Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
File: 3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: /7s3bzbYuZeGfKhH1pDp2ZhqNRis7ZYCfSQqg54KdVU=
Subject key identifier: 13:07:D6:3E:5C:5A:0F:B3:42:FB:A2:96:70:80:15:9D:54:F0:21:98
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4D1A6F4E1EE4232CC24276AAC48FECBB5E95C61F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
Signing time: Fri 14 Mar 2025 12:47:07 +0000
ROA not before: Fri 14 Mar 2025 12:42:07 +0000
ROA not after: Fri 13 Mar 2026 12:47:07 +0000
asID: 3320
IP address blocks: 185.172.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1a:6f:4e:1e:e4:23:2c:c2:42:76:aa:c4:8f:ec:bb:5e:95:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 14 12:42:07 2025 GMT
Not After : Mar 13 12:47:07 2026 GMT
Subject: CN=1307D63E5C5A0FB342FBA2967080159D54F02198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:c3:d4:76:d9:0e:9f:df:46:47:f4:8a:b2:
15:74:fb:7a:d3:6c:7a:bd:81:5f:d6:37:06:b6:dd:
db:8b:07:fc:b0:59:61:ee:73:66:58:74:39:ca:d7:
21:6b:7a:11:e8:9d:0a:2c:39:d9:4e:b5:ac:d9:b4:
3a:b7:2b:1d:e8:e0:a4:58:82:0e:52:7f:d8:b5:a5:
6f:60:90:e0:5f:db:b9:b7:d2:57:9f:88:ca:e0:f4:
39:ec:04:77:38:50:9b:bf:71:39:95:5b:f2:11:75:
61:92:68:6b:1b:37:cb:40:0c:a5:39:ff:21:93:a3:
a2:04:4c:e5:0b:5b:2f:c8:71:36:37:fd:48:85:11:
54:a8:79:52:a6:88:1c:f2:81:e2:d8:6a:4d:11:81:
ee:81:ab:ea:fd:e4:7c:09:bd:ec:08:30:d2:52:36:
20:e6:b2:cc:9f:5b:50:f9:4a:d6:b4:db:bd:a3:25:
15:15:ce:01:27:75:4d:23:51:fe:bd:0c:01:dc:c0:
f8:6d:26:88:56:f3:11:8a:f0:52:ac:c3:d1:c2:52:
f7:ae:5e:54:4f:56:d6:33:a9:05:9b:7b:6c:e7:4b:
9c:0b:19:02:57:46:24:54:fa:38:dd:d0:d3:a8:a7:
ce:84:7e:ab:59:2c:39:fa:2e:c5:82:08:66:16:7b:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:D6:3E:5C:5A:0F:B3:42:FB:A2:96:70:80:15:9D:54:F0:21:98
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:aa:d3:8c:dd:cc:21:1b:67:cd:be:35:af:cb:7f:d6:d3:e3:
47:dd:9a:a7:28:29:a5:98:69:ff:7d:14:84:8d:de:ca:5f:3f:
73:f1:3f:1b:f2:6a:6a:d8:90:b7:0e:97:10:d6:f0:89:b6:b2:
4d:b4:da:d9:d5:b2:ec:2e:f5:82:93:f8:8d:3b:9f:c2:16:a0:
56:42:d5:34:0b:7c:d0:e7:0e:85:cb:60:d9:f5:8e:20:fb:6d:
5f:56:73:84:40:17:98:72:77:ae:bd:a4:b5:ec:a8:46:c3:90:
5e:17:74:43:59:32:34:4d:ad:5a:b4:e4:1d:f4:74:d5:be:ae:
97:55:a6:da:72:b6:08:d7:e9:00:84:4a:2e:2e:8b:1b:cf:a6:
1c:16:0e:24:a6:04:ed:f7:cb:25:85:38:a6:83:d8:de:33:b3:
bb:13:aa:97:d3:da:ae:69:93:7e:60:c5:97:f2:6a:d6:37:ea:
db:26:73:23:ea:2e:85:08:9a:f4:f1:7b:b4:08:97:c4:ba:31:
c3:78:23:63:78:9a:aa:3d:c9:6d:79:41:f8:a8:6e:9a:e0:37:
8b:6c:b8:95:36:99:5e:f6:7a:1b:e9:cd:e4:eb:22:ff:84:e1:
a3:df:82:64:4c:9f:88:83:c2:af:21:80:1e:90:73:45:70:58:
95:c0:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:55 2025 by rpki-client