Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
File: 38342e31392e3136372e302f32342d3234203d3e203234363736.roa (raw, json)
Hash identifier: FYEhChjAyd1UkfUwByrWyN0Prn/fBZBaiIbFOq50qRA=
Subject key identifier: 11:52:2B:95:40:25:0B:85:0F:40:C9:18:14:BD:CC:9B:51:12:D8:E9
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 2E3024225FFAF37D3EADAB1743C96BB2B2063ECD
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
Signing time: Tue 25 Feb 2025 16:14:31 +0000
ROA not before: Tue 25 Feb 2025 16:09:31 +0000
ROA not after: Tue 24 Feb 2026 16:14:31 +0000
asID: 24676
IP address blocks: 84.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:30:24:22:5f:fa:f3:7d:3e:ad:ab:17:43:c9:6b:b2:b2:06:3e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Feb 25 16:09:31 2025 GMT
Not After : Feb 24 16:14:31 2026 GMT
Subject: CN=11522B9540250B850F40C91814BDCC9B5112D8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:ec:6c:e8:89:d4:83:c9:59:cc:7c:d7:73:
a3:c6:71:95:f1:c4:2c:8e:98:60:5f:60:96:d6:fb:
b9:f8:19:72:c2:a4:9d:76:b3:e5:c4:96:aa:a8:ad:
68:43:31:83:c3:d6:ff:1d:e4:ab:f4:04:c7:a7:9f:
0c:ec:eb:f4:dc:22:5f:20:f1:a1:37:7b:26:58:c6:
0c:1c:68:c8:fb:9f:cc:dd:34:d4:13:47:9e:b6:dd:
3c:43:6b:f2:ff:df:e1:9f:d0:d4:ed:c4:b6:87:fc:
15:be:97:49:90:ce:75:5f:06:ec:62:cb:32:fc:00:
8e:7b:b1:40:f7:6f:51:03:4c:e7:ff:d6:77:f1:d4:
e2:2d:17:85:62:be:a5:f8:3b:e7:0f:71:a1:9e:04:
f1:1c:0a:04:bc:ec:45:67:f6:54:eb:d3:d1:19:f3:
c3:13:b5:fd:ff:68:8d:e1:db:f3:cc:c0:2a:58:1b:
b9:8e:fa:a8:08:94:46:ea:78:18:53:5f:27:29:bf:
94:d6:44:72:86:dc:a3:f1:d7:69:4a:c3:84:f9:ca:
f0:e9:9a:43:5e:fb:4e:d0:9e:f1:ff:70:4e:2b:55:
f5:0d:7c:5d:55:eb:46:e5:e3:d0:d9:b1:a8:9d:97:
27:83:02:f1:2b:f8:81:17:e8:7d:76:55:d8:f0:06:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:2B:95:40:25:0B:85:0F:40:C9:18:14:BD:CC:9B:51:12:D8:E9
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b5:0e:12:16:08:d2:5a:aa:8f:e6:02:09:51:0c:32:dd:3c:
ed:69:fd:be:db:a1:0d:94:30:1b:1a:5d:5a:b9:1f:57:83:ce:
4b:a9:28:53:f5:e0:9f:de:05:9c:3a:e0:5b:70:2a:bb:ac:af:
77:62:b6:bd:c9:3f:e3:c4:ac:b7:c3:67:5e:cb:87:38:3f:4b:
7d:bb:e6:f5:b8:ba:76:3e:12:aa:5c:50:d9:06:07:59:58:17:
9b:78:50:ba:fb:fb:de:56:cd:36:a3:71:45:de:ba:25:df:ab:
f2:cd:21:55:ec:d8:10:a4:5b:31:33:1b:7d:22:c0:51:4d:29:
5c:e2:ed:02:dc:a1:49:2f:ac:81:6c:6c:fd:68:d6:42:9f:7d:
83:52:64:90:35:54:14:46:47:f1:bd:57:04:99:45:a2:46:8f:
33:5d:bc:1a:86:e0:aa:a0:af:6f:0e:34:7d:a7:d9:a6:4c:c4:
52:29:cf:24:e6:3b:27:e6:ee:72:99:6d:a5:1c:1f:4c:89:ab:
5a:cd:a3:35:cf:27:8d:6b:40:e4:e7:46:9c:ee:5a:9b:ce:f4:
1b:21:7b:ca:c8:4e:85:68:5e:f0:eb:a4:dc:74:a3:0c:00:9c:
f2:9b:d7:20:c3:66:a1:c2:cb:8b:4a:f3:e2:da:a3:c6:47:d8:
de:84:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:11 2025 by rpki-client