25:ba:2b:
cf:e6:2d:46:88:ba:8f:95:c7:94:42:de:89:86:2f:
8c:46:c1:8f:12:98:ed:7e:d5:96:fe:58:6b:d0:02:
b9:78:55:61:83:ae:c1:99:a7:19:8e:e3:38:f2:c0:
f8:c7:19:a7:ee:9e:61:a9:1a:8c:d4:db:bf:8b:6b:
a7:38:d8:74:30:7d:a2:91:3e:c4:bc:61:65:75:35:
fb:95:56:28:fa:a1:71:74:45:7a:78:35:d8:4e:30:
37:d9:1f:c3:e4:d8:3b:35:de:65:d2:37:0d:f9:cb:
04:8d:44:9c:4c:87:51:96:be:c3:81:ee:63:b8:b4:
1b:4a:ef:6b:d3:5e:54:5c:af:e1:a0:f9:96:bd:00:
bd:47:8c:04:ef:ef:16:ba:ee:64:64:59:29:90:76:
ff:91:e9:8f:fa:ab:1d:ee:66:ca:30:18:6c:2b:bf:
7a:0c:79:e6:f1:ae:64:37:c8:12:9c:1d:b4:c3:b9:
11:58:7f:51:39:82:e1:e0:e2:db:c7:ab:6c:3b:81:
b8:af:5d:55:48:25:ad:22:51:bb:f4:68:6d:3f:58:
4d:f7:7b:f1:0d:b4:3a:70:10:be:3f:1b:33:c9:65:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:AA:BF:F3:1F:AE:AD:9D:B8:B9:1E:E4:07:F5:01:97:4E:04:5C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.170.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6a:00:75:75:8c:db:bc:90:e3:8f:7a:69:1b:01:74:d0:10:
51:b4:02:13:bf:89:3c:5c:44:a0:b3:2d:10:47:de:71:a9:c8:
fa:01:fb:ff:d4:d0:1a:f0:20:e6:15:53:c6:5e:01:62:51:e2:
b3:a2:72:9d:78:b7:4f:c4:cd:7b:ea:85:1e:78:e3:08:e7:da:
95:c0:11:86:56:98:f2:f3:88:d0:d5:3a:40:b9:64:d7:0f:74:
34:ca:21:e9:9e:e3:99:3d:41:49:33:94:f9:e6:1a:a2:21:60:
10:7d:df:8d:ec:bb:36:29:6e:da:03:99:d6:c4:4f:8a:bd:b8:
19:e4:89:08:2e:a0:aa:bb:06:fb:3b:7f:fc:c6:0e:09:54:39:
0a:3f:35:b3:6e:8e:db:43:07:46:43:52:91:f2:c4:4e:14:09:
27:fe:8a:58:37:6f:8a:ea:9e:bd:d1:85:22:0c:10:a9:18:0c:
c6:6c:82:c0:64:c2:ea:8f:c2:91:3e:2d:19:8b:80:84:fa:b7:
b9:e9:2c:2c:3b:da:2a:b9:55:19:fe:50:bd:bb:d1:54:09:78:
05:a1:aa:9a:b5:92:fb:fc:a6:1b:27:7b:a3:de:12:0d:1a:06:
7c:fc:57:cb:d1:72:b0:ef:7d:47:2c:74:2c:b5:e0:34:53:f0:
c4:b0:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:49 2025 by rpki-client