Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20313337383937.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: zhQ0Hh/HsGxXmiVoK7ARVHSIUdGG03KRJie/2ThJwYU=
Subject key identifier: 17:F8:E4:4F:D0:99:BD:61:93:90:4E:82:5C:5D:86:83:8B:26:23:33
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4770E2295B25E4396C181703CFB02038DBB15747
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20313337383937.roa
Signing time: Sun 26 Jan 2025 14:39:23 +0000
ROA not before: Sun 26 Jan 2025 14:34:23 +0000
ROA not after: Sun 25 Jan 2026 14:39:23 +0000
asID: 137897
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:70:e2:29:5b:25:e4:39:6c:18:17:03:cf:b0:20:38:db:b1:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 26 14:34:23 2025 GMT
Not After : Jan 25 14:39:23 2026 GMT
Subject: CN=17F8E44FD099BD6193904E825C5D86838B262333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:f8:d7:70:3c:70:f0:19:c3:c7:21:df:67:
94:e5:3f:a4:e4:3a:49:86:db:e3:88:c4:fe:83:92:
f7:51:61:29:4c:a5:ff:45:a8:ae:fb:46:ca:36:6a:
aa:3b:62:73:07:51:9a:0f:3f:31:7c:34:b8:2e:17:
6e:4a:24:a9:6d:b5:e7:6d:4c:6f:d6:91:21:9d:ce:
a6:95:0a:3f:6e:5e:f3:15:68:42:ad:14:e2:4f:83:
fa:18:ad:d8:c3:e7:c1:4b:e4:d4:a8:76:62:a3:3f:
88:52:56:8b:06:e3:e1:ee:6e:d2:6c:f6:94:c4:85:
a8:88:18:cb:7e:8a:88:05:ae:2e:ce:68:0b:73:5d:
15:d3:7a:89:b6:e1:42:ff:45:ef:a0:3a:d6:c7:54:
68:83:8e:9e:af:40:1b:f8:55:9a:30:f9:cc:aa:7c:
bc:b7:d4:64:87:d9:db:55:b5:db:15:b7:4f:15:2f:
2a:56:92:f8:05:93:6c:a5:0f:c8:38:15:38:4e:92:
05:4f:d4:57:23:7a:68:5a:55:e4:45:5f:0f:59:d8:
c2:1d:27:43:f7:e4:69:12:de:5e:fe:e0:f7:09:a5:
e6:cb:f2:7d:fe:3c:8d:7b:82:b7:6c:e5:ff:ec:df:
ea:e0:5c:05:5c:79:a3:70:57:f4:b7:c5:a5:46:d0:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:E4:4F:D0:99:BD:61:93:90:4E:82:5C:5D:86:83:8B:26:23:33
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c3:57:a1:59:05:14:6d:d5:3c:8a:35:c3:be:86:e6:46:b4:
35:3e:16:e1:fc:ca:9c:f9:37:0e:10:30:df:18:27:65:05:29:
06:fb:1e:a0:23:13:92:65:a7:55:45:c8:d0:50:14:9f:94:8b:
b3:43:d3:df:2c:76:fa:4e:71:00:0d:5c:5f:8a:b0:ba:88:8c:
b4:41:34:af:2c:8a:be:b0:da:60:24:b2:2c:ba:69:5c:e5:03:
72:4a:b8:3b:5b:2c:c0:dd:0a:46:83:ac:5e:3f:76:45:41:b3:
ea:bb:ca:be:c5:f3:68:45:43:a3:47:7e:d5:b3:84:e2:f6:ec:
85:52:1d:20:e0:3e:ed:19:19:c3:f8:4a:e7:b1:88:f5:85:25:
04:21:fc:d6:ee:d9:da:56:b8:bf:e5:51:94:a7:5b:cc:78:a1:
a3:a8:ad:0e:b8:20:67:a9:59:c9:4f:5e:1a:8e:bb:06:19:37:
2b:7b:0a:e1:50:39:ee:93:32:8b:5b:36:82:83:8d:30:9f:f3:
a4:84:c1:34:e4:76:45:6a:28:2e:24:b4:44:4b:2b:fb:6c:07:
66:58:17:da:a4:a4:58:27:9b:5f:42:cd:08:81:71:13:c8:37:
5d:a3:38:87:13:5d:1b:63:d3:1c:69:dd:78:b7:ac:2a:09:64:
db:03:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:55:22 2025 by rpki-client