Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e203437353833.roa
File: 3134372e39332e37362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: KXXK74NQf0o5koRn+w4HwLLwjU4vRx8CSMMS+EH+DnI=
Subject key identifier: 09:22:4E:C9:FC:49:3E:B5:20:A6:AC:C7:6C:3A:24:B8:69:E6:41:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 611E3F0A827679A94881275474132AFC9F059561
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e203437353833.roa
Signing time: Wed 08 Jan 2025 09:39:36 +0000
ROA not before: Wed 08 Jan 2025 09:34:36 +0000
ROA not after: Wed 07 Jan 2026 09:39:36 +0000
asID: 47583
IP address blocks: 147.93.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1e:3f:0a:82:76:79:a9:48:81:27:54:74:13:2a:fc:9f:05:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 8 09:34:36 2025 GMT
Not After : Jan 7 09:39:36 2026 GMT
Subject: CN=09224EC9FC493EB520A6ACC76C3A24B869E6416D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:e6:8f:90:ff:87:3b:ff:57:c9:f6:b3:16:
d2:0e:c8:cf:22:2f:a2:e6:81:be:62:18:18:d5:e3:
87:3a:4c:fc:28:81:ec:ba:fc:fd:23:83:07:33:cd:
39:c2:f6:7e:9c:ba:60:56:11:80:43:c7:2d:e5:32:
05:cf:3d:33:f5:aa:b3:94:b6:a9:57:1a:9f:79:28:
e5:58:b0:a6:3d:dc:ba:55:ce:86:ca:6a:fc:3f:f4:
ca:89:af:ea:99:f8:64:96:43:67:45:71:83:2d:ec:
ae:a1:a6:7b:91:02:78:59:1f:1e:79:ff:bb:b1:54:
44:19:ed:ed:46:d2:27:f5:34:ce:3f:f6:89:18:48:
1a:74:c5:75:cc:83:0f:60:8f:11:02:b3:d7:51:00:
4d:4e:0e:1f:c7:00:6a:06:89:45:00:a1:4a:85:dc:
cc:7e:af:2f:53:4e:d1:22:c4:4f:63:f8:14:12:17:
14:b9:88:b8:f6:90:72:a3:ac:74:e3:4c:48:35:5e:
69:fb:68:b8:33:c2:88:40:aa:89:a0:bb:99:eb:f4:
ff:27:ae:a7:01:2b:0b:99:15:e1:34:5a:cc:ce:a9:
d0:8d:d4:2e:dd:98:77:53:9e:4a:b5:de:f3:b9:9f:
73:83:35:d7:ef:4a:94:a1:6b:12:e1:90:a3:66:f3:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:4E:C9:FC:49:3E:B5:20:A6:AC:C7:6C:3A:24:B8:69:E6:41:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.76.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7e:a0:1c:4a:48:51:20:5f:5c:61:04:d5:bc:62:18:fa:56:
9d:ea:eb:c3:c9:6d:7d:fb:40:0e:2c:8c:df:c8:45:38:f1:5c:
34:6f:37:2f:69:83:24:af:cf:51:a0:12:b6:c6:45:ca:85:b5:
a4:8d:6c:16:8c:ab:6b:9e:63:b6:98:1e:11:9f:1b:3d:20:bf:
7c:2d:82:9c:ed:b8:c1:d8:76:90:f0:a6:40:b8:df:33:43:c0:
71:31:f4:91:86:a2:94:82:65:90:e3:ec:70:67:68:db:b7:98:
3a:c4:94:9d:8d:e6:11:98:c1:9e:ec:be:f2:2b:ed:58:b6:97:
70:6d:e0:39:38:50:b9:7b:fd:dc:48:39:c9:71:5a:54:e5:10:
34:2f:74:05:f9:28:b0:6b:f2:73:a2:00:bd:ab:3a:47:ae:dd:
10:f1:f0:d0:f0:0f:68:1a:4f:31:28:4c:ba:19:49:31:bd:ee:
c5:2d:78:fd:28:31:36:bf:29:d5:0f:f2:eb:69:2b:46:b8:54:
ac:78:f7:11:21:47:17:2b:ee:50:48:7f:5c:ba:4b:d3:37:66:
76:f9:8b:2f:75:38:cb:d7:8e:59:71:9e:ec:60:a8:4f:79:18:
9a:09:fc:23:b0:76:f0:fe:9e:c6:26:56:13:3a:4a:d8:1d:55:
ed:3c:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:47 2025 by rpki-client