Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3139352e3138342e3234372e302f32342d3234203d3e203437323732.roa
File: 3139352e3138342e3234372e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier: 6I90o4eMbwxvOVBLbORiINR7Ui5H+yJ3ylV8WVYvd/8=
Subject key identifier: FB:39:5A:F6:16:0F:BE:5B:F8:A1:EF:F0:6B:BC:4F:3E:53:BC:1B:C9
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 11586E7E4D28A1C97E5EBF876CA69390903D1B9C
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3139352e3138342e3234372e302f32342d3234203d3e203437323732.roa
Signing time: Fri 07 Feb 2025 19:13:22 +0000
ROA not before: Fri 07 Feb 2025 19:08:22 +0000
ROA not after: Fri 06 Feb 2026 19:13:22 +0000
asID: 47272
IP address blocks: 195.184.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:58:6e:7e:4d:28:a1:c9:7e:5e:bf:87:6c:a6:93:90:90:3d:1b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 7 19:08:22 2025 GMT
Not After : Feb 6 19:13:22 2026 GMT
Subject: CN=FB395AF6160FBE5BF8A1EFF06BBC4F3E53BC1BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:56:99:47:f0:9a:a7:16:37:f8:61:fa:12:
8c:82:93:98:de:bd:09:61:54:40:08:35:06:1f:3b:
bc:e7:70:db:a6:4c:8d:dd:9a:be:23:27:f1:e5:ce:
2e:87:81:c7:ed:e2:97:22:2b:a4:63:12:d3:89:12:
96:c9:08:7a:0e:43:50:58:d2:08:dc:1c:79:90:f8:
ad:ea:c5:ab:a5:18:5c:f5:45:19:c4:a4:90:4a:f7:
3e:ad:71:0b:91:03:b9:47:d0:92:26:72:47:78:d5:
1f:19:79:c8:d7:dd:e5:af:c6:a7:10:99:17:da:ed:
85:41:fd:d4:b2:37:d0:8b:e9:d8:73:a5:b3:2c:e0:
ad:08:d2:c4:44:10:78:e2:86:79:fe:95:ff:f4:3d:
8b:15:fc:72:1e:38:01:09:4b:e9:75:a3:08:ff:92:
34:4d:05:61:7e:71:1f:ed:12:bd:ff:7b:0f:aa:37:
f0:8e:12:c3:d2:27:9d:ad:79:03:50:fc:67:f0:d4:
a5:de:72:d5:1d:f3:50:39:30:bf:83:1c:d5:f9:6d:
f6:6c:91:0d:1b:31:83:3b:74:15:34:7a:02:20:1b:
7a:42:c7:55:a9:e5:24:ae:03:00:39:42:9c:ea:75:
71:7b:b5:b2:dc:69:82:b5:3d:cb:74:53:71:aa:3a:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:5A:F6:16:0F:BE:5B:F8:A1:EF:F0:6B:BC:4F:3E:53:BC:1B:C9
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3139352e3138342e3234372e302f32342d3234203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5a:84:bd:34:0e:e0:17:e1:00:b2:00:93:9b:42:c5:68:fc:
4c:4b:03:f8:c9:13:13:36:da:a6:da:7a:7f:74:63:f7:db:ab:
b4:0a:93:eb:af:92:60:8d:8c:4b:b8:68:9b:7d:37:4b:6a:56:
68:3f:70:94:fc:16:5d:cf:8b:60:ac:1e:20:01:50:15:3a:7a:
63:51:75:eb:db:d4:c6:e7:05:ad:ab:96:f1:1a:d8:97:6c:ab:
ec:2c:ce:87:3d:2d:40:52:b4:f7:64:be:11:96:e9:5c:f3:d2:
d3:d7:05:61:1d:6a:9a:ab:d6:d9:b8:65:88:c1:b7:14:22:0a:
02:3c:20:a9:af:97:b1:e3:85:d4:53:cf:62:56:6b:da:2f:99:
f9:54:c2:25:82:8f:62:2e:4f:b3:e8:b4:92:78:4b:24:0c:14:
88:30:ff:00:0e:34:9e:b5:e0:6d:fa:7f:c2:f6:8a:6f:d0:69:
09:bc:5d:f3:f9:33:a7:dd:b2:23:fa:87:d5:c6:49:99:51:98:
1e:64:8b:3d:4a:68:a3:80:3d:11:07:6c:e2:a0:ee:da:ed:a9:
b3:b3:06:fc:17:f1:21:cb:86:66:8e:d3:4d:ae:7c:ef:d0:21:
2c:d2:cf:e3:2d:e7:f3:32:08:94:3c:f2:32:12:42:11:cb:b6:
cf:12:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:14:13 2025 by rpki-client