Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232302e302f32342d3234203d3e20383334.roa
File: 3138352e342e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7A5nvBm1a7xaBeqn187XJT79naVyrRnVUoX8fRNAzaU=
Subject key identifier: A4:D1:F4:68:15:C0:F2:67:F4:04:B1:F5:3E:1C:5D:65:40:8C:76:D6
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 13D3913AA4E9862AECB896D6C0CAE05DACD7553F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232302e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Jan 2025 11:05:27 +0000
ROA not before: Wed 29 Jan 2025 11:00:27 +0000
ROA not after: Wed 28 Jan 2026 11:05:27 +0000
asID: 834
IP address blocks: 185.4.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d3:91:3a:a4:e9:86:2a:ec:b8:96:d6:c0:ca:e0:5d:ac:d7:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 29 11:00:27 2025 GMT
Not After : Jan 28 11:05:27 2026 GMT
Subject: CN=A4D1F46815C0F267F404B1F53E1C5D65408C76D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:6b:9e:42:6a:c4:aa:47:86:8a:e7:d1:10:
35:48:21:00:8a:21:ee:13:78:37:9d:97:47:de:e0:
ca:05:2c:b6:9c:a3:13:3d:92:28:bf:64:d9:41:71:
b2:32:1a:93:cc:4d:0c:87:f1:d8:ba:ee:ba:d3:d6:
10:7c:7b:ec:a1:2d:15:3a:07:5e:f8:30:ba:f6:b0:
b3:60:29:b2:56:91:55:74:d5:47:e2:53:ee:e3:b9:
cd:2c:0c:c2:4d:7c:8c:90:32:54:d5:34:bc:00:ea:
8a:7e:3c:7a:a7:9d:f1:15:49:cc:d1:50:47:3e:b4:
99:83:a7:d2:6a:99:41:ff:d4:73:21:cd:3d:d1:c9:
56:39:f9:03:e0:1b:d4:44:73:92:4e:95:76:27:d0:
aa:67:69:c8:29:13:fc:3c:9e:98:25:66:c0:a2:55:
ef:a3:9b:7f:66:7b:12:8a:c5:67:2c:76:bf:88:46:
dc:21:ca:4b:d3:60:cc:ed:be:d7:3e:a8:9b:a2:86:
40:99:31:22:b0:03:4a:44:cf:f7:4d:ec:ae:45:b4:
26:4d:d6:25:ba:17:fd:1b:76:66:a9:46:95:9c:99:
4a:59:5d:73:8a:55:37:91:a8:09:12:da:ae:3d:6c:
64:fd:b0:88:7c:c7:5e:0a:b8:5c:ca:4c:cc:20:a6:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:F4:68:15:C0:F2:67:F4:04:B1:F5:3E:1C:5D:65:40:8C:76:D6
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f6:96:af:99:25:48:87:4c:9f:af:69:b9:bb:1e:e6:c9:5c:
b5:87:3f:34:e7:be:08:af:54:5a:34:83:94:06:b2:40:eb:d7:
bf:96:7d:be:f5:84:ff:9f:07:f9:6d:8e:ff:de:e7:08:8f:b6:
a7:5b:b9:9d:80:41:20:f1:6f:d0:14:86:69:6b:e4:e9:32:86:
0e:78:37:e1:92:16:20:bd:c6:ea:5f:95:fb:0b:c6:f7:c7:21:
17:92:f7:68:49:fd:b9:03:78:97:17:b3:15:26:ea:3a:98:c9:
9d:fc:94:e4:22:28:21:99:74:81:6e:bf:12:33:d9:c2:99:98:
9a:f2:14:f5:48:52:9e:9d:f9:a8:12:e7:fe:83:25:f5:99:ad:
6a:0d:52:2b:8b:52:eb:a9:5a:7f:18:95:71:54:a0:ab:e0:f4:
fb:4d:31:55:5c:58:c1:5d:71:8e:9b:b6:31:27:91:76:4b:de:
a2:6c:4a:e0:79:09:67:87:39:28:ac:4b:a0:73:82:65:55:75:
6d:e9:77:81:fc:23:32:71:c2:97:06:83:8c:c8:48:c8:65:ac:
3f:31:d1:c8:49:7f:65:fe:d0:e6:12:4f:27:aa:3b:e5:09:ed:
ac:03:d6:58:4a:ff:0e:e2:79:2e:bb:89:02:35:be:6d:5f:d8:
97:9c:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:42 2025 by rpki-client