Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203433323839.roa
File: 3130392e3131302e3138362e302f32342d3234203d3e203433323839.roa (raw, json)
Hash identifier: f8sby+t3yWTqL9Pdr54UXviIkiteZ8Wuf7jIn4nhN7c=
Subject key identifier: 3C:E0:9F:DA:AD:CC:7B:98:67:B3:B8:5E:88:54:42:A1:49:DD:E5:2D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 36E712C29B17A31A263EB017B2C4000A8A59BF6C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203433323839.roa
Signing time: Wed 17 Jan 2024 09:52:36 +0000
ROA not before: Wed 17 Jan 2024 09:47:36 +0000
ROA not after: Wed 15 Jan 2025 09:52:36 +0000
asID: 43289
IP address blocks: 109.110.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e7:12:c2:9b:17:a3:1a:26:3e:b0:17:b2:c4:00:0a:8a:59:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 17 09:47:36 2024 GMT
Not After : Jan 15 09:52:36 2025 GMT
Subject: CN=3CE09FDAADCC7B9867B3B85E885442A149DDE52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:56:50:fb:2e:d3:da:6e:82:a4:ad:be:80:
ba:6a:d5:e2:a7:26:ed:2a:ab:42:0b:87:a0:aa:a9:
55:06:c5:38:ab:19:9d:63:c2:c0:e5:e4:f7:0e:86:
46:80:ae:00:2e:b1:1b:2c:ae:51:a8:04:02:2e:87:
9b:c7:65:9d:5e:0c:fb:93:1b:06:85:35:3b:64:4a:
b8:c3:7a:46:57:4d:f2:ca:00:30:12:24:78:da:57:
5e:91:f1:bc:28:69:69:92:44:e6:59:cc:13:9e:46:
f2:12:d3:0a:75:be:98:f7:b6:88:e7:6c:2c:1f:02:
c4:81:4a:18:83:36:aa:5c:0c:12:21:86:7e:b7:c5:
e0:d3:4a:49:1e:71:1c:e0:77:cb:07:77:a4:74:a3:
b6:94:04:a2:25:44:61:09:b7:d4:93:36:bf:ae:7e:
02:8f:d6:a6:5e:6f:23:e3:03:2d:5e:f7:43:ec:3a:
c2:53:99:7c:5a:5b:3a:02:31:64:88:09:f9:da:79:
32:b6:71:0b:5f:12:a3:d3:c6:ef:24:00:48:1e:f2:
c4:28:7e:a8:8e:94:09:9c:af:be:06:27:24:ab:5e:
9f:54:34:a7:d6:f5:57:fb:27:6f:b9:80:d6:16:29:
5a:22:55:00:49:e7:88:60:5e:20:d1:77:fe:c2:f3:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:9F:DA:AD:CC:7B:98:67:B3:B8:5E:88:54:42:A1:49:DD:E5:2D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138362e302f32342d3234203d3e203433323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.186.0/24
Signature Algorithm: sha256WithRSAEncryption
45:41:e3:ad:42:7a:89:8a:1d:8a:0e:70:e8:88:42:39:5a:82:
2b:41:52:be:28:7f:94:c2:a7:3f:f6:9a:c7:12:4b:b6:d2:ed:
0f:ef:87:62:cb:d9:76:3e:ea:be:d5:d7:06:73:64:d5:f6:d5:
15:26:3b:2d:7b:94:8d:03:fa:40:0b:7b:9e:08:b1:dc:e0:51:
54:2b:22:ea:1f:68:12:82:8f:55:7d:0f:d2:81:9d:ce:63:c5:
34:8b:3f:7c:0a:68:54:a6:58:c4:b2:06:77:25:77:d5:8c:5d:
38:61:e2:ee:71:8a:d5:47:0f:6b:27:75:70:d5:6c:17:db:a9:
c7:48:7f:b9:6d:01:20:ad:bd:57:6d:73:ad:1c:4f:42:b4:b6:
5c:c4:40:a9:4a:a4:dc:4c:e2:40:86:17:3e:ec:41:1d:4a:70:
40:27:01:6e:1c:b1:17:92:34:3e:c6:c1:90:52:7a:df:fa:c8:
34:f1:b3:92:24:b0:bb:83:4b:65:60:d1:df:e7:9a:ed:c7:16:
ae:0d:83:8f:e7:16:07:58:80:ed:87:4e:c2:fe:c4:79:1b:ae:
20:7f:c3:1b:d5:e4:da:8b:bb:4c:02:01:8b:0b:e9:e0:94:01:
aa:f5:18:fa:2b:54:b7:98:f7:92:e4:fc:4d:57:07:31:6d:e2:
11:2d:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:13 2025 by rpki-client