Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3231203d3e203437353833.roa
File: 3134372e39332e3132302e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: Lnx697onAYE0ESk4qvJcaC3847aLoWwLnX+iDr1kohw=
Subject key identifier: C0:B7:26:3E:F5:39:B3:36:52:73:DC:49:1C:E3:DB:C3:94:B6:E8:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13B2F56BA83F42799F214A4FEE2786D68128736C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3231203d3e203437353833.roa
Signing time: Fri 10 Jan 2025 11:41:10 +0000
ROA not before: Fri 10 Jan 2025 11:36:10 +0000
ROA not after: Fri 09 Jan 2026 11:41:10 +0000
asID: 47583
IP address blocks: 147.93.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b2:f5:6b:a8:3f:42:79:9f:21:4a:4f:ee:27:86:d6:81:28:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 10 11:36:10 2025 GMT
Not After : Jan 9 11:41:10 2026 GMT
Subject: CN=C0B7263EF539B3365273DC491CE3DBC394B6E8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:5d:a8:fc:9c:82:59:17:d7:1c:28:80:32:
33:f8:07:58:ff:b1:a2:cb:bf:6a:b3:d5:78:3f:c3:
bf:36:9a:3b:0c:e6:3c:bb:d5:bb:88:2b:2c:89:69:
36:77:95:c5:f0:1f:60:4d:8d:24:f7:83:1d:89:a0:
2e:be:0a:23:45:09:74:de:e3:a4:c8:3f:0b:74:76:
81:7c:87:0b:15:21:99:7d:31:70:c6:72:21:63:f0:
76:46:7f:d5:73:21:3b:4f:09:0a:22:3a:d2:53:df:
04:e8:80:ac:9c:31:98:9b:35:1b:44:0b:66:84:68:
24:1c:f0:23:1c:52:3e:d2:df:1c:a1:b9:a6:22:dd:
31:1f:25:98:7e:f5:ad:51:cb:f2:90:b1:c9:a4:3c:
40:8a:1a:84:4a:61:58:36:ad:0a:79:9a:e3:34:a9:
1f:79:94:75:d1:2d:83:64:46:1d:2a:a2:5e:e0:a6:
72:e1:6e:06:6f:fd:06:4d:a7:f9:07:ef:09:88:c9:
37:2e:de:8b:04:6d:9e:d8:84:47:9e:1e:a2:51:a3:
53:51:b3:68:eb:ab:5d:4f:fd:d7:d2:81:d5:2d:44:
39:24:48:75:d4:98:89:4b:b7:bd:f4:c9:3f:90:64:
21:19:63:29:a5:0c:54:be:13:0f:82:6b:bd:06:4e:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:26:3E:F5:39:B3:36:52:73:DC:49:1C:E3:DB:C3:94:B6:E8:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.120.0/21
Signature Algorithm: sha256WithRSAEncryption
33:e9:49:16:42:e9:e7:12:89:e7:f9:0e:a5:06:bd:bd:3a:03:
d6:a7:5f:c7:41:a8:b9:22:47:0e:72:b1:ce:89:62:34:39:f8:
96:7d:14:37:51:78:4e:21:b1:8a:7a:e8:2f:b7:99:a9:b8:5a:
c7:aa:38:5b:96:39:22:ee:b3:c2:27:6e:21:82:ae:89:f0:6f:
c2:d0:be:2b:2f:de:38:b6:a1:29:df:6b:9c:79:9d:b0:1d:79:
f2:ec:58:4d:43:9e:e5:dc:07:21:93:1b:4a:a7:1f:3c:ea:73:
13:e0:f3:15:aa:1e:fb:50:f8:34:94:44:c9:96:33:7a:28:83:
55:85:48:88:cb:6c:5d:e7:0c:15:7c:84:59:52:21:5e:19:bb:
17:59:54:ad:9b:8f:79:e4:51:06:fd:c4:9a:ad:b6:e2:26:31:
77:2e:34:7c:0c:89:ab:b8:eb:85:12:34:7f:2f:d5:d8:50:88:
be:4f:0c:58:59:6e:f8:09:a1:2b:3d:49:c0:14:5a:93:c2:b7:
14:f5:83:ae:71:40:21:83:2b:c6:72:b7:34:0d:41:70:37:c2:
5f:ba:8e:66:2b:8b:ea:78:84:e2:9e:dd:a9:71:d3:29:c4:c1:
98:6f:21:f6:85:b1:ae:b0:0f:4b:ef:6d:fa:ba:12:01:ec:66:
2f:d3:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:39 2025 by rpki-client