Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0NCXMVOHx61H/2MdaIKJbx+Ycq4g8ACWYBxcgvBH7c8=
Subject key identifier: 58:86:10:B5:C4:A3:42:8D:35:78:E2:23:9F:77:85:02:3F:5A:DB:A8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7E7DE9FAD30F24D28553BEB1CBB3E968086D6C0B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Mar 2025 00:00:40 +0000
ROA not before: Thu 27 Mar 2025 23:55:40 +0000
ROA not after: Fri 27 Mar 2026 00:00:40 +0000
asID: 834
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:e9:fa:d3:0f:24:d2:85:53:be:b1:cb:b3:e9:68:08:6d:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 27 23:55:40 2025 GMT
Not After : Mar 27 00:00:40 2026 GMT
Subject: CN=588610B5C4A3428D3578E2239F7785023F5ADBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:ce:6e:a3:07:aa:87:44:17:f1:c4:3a:80:
19:a4:c8:cd:85:3f:23:2c:de:d2:11:3b:ac:5b:12:
24:18:3c:41:a8:22:fc:d5:0b:2b:b4:7d:e3:19:ab:
fe:e6:b1:9e:69:c1:5d:a4:33:2e:10:be:e2:08:4d:
89:3c:c0:31:b6:1e:84:9d:57:b8:3d:69:2d:e9:10:
11:34:d8:92:f4:c2:8e:a4:3f:a8:7a:48:4b:25:21:
15:fa:ac:18:4b:36:21:40:07:89:e2:a6:47:a1:b2:
1c:43:af:82:35:23:6a:82:07:e1:7f:51:95:03:ed:
48:c5:de:1d:1a:33:14:f0:28:d0:37:0c:ed:df:f4:
2a:d3:f8:52:1f:97:3b:16:88:2e:a9:eb:14:84:73:
77:3e:59:ab:b0:76:d4:c0:ee:32:14:e3:7c:e8:f4:
49:cb:42:01:b9:1c:40:84:16:ab:ff:87:80:aa:dd:
1f:90:47:a7:ea:19:ec:db:f3:90:85:c7:5c:61:a7:
90:1e:6e:8f:56:82:3b:88:5c:8c:99:ad:fb:f3:07:
9e:b9:b5:6b:00:fd:cd:9e:65:bb:49:63:be:b8:9b:
76:61:31:8b:7f:d1:e3:f3:21:9d:3e:7e:03:0c:85:
f8:11:0d:c0:11:da:02:da:b1:ec:9f:93:65:ee:90:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:10:B5:C4:A3:42:8D:35:78:E2:23:9F:77:85:02:3F:5A:DB:A8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:01:cc:37:ca:a8:30:e5:0f:58:0b:bf:44:0c:26:06:be:62:
8c:e1:d7:12:af:a2:3f:de:8f:69:44:1f:f1:28:83:38:b6:e1:
71:bd:6e:f0:a2:bb:00:1e:4c:32:e2:2c:14:1a:dd:fd:0f:2f:
39:b0:ea:3e:7d:a0:83:7d:0b:99:b9:14:42:a4:72:d2:b5:a3:
fd:60:f9:85:73:6e:db:98:b7:3a:a9:b0:73:61:d5:a3:f1:b7:
bd:6e:e0:b2:b5:71:84:c5:ef:e2:2d:a0:de:df:0b:41:0f:9f:
6b:0a:d3:ef:7c:df:54:bd:e4:85:ba:8f:c1:1d:3d:46:42:30:
21:d1:fb:00:96:38:9b:8d:2e:ec:6b:83:3d:e5:7c:88:50:c6:
ae:be:38:f4:47:bc:10:ed:38:16:a3:42:e6:9f:72:da:78:3f:
63:b6:e2:80:88:8e:97:46:f4:33:2f:4e:29:5c:c5:3a:a6:84:
4e:7d:05:94:d7:8d:e3:c5:65:d5:42:03:5a:9f:f5:a8:53:c8:
e4:6a:c3:3a:b7:b8:cf:65:42:ef:8e:4c:94:4f:37:59:fc:b2:
3f:79:00:56:97:65:f8:31:59:ad:51:19:77:50:a7:a0:d3:c9:
07:33:14:9e:6d:d3:84:f7:33:60:4d:0d:b7:27:99:7d:09:6c:
af:2a:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:41 2025 by rpki-client