Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138342e302f32342d3234203d3e203437323732.roa
File: 3131382e39312e3138342e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier: wlF3GzPQbdj58uEQfhu7IKvaHY1NFTgvmTe5tgChOpA=
Subject key identifier: BF:47:CD:F8:7D:DD:67:80:1B:FF:50:74:B3:0B:F9:4E:D2:2C:81:50
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 3F5BDE9980D6F6A2228659511C733C6EB680710C
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138342e302f32342d3234203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:23 +0000
ROA not before: Fri 07 Feb 2025 19:08:23 +0000
ROA not after: Fri 06 Feb 2026 19:13:23 +0000
asID: 47272
IP address blocks: 118.91.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5b:de:99:80:d6:f6:a2:22:86:59:51:1c:73:3c:6e:b6:80:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:23 2025 GMT
Not After : Feb 6 19:13:23 2026 GMT
Subject: CN=BF47CDF87DDD67801BFF5074B30BF94ED22C8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:55:05:23:b4:a4:9c:14:3d:d3:0c:e1:9a:
2c:d1:cc:b4:c7:5b:82:9b:e4:44:66:4b:64:e4:d0:
3e:b8:43:9f:45:7e:d1:b4:b9:7b:90:12:df:02:58:
31:65:cf:ba:c1:c1:77:42:a7:f9:db:19:0a:f1:11:
0f:cc:f0:28:b1:d3:60:c2:bf:4e:a5:6a:c3:8b:7a:
04:7a:e2:5f:72:18:f1:47:44:85:4a:6c:e7:c8:86:
44:d0:79:6f:d6:ef:2b:89:4e:3b:ca:c0:d9:fe:de:
66:86:44:b4:f8:85:c2:5c:00:66:d8:29:05:5e:61:
7f:77:a8:a8:57:d8:0d:88:7c:75:e1:f8:d0:15:c3:
54:15:8f:ee:df:fd:06:12:dd:fe:6a:d1:ec:83:e7:
17:34:2f:b7:c0:31:63:57:2c:63:c7:3e:8b:73:62:
23:81:9d:56:18:f4:cc:fb:98:8b:9c:bc:41:76:62:
65:05:df:1b:95:f5:b4:ee:49:64:11:33:f4:34:90:
b1:d7:ca:98:50:3a:6d:67:36:b8:8d:7f:6c:58:ff:
bd:17:40:d0:1b:c5:66:a0:45:44:ba:66:40:3d:54:
86:97:4d:72:59:c3:7e:39:d2:66:3e:3a:af:7f:85:
44:73:39:93:30:e7:07:76:e0:93:47:0c:9f:5e:19:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:47:CD:F8:7D:DD:67:80:1B:FF:50:74:B3:0B:F9:4E:D2:2C:81:50
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138342e302f32342d3234203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.184.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bd:e0:93:fa:32:e1:eb:ac:f2:d9:f8:b1:70:45:a5:73:84:
6a:8d:b6:7b:5e:18:c0:16:1b:fe:b3:45:d3:21:81:ef:bb:65:
2f:46:b0:52:b4:dc:0e:9e:39:d3:ff:e9:24:e5:52:48:b8:96:
e6:90:bb:3b:39:24:1b:ea:62:0c:8b:62:5d:53:98:33:15:e8:
f7:cd:32:9d:0c:0e:6e:b8:e6:b8:db:23:39:ad:6c:0f:f6:21:
e2:86:0d:e3:2f:3a:fb:29:b4:b7:25:f7:ab:39:50:68:65:b0:
40:50:e7:12:6c:3c:10:c3:6b:b7:3e:35:07:2d:2a:e8:61:d3:
0e:2d:94:84:7b:dc:54:2e:f6:11:72:74:c2:d3:c5:27:a8:1b:
ae:a7:13:e6:d7:4c:d2:dc:92:bb:9b:f9:c1:ba:e0:dd:c9:0b:
e5:af:a8:f6:a9:ff:2a:49:f0:f6:d0:b8:4a:bd:72:cc:a0:2d:
28:a1:6b:b2:f5:48:3a:5f:40:c6:3e:a5:50:fa:71:92:9e:f9:
9d:7f:61:51:e5:76:f7:38:dc:01:34:66:e6:0a:86:53:4f:34:
17:2e:5c:19:2e:53:c6:73:4d:d8:dd:ae:a3:c4:4e:97:31:b3:
39:5b:bb:d6:c7:a8:c8:71:87:91:fe:41:ca:c9:a4:38:63:b6:
38:33:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:14:15 2025 by rpki-client