Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134392e302f32342d3234203d3e20313431303339.roa
File: 3134372e39332e3134392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: 5gE+O8U6pJEAtrQDIa3mLtjiSXIt7WF84kD/VeQDg1g=
Subject key identifier: 37:34:36:B1:0E:DB:20:42:C4:E1:DA:8A:CF:EA:6E:7C:E1:53:FC:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2278D122598B7357420D0C0B189ED608E8D28938
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134392e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 07 Feb 2025 19:49:51 +0000
ROA not before: Fri 07 Feb 2025 19:44:51 +0000
ROA not after: Fri 06 Feb 2026 19:49:51 +0000
asID: 141039
IP address blocks: 147.93.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:78:d1:22:59:8b:73:57:42:0d:0c:0b:18:9e:d6:08:e8:d2:89:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 7 19:44:51 2025 GMT
Not After : Feb 6 19:49:51 2026 GMT
Subject: CN=373436B10EDB2042C4E1DA8ACFEA6E7CE153FC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:af:b5:53:bc:9f:4c:fc:5c:b4:cd:77:cd:
fd:ce:5a:2f:9b:19:06:7b:93:1c:d0:f4:a8:54:c7:
77:65:f3:59:da:28:eb:62:48:52:13:7f:a5:32:b7:
fa:d9:66:bf:fb:ad:f0:a4:64:b4:45:59:2c:2a:8d:
09:58:f6:21:7e:55:2f:f9:74:20:77:66:35:da:03:
97:1c:4c:a8:90:3e:dc:f1:a2:4b:63:f6:80:89:72:
47:e3:3c:db:0f:dc:87:28:4d:ca:b2:bb:72:13:22:
16:4a:de:81:67:80:5d:ed:d9:ca:d4:8e:b9:81:a1:
01:dc:f3:08:9a:fd:9d:cc:63:0d:fb:84:55:9a:04:
57:d9:33:fb:0c:cc:32:b8:85:3c:31:a5:e4:9a:85:
e1:16:09:1d:0d:73:0f:48:98:0a:b1:7f:3c:7e:5a:
9b:75:6b:86:51:94:23:ab:d1:ee:1b:2d:74:58:46:
f1:01:03:2a:9d:06:75:20:0c:41:4a:13:7e:53:d3:
18:48:f8:38:88:b8:4c:56:47:07:76:17:86:de:c1:
67:0a:81:04:33:ac:08:f3:bc:6d:d3:6d:2a:3f:94:
ec:fd:7a:7e:f4:ac:bf:37:70:16:38:ad:4b:9b:d4:
23:f4:ba:cd:fc:09:c6:bb:2a:2d:5e:c8:5d:29:1c:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:36:B1:0E:DB:20:42:C4:E1:DA:8A:CF:EA:6E:7C:E1:53:FC:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134392e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.149.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e1:df:ec:dc:77:f4:1d:e7:f0:e0:61:ce:f6:40:2d:fb:33:
88:e6:06:60:b4:49:cf:38:fc:5f:fa:49:98:34:47:2a:fd:08:
c0:55:19:10:54:db:aa:5c:5d:2a:fe:e5:80:37:3e:b1:f6:bc:
a9:05:39:b6:69:67:6e:78:9f:37:e6:2b:7b:12:eb:da:a8:dd:
f8:13:80:c1:3a:aa:56:a2:2c:1e:f1:bd:18:97:3f:71:42:7a:
e4:55:bc:6a:f6:48:04:78:83:32:90:30:3a:e7:26:24:4a:4e:
75:5a:48:a3:2b:d0:49:4b:06:e0:f2:7a:6c:40:f4:1b:ec:db:
90:bc:84:be:f5:11:88:f9:0f:37:0a:ca:db:80:6a:bd:ef:67:
e8:da:e2:3f:5f:9d:24:dd:ca:12:4b:28:17:b9:8b:e3:00:0b:
aa:57:31:2d:a5:77:dd:c4:4a:25:47:06:5b:2e:3d:4d:c1:1a:
d1:ab:eb:4c:ff:1b:f3:cc:74:27:5d:ce:9e:90:ca:ee:4e:02:
a8:0b:32:30:bd:06:2a:8a:03:78:98:72:69:a0:70:e7:c5:0d:
b3:43:38:df:95:b7:8e:b6:d4:d9:7a:51:44:64:2b:a1:92:bf:
6e:af:4e:38:c7:2f:cb:4c:d5:34:d2:3b:3e:dd:92:94:b8:7c:
9a:4f:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:01 2025 by rpki-client