Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa
File: 3134372e39332e38302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: OkSyY9cb0oNY3ETP9y5nNuE6WBhFY6hNY/xf9K4Q7EQ=
Subject key identifier: DA:77:BF:D9:20:E8:20:E0:4D:09:F3:08:E2:5C:83:BF:12:99:4D:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 189525BFCD83BD20C3710D5E3FBA55057FE96EAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa
Signing time: Tue 28 Jan 2025 10:59:14 +0000
ROA not before: Tue 28 Jan 2025 10:54:14 +0000
ROA not after: Tue 27 Jan 2026 10:59:14 +0000
asID: 47583
IP address blocks: 147.93.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:95:25:bf:cd:83:bd:20:c3:71:0d:5e:3f:ba:55:05:7f:e9:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 28 10:54:14 2025 GMT
Not After : Jan 27 10:59:14 2026 GMT
Subject: CN=DA77BFD920E820E04D09F308E25C83BF12994DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:20:a9:15:6a:40:c1:7b:38:13:09:ba:bb:
7e:55:2b:70:15:dd:3e:c0:e0:60:f5:1a:1d:af:4d:
8d:b6:fe:ca:0c:84:76:f4:6f:f6:90:02:74:fd:b7:
03:5a:f5:0e:b4:0d:bf:61:98:f7:9d:b2:76:e6:a7:
22:b7:52:ad:13:6d:9b:2a:db:e2:d1:d8:d9:49:71:
48:4e:7c:7e:62:b3:bc:94:d7:bd:70:ba:1b:cb:8e:
b7:67:64:a3:eb:a7:3a:df:6f:64:2c:a8:39:31:b1:
26:32:c4:d3:7c:34:58:6a:68:2d:17:b9:0c:06:4a:
52:73:57:e2:48:dd:44:0f:ff:64:73:8a:6b:ec:e0:
39:6d:a7:c4:5f:d2:fe:be:aa:d9:10:f3:74:cf:4e:
1d:e4:d9:44:f4:de:27:0f:f7:da:9c:0b:47:29:8f:
f1:3b:05:12:51:40:c8:1d:21:52:64:20:48:a5:f6:
3e:32:ac:c1:79:d7:f4:81:0c:f8:1c:12:bd:16:3f:
2b:d0:cb:8c:a5:fb:d0:ed:d8:4c:75:c4:e3:1e:9c:
c8:e9:71:87:44:d9:09:23:7f:41:17:fe:fd:32:62:
c1:29:42:2e:5b:dc:1e:d2:a5:05:59:31:b6:8e:d0:
12:65:a2:57:3f:8c:03:2b:d8:33:b8:ef:76:97:fb:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:BF:D9:20:E8:20:E0:4D:09:F3:08:E2:5C:83:BF:12:99:4D:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.80.0/22
Signature Algorithm: sha256WithRSAEncryption
58:62:13:c5:60:d1:51:d7:f0:e7:25:6a:2d:36:1a:4e:92:1e:
d0:f2:35:55:ba:4f:f6:e9:27:30:fc:f8:67:9d:da:b1:33:e6:
05:80:97:e9:50:a6:b6:7f:26:1b:83:8e:a6:bf:04:b7:6c:6c:
57:e7:25:64:72:17:1b:e4:14:75:f7:db:a5:f6:59:ab:e8:7b:
9f:81:a9:f8:90:dc:ed:f5:8b:6d:cc:c0:8b:74:59:84:ab:80:
17:85:ba:55:0a:cc:82:24:97:13:49:cf:c6:a8:8d:ee:20:4b:
15:dd:e5:57:5e:02:b3:d7:6b:94:a6:0f:b6:68:d5:6b:1f:ec:
a4:39:e4:bc:4f:cb:40:62:8e:ac:03:04:38:4e:c9:b9:eb:f6:
5d:c2:77:af:dc:cc:d0:18:bf:ea:64:3d:60:66:c1:30:80:e8:
14:87:07:ea:b5:3f:07:b8:17:7a:8e:ce:fc:a8:25:bb:17:e2:
86:d3:cd:11:fb:b5:77:dd:30:88:db:7a:b9:9a:37:f5:37:65:
6d:da:6b:3f:3c:0c:12:ac:ef:c6:73:02:2f:62:7d:54:55:08:
7e:53:63:c3:03:66:b8:5e:62:59:3e:e1:81:d3:e0:a6:c8:85:
fb:70:28:b7:84:a6:88:65:61:f6:b6:a4:fa:74:c9:09:02:d0:
40:b8:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:10 2025 by rpki-client