Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa
File: 3134372e39332e39362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: SxQOwPL1XOshv5ud4PhXq+DUsSRBmCOdFfdrypr/VnY=
Subject key identifier: 30:09:99:2E:77:33:21:B8:D0:4D:89:5C:09:DE:3A:83:B9:E5:49:1E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D1AF6789BB2E34EE1571D31CB7E093309971A85
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa
Signing time: Mon 16 Dec 2024 19:54:36 +0000
ROA not before: Mon 16 Dec 2024 19:49:36 +0000
ROA not after: Mon 15 Dec 2025 19:54:36 +0000
asID: 47583
IP address blocks: 147.93.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1a:f6:78:9b:b2:e3:4e:e1:57:1d:31:cb:7e:09:33:09:97:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 16 19:49:36 2024 GMT
Not After : Dec 15 19:54:36 2025 GMT
Subject: CN=3009992E773321B8D04D895C09DE3A83B9E5491E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:94:2e:4f:86:5b:1f:a2:f3:8a:6c:f5:73:
03:18:ee:5e:2f:ea:af:95:2b:c1:c8:77:c2:57:e7:
f7:69:d3:90:76:52:29:2e:69:27:c3:35:89:bd:8e:
59:44:b3:5d:b1:11:81:62:48:c0:d6:65:37:c8:7f:
da:e0:da:98:7a:92:16:ec:46:31:69:92:96:13:87:
53:32:96:5e:eb:9e:00:15:eb:92:bc:5d:8d:f3:43:
6e:6f:8f:7c:b1:70:4f:78:db:5a:55:a0:94:ac:14:
ec:e6:d3:a9:f7:ab:18:98:96:79:89:18:18:ea:6e:
a4:18:ec:c0:46:80:40:b6:bb:f3:22:0c:79:53:8e:
e0:4e:99:c6:5e:9b:4f:e4:d6:45:da:e2:ab:74:99:
9d:9e:4d:01:69:94:2f:e2:57:a7:38:37:40:2e:bf:
6f:97:fe:af:0f:0f:8f:99:e1:ed:f6:08:61:74:73:
f9:18:f2:51:e5:ef:56:e5:3d:0d:90:ba:88:ac:2d:
3b:22:2f:ec:0a:fa:71:e7:c7:5a:3b:64:ff:ae:ea:
3a:c1:1c:d3:be:fa:c3:b5:ea:ba:47:0d:af:48:17:
3a:0d:5d:63:2d:1e:2e:90:32:00:04:16:ec:98:97:
a7:5a:32:ae:4a:32:f6:0f:f2:ed:58:27:37:db:c9:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:99:2E:77:33:21:B8:D0:4D:89:5C:09:DE:3A:83:B9:E5:49:1E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:87:e1:6e:f3:87:f8:ce:7f:56:6f:03:55:9f:10:78:7f:14:
72:3e:38:93:f9:a8:ae:ea:5c:8a:17:70:62:1a:d0:75:ef:20:
72:f9:7f:0e:41:90:0d:b8:23:b3:da:fb:34:95:2c:25:5b:fb:
b5:1c:79:95:1d:48:3d:50:67:8d:fc:f4:60:b6:1c:52:47:b9:
e8:56:08:3d:25:24:7e:ca:3b:25:b1:c6:06:a0:28:c3:12:9b:
31:55:e8:f2:e6:18:90:2a:ba:91:c8:c0:26:33:42:57:ac:59:
7b:3d:60:a0:cd:14:7e:74:13:53:6e:6c:1e:d7:2c:ba:d0:0d:
9f:a9:de:e8:9e:8b:cf:02:45:92:f4:43:d2:f5:9c:e6:6b:6f:
81:b5:cc:80:50:d6:6d:74:41:d6:e8:55:fd:37:da:8c:cb:0b:
3a:9e:43:69:41:48:81:05:f0:70:4f:d1:be:12:67:3f:94:20:
9f:58:04:a6:57:9c:73:41:03:cc:e9:e3:f4:a9:bb:de:95:57:
29:d4:c8:ce:58:53:c6:51:6a:b7:b2:41:96:c3:73:81:0f:22:
f6:d9:69:4a:7f:ab:c5:e1:9d:1d:3d:22:7d:da:9c:a5:8c:6d:
8a:7b:63:6b:60:8a:da:8c:23:ef:2e:87:7e:01:2e:24:6d:59:
4e:14:05:18
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDRr2eJuy407hVx0xy34JMwmXGoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMTYxOTQ5MzZaFw0yNTEyMTUxOTU0MzZaMDMxMTAvBgNV
BAMTKDMwMDk5OTJFNzczMzIxQjhEMDREODk1QzA5REUzQTgzQjlFNTQ5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhE5QuT4ZbH6Lzimz1cwMY7l4v
6q+VK8HId8JX5/dp05B2UikuaSfDNYm9jllEs12xEYFiSMDWZTfIf9rg2ph6khbs
RjFpkpYTh1Myll7rngAV65K8XY3zQ25vj3yxcE9421pVoJSsFOzm06n3qxiYlnmJ
GBjqbqQY7MBGgEC2u/MiDHlTjuBOmcZem0/k1kXa4qt0mZ2eTQFplC/iV6c4N0Au
v2+X/q8PD4+Z4e32CGF0c/kY8lHl71blPQ2QuoisLTsiL+wK+nHnx1o7ZP+u6jrB
HNO++sO16rpHDa9IFzoNXWMtHi6QMgAEFuyYl6daMq5KMvYP8u1YJzfbySdNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMAmZLnczIbjQTYlcCd46g7nlSR4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzOTM2
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJNd
YDANBgkqhkiG9w0BAQsFAAOCAQEAfIfhbvOH+M5/Vm8DVZ8QeH8Ucj44k/morupc
ihdwYhrQde8gcvl/DkGQDbgjs9r7NJUsJVv7tRx5lR1IPVBnjfz0YLYcUke56FYI
PSUkfso7JbHGBqAowxKbMVXo8uYYkCq6kcjAJjNCV6xZez1goM0UfnQTU25sHtcs
utANn6ne6J6LzwJFkvRD0vWc5mtvgbXMgFDWbXRB1uhV/TfajMsLOp5DaUFIgQXw
cE/RvhJnP5Qgn1gEplecc0EDzOnj9Km73pVXKdTIzlhTxlFqt7JBlsNzgQ8i9tlp
Sn+rxeGdHT0ifdqcpYxtintja2CK2owj7y6HfgEuJG1ZThQFGA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:40 2025 by rpki-client