Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
File: 3134372e39332e31362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: xcpH0jaPezxdN3D+k9zY/185lf+K2RAA2qM6lkWZC/Q=
Subject key identifier: 6D:A5:CB:25:8D:9D:D5:C1:4C:98:6F:3C:2B:64:C9:1C:C3:84:E6:92
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72AD9C34942782A3BF8AB7634B1DFCDB6DD8A846
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
Signing time: Wed 27 Nov 2024 14:39:06 +0000
ROA not before: Wed 27 Nov 2024 14:34:06 +0000
ROA not after: Wed 26 Nov 2025 14:39:06 +0000
asID: 47583
IP address blocks: 147.93.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ad:9c:34:94:27:82:a3:bf:8a:b7:63:4b:1d:fc:db:6d:d8:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 27 14:34:06 2024 GMT
Not After : Nov 26 14:39:06 2025 GMT
Subject: CN=6DA5CB258D9DD5C14C986F3C2B64C91CC384E692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:e9:88:3e:6b:f8:9f:a9:65:e1:11:59:50:
74:15:72:88:c7:31:f9:51:7b:9e:37:ef:60:86:51:
b5:e2:f3:fd:49:01:09:b5:45:d8:76:37:da:c6:55:
b4:48:05:72:39:2e:68:e4:74:a0:3b:df:fd:26:45:
50:ea:ab:b1:69:45:b2:57:56:04:d2:29:f4:4b:cc:
25:00:1e:9b:51:1f:0f:6b:1e:7a:f0:fc:c8:d7:d0:
a4:e0:72:4d:a7:47:68:85:2f:c8:82:dc:2f:e8:27:
84:f8:c7:f3:2a:9f:e0:cf:ef:5e:b6:99:e4:5f:dd:
ef:2a:b1:36:32:21:c5:ee:ef:de:6e:9e:36:20:c2:
51:44:83:95:a5:a1:32:5f:e9:06:12:9a:d9:f5:6a:
d5:51:14:b5:a8:8b:b2:a8:6e:e8:cf:83:be:36:06:
0e:70:d8:c8:7a:19:ba:22:0f:31:c7:43:63:ba:af:
ce:90:e6:46:bb:13:62:da:c3:93:23:8d:98:ca:54:
ae:09:e0:81:75:3b:f3:76:74:f4:6a:da:1c:ec:56:
e0:bd:de:98:ee:d7:c4:ed:38:2b:75:34:16:03:2e:
99:3e:4c:56:f4:79:c0:62:8c:d8:2b:5b:e7:3d:5e:
0a:74:e3:1d:06:a0:40:31:be:36:f4:39:fe:58:0c:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:CB:25:8D:9D:D5:C1:4C:98:6F:3C:2B:64:C9:1C:C3:84:E6:92
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:76:7f:a3:00:49:67:68:4c:02:42:a9:36:cb:f5:4e:ab:93:
5b:c3:a1:e5:c6:20:57:63:0e:2d:9e:76:93:02:ad:4c:ec:8f:
53:53:3e:3e:17:2e:7e:0e:f3:53:f2:06:49:c7:25:a7:6a:1b:
73:40:af:37:b2:e2:1c:db:7c:26:d7:a2:85:9e:bd:86:f0:4e:
59:1a:c8:eb:7a:4f:f2:9f:93:2b:33:8c:13:0d:ac:3a:3e:d1:
bf:2d:d3:82:c2:6c:ae:bd:d4:02:b9:1b:32:ec:a1:22:e3:77:
2b:75:bb:ee:bd:71:46:36:30:bf:06:cb:05:7e:a2:99:ee:87:
af:fc:9d:99:dc:89:d1:73:37:a6:7a:98:20:0a:93:8b:34:f6:
47:cb:e9:02:d8:ab:6a:05:f3:b7:7d:63:16:da:2d:6a:84:04:
2a:99:34:6d:eb:b7:16:ce:0f:15:31:53:71:88:da:1c:cb:67:
a8:2d:57:75:3f:54:5d:2e:14:4b:1a:90:f7:0c:92:16:01:60:
67:b1:3b:d7:e5:55:b5:b2:55:12:e1:d1:26:7b:9f:ed:78:a4:
21:80:9d:cc:c2:25:82:40:71:2f:24:1d:b6:0b:b1:eb:4c:1a:
38:05:37:5f:ee:a9:fc:68:7b:fb:8b:a6:4e:ed:d1:09:6c:da:
81:50:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:26 2025 by rpki-client