Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier: NRINWrT+yfXKeNO9w/3rfYZIIg7vcm1yIkQPcD2vNng=
Subject key identifier: B9:35:4E:F5:E8:31:5A:3C:09:B1:95:8C:38:FA:9F:F6:56:D3:F1:E2
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 34C55740C659CFEA1408FF59E840AFCF8DB9290B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
Signing time: Wed 27 Nov 2024 11:43:11 +0000
ROA not before: Wed 27 Nov 2024 11:38:11 +0000
ROA not after: Wed 26 Nov 2025 11:43:11 +0000
asID: 10753
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c5:57:40:c6:59:cf:ea:14:08:ff:59:e8:40:af:cf:8d:b9:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 27 11:38:11 2024 GMT
Not After : Nov 26 11:43:11 2025 GMT
Subject: CN=B9354EF5E8315A3C09B1958C38FA9FF656D3F1E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:a6:c1:5b:58:c4:81:74:37:0b:e3:e3:d0:
de:38:50:c7:29:db:3d:31:ee:4d:77:27:74:d4:fe:
33:9e:ff:92:75:89:f4:01:83:28:63:30:a5:f6:6e:
2d:42:6b:9f:90:ec:07:09:52:d7:81:f5:f4:41:d7:
56:ba:ea:1b:d8:67:57:96:68:3d:c7:4c:bc:c4:c8:
da:c0:35:2e:d4:a3:a6:b9:05:81:07:53:1b:b4:2b:
da:2c:56:94:21:22:22:93:7e:0e:d9:21:13:b1:0d:
90:75:bf:30:6e:6d:aa:92:98:46:1a:1c:d3:31:cb:
da:d8:bf:4b:35:38:f6:71:67:da:e0:4f:f1:85:be:
1d:a8:3a:9d:35:08:82:96:d6:68:57:5b:1e:c5:9c:
dc:6a:da:90:43:fa:5a:92:65:50:ef:40:da:04:8b:
1e:bd:83:e9:2c:a5:5c:3b:08:2b:2f:e2:34:20:d2:
12:39:af:95:97:1a:09:30:b5:72:f0:56:ac:3c:c9:
66:d2:0f:e9:99:bb:94:48:10:cd:38:16:9d:f0:f1:
43:c7:96:8e:3a:e7:0c:d6:b2:f2:3f:83:fd:12:8c:
19:56:f5:1b:4b:5d:52:f7:22:1b:6a:38:ad:75:5d:
a8:95:f6:e2:6e:45:ba:1e:1b:34:4c:b5:91:13:71:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:35:4E:F5:E8:31:5A:3C:09:B1:95:8C:38:FA:9F:F6:56:D3:F1:E2
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203130373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:06:bc:ff:5a:93:d9:2a:72:ca:86:05:14:7f:e9:30:a4:2e:
60:73:04:20:e3:25:7d:54:c2:9b:01:41:9b:53:83:1b:27:02:
6c:bc:d6:b7:58:b5:23:0f:81:d8:5c:60:06:9d:f6:01:98:c1:
4d:bc:34:08:f6:0b:37:ff:93:8f:6c:a9:7f:e8:ab:ac:74:f3:
db:99:76:d4:9e:fd:e5:40:8d:70:f4:1a:8e:37:41:d5:a3:0d:
47:24:3f:7e:9c:0c:43:ee:ab:e8:fc:7a:ab:a4:da:e4:e4:dc:
10:b2:29:73:81:67:30:2b:af:47:ac:57:32:a2:25:37:25:96:
6d:5b:2f:59:28:68:5d:d4:b5:0f:3a:9b:58:ff:e5:ed:69:17:
33:2f:9c:77:de:d8:46:b6:fb:b5:51:cf:12:49:25:7a:7c:c4:
b1:23:39:a2:8c:6a:d8:0a:13:7a:ab:c6:2c:92:7e:99:7f:00:
9c:97:69:10:9f:c4:f3:08:4b:2e:88:a1:c7:4c:72:ae:e5:49:
0d:b8:15:0e:75:28:66:2f:94:c5:04:ee:65:87:cb:03:fb:f7:
b1:21:35:02:eb:c4:b3:b1:d8:79:c7:f5:8e:ed:57:84:4d:0c:
97:59:b9:97:2d:6a:24:9b:54:e8:e4:17:a1:39:aa:05:27:ef:
8d:d7:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:56 2025 by rpki-client