Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203438323636.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: VmGsoQW3VmhPOHh7l7Y7DNpJxu8pqZr6VFgTYg8RWTY=
Subject key identifier: AE:5F:43:6E:69:1C:81:FB:71:67:12:84:FC:1D:6D:62:A6:7C:16:27
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 582FEDFBAD16630DE13184FF2DDB62EFC40728DA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203438323636.roa
Signing time: Mon 03 Mar 2025 09:59:05 +0000
ROA not before: Mon 03 Mar 2025 09:54:05 +0000
ROA not after: Mon 02 Mar 2026 09:59:05 +0000
asID: 48266
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2f:ed:fb:ad:16:63:0d:e1:31:84:ff:2d:db:62:ef:c4:07:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 3 09:54:05 2025 GMT
Not After : Mar 2 09:59:05 2026 GMT
Subject: CN=AE5F436E691C81FB71671284FC1D6D62A67C1627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:b1:a8:38:a3:ae:b6:99:47:ce:b3:a3:4d:
06:90:9c:58:3b:1f:e3:60:39:19:87:d4:8b:f8:7e:
95:44:f2:e3:b9:31:1d:5c:35:2e:4f:c2:9e:76:5a:
1f:4c:53:f8:dd:5f:11:fd:6f:a5:e0:c8:52:9c:83:
58:d5:6e:1a:13:52:5d:7b:17:ee:6c:14:39:44:01:
fb:3f:b1:b4:4d:73:d2:68:2a:a1:ef:4a:59:76:98:
94:46:67:47:56:01:01:d0:af:47:1f:42:d0:9b:7c:
71:34:e6:8e:49:9e:8b:b7:ae:78:b7:51:99:71:e3:
0f:a7:c2:4d:0c:32:18:c2:06:97:49:f2:4f:b3:d8:
7a:1b:75:40:6b:0e:4f:b6:36:4e:ec:61:d5:ad:2c:
1c:80:ef:9f:ac:3b:d7:25:6b:18:d7:80:f2:77:73:
e9:9b:1f:ac:0f:13:d3:09:31:8e:ec:ab:5b:7a:bc:
b2:00:01:63:8e:13:fc:42:b7:57:b4:2e:c1:dc:7d:
ab:16:88:e0:1c:87:d2:ac:39:75:5f:3f:ba:2b:35:
d6:dd:68:a1:d1:10:7f:f4:b1:eb:7f:1e:9b:df:40:
fc:61:3c:6b:cc:27:e2:27:75:69:e5:ff:2b:9a:dc:
a5:82:c3:f5:25:88:5d:07:d0:f6:7f:b3:03:0e:6f:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:43:6E:69:1C:81:FB:71:67:12:84:FC:1D:6D:62:A6:7C:16:27
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a0:18:47:8a:54:b8:29:5d:de:1b:9f:b1:21:76:c5:1f:e4:
4a:cf:2e:cd:51:53:83:73:b4:49:0b:96:cd:a8:d2:fd:7b:34:
51:e3:74:2b:25:e8:b1:92:6c:90:4f:6a:23:cb:0c:ac:54:4e:
9a:d6:9a:40:69:4f:40:a5:f4:0e:1a:fa:95:9c:c9:ca:cc:90:
a4:d7:d4:77:f9:ed:fb:00:26:71:33:42:6a:ae:c1:57:b9:3b:
96:e6:7a:6f:86:b1:6f:a7:60:93:fb:3a:b9:72:54:2f:18:8c:
29:23:2b:cd:b2:ff:cd:eb:90:49:79:b0:d5:e7:c2:41:63:93:
f4:a2:bd:73:e6:06:e0:d7:9c:0e:0c:64:ff:af:57:6c:62:99:
f8:74:8d:f8:dc:8c:76:e4:57:ad:5c:3f:91:73:c9:47:8e:93:
a3:97:f3:ea:11:59:93:c2:2d:54:d6:8a:b4:eb:b5:33:66:00:
4d:c6:1c:6f:f6:82:a3:5c:72:1b:e8:a4:c4:a0:d0:18:bf:91:
c5:4b:d7:ae:21:4d:7a:9e:7e:ab:35:e3:18:7e:10:cb:2a:88:
75:67:e9:63:77:bd:39:af:4e:e9:72:cb:e6:08:ab:95:c1:5e:
ca:4e:f3:34:30:82:84:32:d2:30:63:38:53:6b:10:22:42:75:
b6:9a:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:01 2025 by rpki-client