Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e3132302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: J7/4PLc0MBEVu4rjGH8akEinG3v7dAvdCc7R99LK2VA=
Subject key identifier: 7B:F5:B8:50:55:51:DE:B2:50:04:D9:36:B7:53:61:80:88:55:2D:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62803B788616B38FCAC06A0ABFFE9785C67A44F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3234203d3e203437353833.roa
Signing time: Tue 14 Jan 2025 11:11:08 +0000
ROA not before: Tue 14 Jan 2025 11:06:08 +0000
ROA not after: Tue 13 Jan 2026 11:11:08 +0000
asID: 47583
IP address blocks: 147.93.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:80:3b:78:86:16:b3:8f:ca:c0:6a:0a:bf:fe:97:85:c6:7a:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 14 11:06:08 2025 GMT
Not After : Jan 13 11:11:08 2026 GMT
Subject: CN=7BF5B8505551DEB25004D936B753618088552DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:d2:32:94:ed:16:0f:75:9b:fd:44:db:ce:
1f:8c:ff:53:d6:53:70:f0:e0:77:1c:75:3f:b9:66:
f4:74:0e:e6:a8:31:7e:e3:6e:e5:9f:cc:23:57:d4:
24:8a:c9:44:b4:f6:a2:b3:a1:06:c5:3b:c6:17:28:
dc:f3:79:84:3a:1b:f2:3c:e4:46:69:8e:58:2f:58:
31:af:01:ee:e5:62:7a:c8:07:b4:0a:49:43:46:c0:
44:ea:e8:b7:34:5e:1a:db:fa:09:79:81:62:8f:b6:
bf:5a:95:b2:d4:d1:c6:59:bf:83:88:69:5a:cd:fa:
13:2c:9a:50:85:4e:8e:a7:7d:b6:63:fe:3e:cb:c7:
4d:be:f3:0b:b4:49:e6:d8:07:04:55:50:be:04:1b:
09:21:05:e7:61:2f:00:db:60:68:c4:28:84:ac:1c:
58:9b:4f:1f:80:57:06:c9:43:4e:de:ab:69:ee:05:
93:3d:2a:b5:03:ab:5d:24:fe:f4:34:78:ee:68:17:
03:95:f5:42:c5:41:86:56:ed:2e:4e:d5:b1:bd:b8:
60:7f:73:de:88:88:fe:62:c7:0a:2e:1f:ca:ae:3b:
bc:80:fe:90:d6:79:d1:30:2f:35:70:ad:6b:ef:5d:
09:23:2f:35:1a:c1:13:bc:31:bc:f8:15:94:9a:3d:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:B8:50:55:51:DE:B2:50:04:D9:36:B7:53:61:80:88:55:2D:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:c4:fd:6e:6e:ff:b6:c6:a8:0e:c8:ff:43:e5:fa:38:62:00:
b0:99:5e:11:55:49:9f:19:32:d5:f9:23:d3:36:8b:e6:3a:8c:
fd:50:a3:5a:36:1e:b2:c9:d4:b0:09:28:e4:83:7a:5b:cf:ef:
36:5f:7d:17:47:62:cb:51:11:7f:a8:6c:ab:c6:6b:21:09:29:
d9:f1:a0:0d:2a:bc:e6:a8:42:85:b2:9e:01:8d:e6:fd:59:d6:
9a:11:10:0d:ab:c9:22:51:8b:8d:5c:00:68:52:ec:1b:c1:3a:
86:f6:64:52:38:56:00:e3:15:90:c7:c3:9d:b7:19:72:d2:78:
7c:4e:a2:d4:3f:fd:6b:d1:a4:f4:c4:14:90:f1:52:e8:88:bf:
f0:e8:2b:a2:cd:39:62:96:0a:f1:59:d9:36:2a:a0:8c:a4:e6:
65:6e:eb:02:f0:b7:29:08:00:2a:d5:a0:f4:ac:a8:ab:07:20:
c0:e1:28:e8:23:c2:bc:76:7c:64:c3:cf:d8:1e:2e:ea:21:1f:
06:0b:34:c7:14:13:bd:32:d9:fd:3d:ff:5b:67:fb:c3:6f:9a:
44:3e:4a:22:f4:6e:dc:92:46:6e:2f:be:88:9d:e8:82:48:0a:
94:ff:58:84:39:0e:79:f1:27:07:3f:34:e0:bc:b2:cb:8e:24:
07:cc:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:46 2025 by rpki-client