Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa
File: 3134352e31342e3134362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: VezjYbSh1FDRNB1X7a6zbzS7njXFXsaGyhSeLN6wr1k=
Subject key identifier: D2:0C:80:1B:D1:90:E2:BC:05:3C:86:CB:70:BF:63:99:39:F6:E3:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 476E35645A4367BECBC14CD509C7144B059B851A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:13 +0000
ROA not before: Mon 27 Jan 2025 09:40:13 +0000
ROA not after: Mon 26 Jan 2026 09:45:13 +0000
asID: 47583
IP address blocks: 145.14.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6e:35:64:5a:43:67:be:cb:c1:4c:d5:09:c7:14:4b:05:9b:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:13 2025 GMT
Not After : Jan 26 09:45:13 2026 GMT
Subject: CN=D20C801BD190E2BC053C86CB70BF639939F6E343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:07:80:72:ab:49:22:0e:bd:ee:72:3e:19:
01:bb:97:a2:6b:e6:8c:ea:b1:ff:8a:7b:0a:ca:e9:
dc:09:4d:9f:d5:17:03:07:d8:26:37:9c:93:a7:c6:
b4:46:e2:86:d6:33:0e:d8:ff:37:68:0f:6d:3e:5b:
ea:b0:7e:41:cc:c4:de:dc:b6:9f:4c:36:ca:07:d9:
9b:44:2a:f3:2f:1e:bf:35:46:93:cf:6c:69:52:94:
9f:1e:fa:8b:b1:07:f4:36:04:d7:72:09:55:1e:48:
41:58:42:e1:ed:0a:d4:e1:09:3c:8f:b7:02:1f:4f:
93:fc:38:6b:d4:3a:b0:8d:70:b9:83:08:d9:08:fc:
3e:49:3f:d2:dc:90:d4:58:6a:bc:d0:1e:62:fb:27:
c0:2e:ed:08:79:3f:19:70:e4:03:de:2b:6c:da:0a:
ca:5a:21:8a:2e:b3:e4:55:38:ed:0b:a0:e2:40:cc:
ad:a1:cf:89:61:be:20:b4:6b:38:56:44:d9:ff:16:
22:f6:87:13:20:a5:06:ac:fb:d1:27:86:54:7b:78:
bc:d1:51:a4:49:56:56:a2:58:1a:af:09:00:df:1e:
dc:45:f5:a1:0d:6c:03:8f:b5:42:40:7d:a4:14:38:
e3:05:0d:80:5f:c5:1a:f0:84:68:07:0d:3a:25:60:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:80:1B:D1:90:E2:BC:05:3C:86:CB:70:BF:63:99:39:F6:E3:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.146.0/23
Signature Algorithm: sha256WithRSAEncryption
50:aa:a6:88:73:a9:1f:ed:78:24:fd:06:ea:be:08:98:5f:c2:
7b:37:fb:8a:d3:3d:5f:55:4e:83:b7:1d:28:9e:20:5b:f5:1f:
c8:97:6f:dc:fb:cb:21:4a:20:41:c3:fe:25:6f:14:d8:0b:0c:
a4:81:6e:ff:44:79:48:e9:32:ce:a6:0f:d7:fc:a4:85:8e:69:
2a:2c:27:92:3c:c2:43:b2:e0:54:7f:b2:fa:17:02:49:d6:5b:
41:00:96:f9:db:f1:f2:7e:c9:3a:78:93:9e:ce:34:de:a8:70:
08:9e:59:bb:52:2e:40:21:b1:e9:88:e3:75:f8:1d:bf:9c:84:
32:df:31:71:5b:48:00:97:7b:3c:de:0c:e3:6d:84:1c:a3:10:
c6:ea:7d:32:3b:9d:c1:f5:9b:bb:a2:6a:c9:b6:01:46:77:2b:
b0:01:8c:c0:3f:f6:f2:a3:c0:3b:a0:0c:2a:e2:c8:e8:34:4d:
95:61:00:91:90:d3:00:4a:b7:8b:ee:b3:8c:f6:ff:6c:51:57:
e5:7b:e5:ba:f1:c0:e4:e5:85:64:0e:40:c5:72:da:71:eb:d4:
ae:0a:ff:88:db:02:55:c2:6a:82:4f:3e:5a:ae:a2:c2:1f:35:
4d:67:e6:1f:53:ad:48:d4:8b:19:12:28:a0:9b:a9:7c:ea:fa:
a6:ac:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:05 2025 by rpki-client