Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa
File: 3134352e31342e3135322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: ake3qI8klUKhmjWZIuywokxQmHxEZzbg5jsc3sf22Os=
Subject key identifier: B7:8F:E7:7A:36:64:5A:08:7F:79:0C:F9:C1:B5:01:33:BB:4C:DD:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A510AD0701DF20819F66677B126E42A4A955AEE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:17 +0000
ROA not before: Mon 27 Jan 2025 09:40:17 +0000
ROA not after: Mon 26 Jan 2026 09:45:17 +0000
asID: 47583
IP address blocks: 145.14.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:0a:d0:70:1d:f2:08:19:f6:66:77:b1:26:e4:2a:4a:95:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:17 2025 GMT
Not After : Jan 26 09:45:17 2026 GMT
Subject: CN=B78FE77A36645A087F790CF9C1B50133BB4CDD2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:00:f2:64:26:b0:ef:8d:86:f5:ed:22:7e:
6a:6e:0e:1c:1e:b8:79:a2:44:68:8f:8b:59:cb:53:
b7:fd:34:36:0d:8b:fa:ae:65:75:c0:d0:24:9f:cc:
34:95:f1:28:5a:46:71:cd:c6:f4:61:2a:26:f5:af:
ba:ff:44:20:8e:4b:02:d1:77:bd:16:83:b2:d6:7d:
75:bd:e9:01:82:97:f5:d8:ce:ef:dc:84:f1:80:11:
88:7f:d2:95:4d:b1:29:22:93:21:0e:40:80:fa:45:
14:e5:e5:f5:a6:02:58:28:25:ad:96:f3:ea:bc:95:
a7:d4:41:8d:63:6d:e3:8e:95:aa:af:a1:20:b5:2d:
13:5b:4d:d5:ce:b1:31:98:a3:fb:5d:d0:ab:fa:40:
7a:95:25:35:40:59:9d:b0:af:b3:56:9b:00:11:dd:
73:88:da:42:e9:f1:9e:c5:79:c8:49:10:89:17:d4:
6a:4f:dc:b2:cd:ca:79:55:65:e2:0c:48:09:f2:aa:
d5:3c:aa:ce:49:80:5d:9d:45:e4:eb:29:ba:9d:ff:
89:8b:d0:48:1d:51:51:56:31:c7:9b:17:9a:3b:75:
c5:cf:c9:fc:63:44:39:3a:41:b9:98:cb:8d:d1:35:
2c:c2:45:0f:50:eb:f5:08:36:0c:43:77:25:b6:0b:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8F:E7:7A:36:64:5A:08:7F:79:0C:F9:C1:B5:01:33:BB:4C:DD:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:db:d3:13:e2:ee:29:71:77:c0:d4:f1:f9:2e:90:a9:86:17:
56:6c:cd:33:5c:f9:b8:32:29:20:c0:51:94:8e:55:28:67:3c:
03:a8:43:fb:82:41:2a:11:88:76:38:16:32:58:06:dc:87:91:
66:b5:27:5c:e2:85:4d:18:bc:97:f0:fa:c5:fa:51:20:47:41:
3f:7e:3d:2f:b0:7f:4c:c0:69:0a:81:59:c9:0b:f2:8f:f2:5d:
40:9d:67:e4:21:15:1d:c6:86:8a:99:2a:85:43:aa:35:d8:cc:
17:5e:c6:06:61:aa:68:b3:c9:94:26:6a:39:61:48:b7:85:93:
f0:a7:ce:9b:c6:13:37:b7:5c:05:de:dd:6b:b3:f8:fa:47:2c:
21:cd:46:51:28:01:f5:f4:37:e2:57:a8:10:94:7e:fa:4b:51:
38:08:e0:01:40:26:1d:6d:5e:18:23:71:6f:e2:20:db:d7:db:
0c:fc:6c:1d:b8:47:1f:a0:9d:b5:bc:4a:04:29:07:9b:5a:55:
c4:69:03:39:f0:c1:7f:01:6c:cb:a8:12:1d:41:63:be:23:f3:
fd:30:4a:02:9b:9e:07:8d:0e:a2:45:f6:11:c3:7b:c4:04:cb:
f5:57:4f:a1:ce:b6:4c:21:47:ec:4a:11:b1:b0:da:49:6c:62:
51:d8:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:47 2025 by rpki-client