Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
File: 3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 1bA+7JOx/ub1jTX1FJ4riHkoqhK7YB+SmMLaQHc31PY=
Subject key identifier: 8B:CC:1C:1F:9A:D8:65:4C:F7:1A:96:ED:67:0F:8B:7E:23:AE:36:0C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3810D249056AB2E9D853CD39FD156FAD18C0B531
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:17 +0000
ROA not before: Mon 27 Jan 2025 09:40:17 +0000
ROA not after: Mon 26 Jan 2026 09:45:17 +0000
asID: 47583
IP address blocks: 109.106.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:d2:49:05:6a:b2:e9:d8:53:cd:39:fd:15:6f:ad:18:c0:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:17 2025 GMT
Not After : Jan 26 09:45:17 2026 GMT
Subject: CN=8BCC1C1F9AD8654CF71A96ED670F8B7E23AE360C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:22:cd:bc:94:73:26:10:40:f6:f0:63:db:
f9:aa:01:25:0e:f3:62:c1:dc:cc:8c:c0:c0:26:9c:
91:6e:78:e0:a2:b3:66:c9:fc:35:ad:d9:20:81:07:
4b:4e:d9:27:e5:81:cc:ed:1f:1b:09:c9:ca:af:ee:
2a:f5:89:70:df:6b:00:7e:47:68:f3:fc:3b:b6:99:
31:64:74:be:5b:61:33:21:d6:ed:bc:58:eb:15:f0:
6c:db:69:1e:b6:c2:ec:35:7b:79:f9:d3:4a:1e:c0:
79:4c:7e:82:aa:40:48:d7:28:04:a6:d9:ce:70:27:
92:60:cb:cf:36:91:b4:ac:96:7d:34:98:81:81:c2:
bd:2f:46:1a:20:13:2c:fd:41:01:4f:79:66:9a:97:
d4:fb:55:2e:0b:7e:6c:f1:d5:d8:ac:af:e1:fe:05:
20:1c:4f:b7:55:d0:f9:23:77:e0:5a:4b:6f:9a:4c:
85:a3:f6:fd:28:2f:9d:62:ee:51:42:12:12:6e:e3:
ee:7b:10:0c:80:ee:ac:bf:33:e2:17:8e:c0:c9:40:
cf:d7:db:45:1e:56:2d:70:1b:53:14:eb:69:d3:97:
be:0a:52:f7:d9:4c:ce:44:09:58:4a:73:df:be:82:
25:bf:3e:54:ed:b1:dc:42:7b:ce:ee:f8:c4:96:3c:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:1C:1F:9A:D8:65:4C:F7:1A:96:ED:67:0F:8B:7E:23:AE:36:0C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:04:fd:12:fc:15:dc:c4:39:42:20:5e:b1:3b:20:88:9b:6c:
82:55:c9:ab:cd:0b:6f:92:d8:6e:94:b0:a1:5e:98:ed:08:8a:
98:2c:24:4f:81:79:94:9d:51:0a:00:07:29:c3:96:d2:63:ac:
6f:4b:ee:63:c3:0a:41:c6:6e:36:46:2e:a8:24:74:3b:e1:66:
d2:00:1c:ed:ac:7b:57:61:e7:ed:bf:aa:85:fa:b1:69:78:bf:
1e:9d:47:b7:ae:79:86:dd:98:75:0a:f1:70:15:67:4b:be:09:
b5:05:bb:7a:e2:43:1f:27:b0:cd:c0:3e:80:0d:f6:8e:c2:ac:
46:7c:dc:2a:26:5c:83:a7:7d:35:c2:9b:a3:30:a4:fe:39:81:
fe:14:32:4b:88:3c:22:8f:2b:aa:e0:b9:e3:95:e7:80:a2:f9:
db:dd:c2:0a:d1:47:9d:c1:2b:3f:a1:b3:f7:ae:8e:57:98:d1:
6f:2a:8d:9d:6c:a5:40:58:7d:fa:c3:0d:7a:5a:ef:51:cc:08:
84:77:51:6e:c9:9d:a1:96:ff:2c:2a:29:e7:67:15:14:6b:73:
64:f6:4f:ff:79:da:d3:78:7a:a6:d4:bd:a6:12:c9:46:ad:18:
be:5f:fc:b7:81:2e:56:ca:51:a3:6e:48:dc:3f:57:e0:27:c9:
64:97:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:00 2025 by rpki-client