Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203634323637.roa
File: 3130392e3131302e3137302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: lQIVtOGgpA2DCdwcApgq+Ez2apmfs4z/WWGU5jrvWMo=
Subject key identifier: A1:4A:00:91:91:BE:9B:85:98:0A:2B:EB:C9:55:86:27:0C:13:13:5F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 29F6951C13CCAC868F5C05A62E11C390AF8BB6E1
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203634323637.roa
Signing time: Mon 11 Mar 2024 18:04:47 +0000
ROA not before: Mon 11 Mar 2024 17:59:47 +0000
ROA not after: Mon 10 Mar 2025 18:04:47 +0000
asID: 64267
IP address blocks: 109.110.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f6:95:1c:13:cc:ac:86:8f:5c:05:a6:2e:11:c3:90:af:8b:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 11 17:59:47 2024 GMT
Not After : Mar 10 18:04:47 2025 GMT
Subject: CN=A14A009191BE9B85980A2BEBC95586270C13135F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:79:e7:22:7d:e6:58:d3:80:fa:78:bf:12:
1a:bf:45:05:17:be:2c:56:74:6d:4c:15:98:90:ae:
f5:57:ab:8f:46:09:de:53:e0:12:5c:a6:0c:cc:3e:
56:9c:29:8b:9e:9c:db:ad:38:04:9d:de:8b:2a:c1:
92:b4:f0:bd:32:bf:0e:53:a4:c8:98:bf:62:ca:56:
dc:b6:bb:e7:a5:a0:96:3f:35:1d:ff:3d:59:13:ad:
e8:1c:28:f3:b7:01:c1:da:90:6e:43:bd:88:2b:9e:
53:cd:86:e7:a3:38:39:7b:80:9f:f4:eb:b2:c3:57:
9a:0b:a8:28:8e:3d:4a:9b:74:42:7d:de:1b:26:93:
32:15:2d:91:9a:16:35:d7:dc:57:d0:35:55:fb:17:
59:c3:a3:a6:6d:10:79:9b:e2:b8:ce:ec:d5:39:58:
5b:3e:ff:1c:79:d4:0f:7f:37:c6:70:1a:4e:a4:8e:
69:6d:32:c9:9b:0c:8b:ae:bd:f5:bc:de:90:9b:bd:
42:02:ba:33:c9:eb:fc:03:92:54:51:ed:70:bc:0e:
c4:72:6d:6d:0e:b2:10:80:28:8b:94:fe:06:2a:5a:
aa:de:71:bd:ff:1e:64:49:93:4e:af:2c:a0:56:82:
e9:f6:2c:4d:68:a9:be:29:b3:1f:1b:d5:9d:32:e1:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:00:91:91:BE:9B:85:98:0A:2B:EB:C9:55:86:27:0C:13:13:5F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:87:b6:bc:50:cb:8f:c1:fa:d2:57:db:05:91:30:8c:b9:70:
15:dd:f1:a7:e4:b3:aa:77:ed:bf:5e:87:e8:b1:c3:c7:d3:6d:
86:42:b1:1b:49:e2:c6:40:bc:7f:57:46:52:38:f1:c4:6d:14:
f7:36:d9:97:b4:13:b9:7a:e0:88:09:93:ec:81:e3:49:a7:f0:
ad:ca:c8:bd:98:1a:95:43:a7:97:42:65:4f:05:48:58:59:7e:
e6:f4:bd:23:66:ae:ff:df:43:16:8e:f1:68:3c:81:82:82:bf:
0c:da:75:7b:15:b4:2f:c8:43:7f:4c:9b:da:18:e1:85:b8:35:
20:0b:35:0d:cb:01:63:34:20:3a:5a:77:ff:0f:ce:a5:9d:55:
f9:99:cd:22:c2:4e:35:63:5f:1f:34:34:58:38:43:c0:40:d6:
f7:c3:40:bd:90:e6:7b:ac:79:2c:48:85:00:da:0f:6d:c0:f0:
0a:29:67:75:d0:00:73:87:4f:a8:c1:15:b8:57:9c:e9:53:17:
91:78:77:0a:8a:33:e1:4f:f4:08:89:80:72:6b:1e:88:d5:4b:
63:a4:3f:38:38:05:58:75:f0:e6:df:b4:75:5a:4a:00:75:67:
34:e9:7b:dc:7e:a5:bf:6d:67:4c:d0:3e:17:7f:ea:e6:04:f5:
c0:55:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:01 2025 by rpki-client