Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa
File: 3131382e39312e3138352e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier: OVMcYMHZliSmdf/jsKCO/9NfG2bxwS1UV/ZGgq2ZHbs=
Subject key identifier: 74:1A:AB:9B:8E:C2:46:8C:F9:86:80:CA:F0:91:83:60:DE:DB:2E:EE
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 1791F99A2FA8D51CCDAEDC2E821ACC5496867467
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:23 +0000
ROA not before: Fri 07 Feb 2025 19:08:23 +0000
ROA not after: Fri 06 Feb 2026 19:13:23 +0000
asID: 47272
IP address blocks: 118.91.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:91:f9:9a:2f:a8:d5:1c:cd:ae:dc:2e:82:1a:cc:54:96:86:74:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:23 2025 GMT
Not After : Feb 6 19:13:23 2026 GMT
Subject: CN=741AAB9B8EC2468CF98680CAF0918360DEDB2EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:f9:3b:d6:a0:e1:b1:24:dc:9f:51:dc:41:
bf:de:12:47:00:a6:98:ac:73:55:e0:e2:2d:65:44:
43:44:c9:d9:92:71:3e:6b:97:0b:17:50:5d:48:bc:
e6:cb:f9:d5:99:6d:a0:c6:0e:c4:bb:4b:1d:39:9b:
66:cf:8b:ae:92:bd:54:3a:cc:66:dc:45:17:27:86:
e0:62:c9:eb:49:45:b3:b1:3f:b5:26:ff:7e:71:11:
55:97:bd:47:12:28:3a:6e:e6:79:51:c0:3c:b7:72:
3d:3b:e2:de:84:7c:54:6d:36:62:fb:4e:c5:b0:44:
b1:8d:fb:ef:19:46:96:f5:56:f2:1e:4c:97:18:d6:
45:50:ec:07:cf:4f:22:ec:18:4e:3e:64:33:6a:5d:
a4:73:29:de:85:e0:d2:00:dc:02:db:bf:c3:11:a3:
e4:c0:e8:e1:40:64:6d:eb:ec:d6:b6:6f:1b:f1:cd:
f0:c7:f8:49:2d:29:ea:d6:de:67:49:0f:78:4d:82:
ed:7e:63:55:3b:04:c3:c3:65:17:4e:ca:3b:c3:27:
97:e9:0a:38:32:67:f9:fc:66:f0:70:1e:52:a7:8c:
0a:2a:2e:68:5c:03:1b:cb:22:32:0d:9a:d6:be:b6:
3d:29:fc:bd:01:4b:17:bf:c7:65:5e:16:4a:3a:f2:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1A:AB:9B:8E:C2:46:8C:F9:86:80:CA:F0:91:83:60:DE:DB:2E:EE
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4a:4e:35:4e:14:c2:14:9f:45:d1:bf:ef:a3:fe:34:60:3b:
58:4d:ba:0f:73:7d:25:2e:dc:03:98:a6:f2:de:4f:48:52:22:
e8:71:d1:16:ab:d8:55:69:16:c9:55:b6:ab:09:77:3b:be:1c:
0b:45:02:3b:4b:f3:51:a5:8f:96:f9:12:c4:42:bf:b4:5e:26:
fd:0a:f5:d8:3c:3e:3d:02:1c:7c:af:8a:22:14:bc:ab:ee:36:
37:38:e2:97:50:80:a3:cd:12:c3:0a:4a:a5:eb:04:01:99:5d:
de:6d:c4:e6:6c:06:63:9c:66:41:9e:21:09:0e:ec:6d:f4:7f:
c1:7a:df:cb:89:f5:bc:8b:18:17:8e:cf:12:3c:b7:08:ff:f3:
27:d1:70:61:b4:b5:22:8a:a9:be:7e:eb:86:4d:b7:67:06:9c:
8f:ff:e2:fc:ff:8e:8a:24:b9:33:0c:1d:8b:bc:9c:a0:46:54:
65:11:08:86:89:e6:e1:99:c5:b8:cb:92:5e:c2:ca:c9:1e:03:
cb:4c:3b:f7:cb:13:d5:d5:ab:12:a7:f3:06:cc:d2:e6:48:be:
da:c6:e0:9a:01:08:65:da:32:b0:14:4d:9d:f6:72:38:0d:9c:
a8:1f:fd:0a:e6:da:b2:4d:ea:1e:a8:bc:13:8c:d5:ba:88:a4:
c5:bc:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:01 2025 by rpki-client