Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ap8zKa5EjUtNoxpF5rAOLMxoDGmMJ5PjP+bNYYftvAg=
Subject key identifier: 17:2A:48:86:A2:25:16:B0:C1:2F:D2:93:B1:08:BF:35:DE:51:36:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F82849DA5B6C18ADB8B46CCFDA1100B3B300616
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:03 +0000
ROA not before: Mon 27 Jan 2025 09:40:03 +0000
ROA not after: Mon 26 Jan 2026 09:45:03 +0000
asID: 136787
IP address blocks: 155.133.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:82:84:9d:a5:b6:c1:8a:db:8b:46:cc:fd:a1:10:0b:3b:30:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:03 2025 GMT
Not After : Jan 26 09:45:03 2026 GMT
Subject: CN=172A4886A22516B0C12FD293B108BF35DE5136D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:77:84:1c:9b:b1:30:c2:ff:d5:f1:a5:e3:3c:
1c:50:57:0e:25:bb:55:3e:45:48:f2:d6:43:ba:c5:
08:4f:63:b0:66:40:4a:8e:70:73:ff:e3:df:44:57:
d1:96:90:70:72:c8:f9:ae:a6:f6:4b:0a:6d:c5:3e:
cb:20:04:1c:94:1f:fc:bf:bf:3c:77:e3:a1:e8:ab:
4d:de:05:66:a9:f3:af:6b:10:64:81:80:0f:2b:95:
11:99:97:8b:eb:5a:75:69:76:92:a9:77:ee:f3:5d:
0c:37:89:6d:db:bc:66:f9:d8:13:29:b9:55:d1:58:
3b:ba:53:e3:9d:c8:3b:6c:63:1d:59:7b:d8:a1:d3:
7f:70:68:94:2c:28:81:00:f9:9d:00:e5:75:85:cc:
4b:29:bb:bf:ee:22:75:bb:cd:86:bc:01:51:2f:8a:
95:20:3d:68:92:00:34:d6:a0:5d:05:16:df:2a:a8:
4c:44:ba:0c:9e:cd:e1:bf:09:2a:c7:b2:f2:b0:33:
c3:56:35:86:92:7c:93:6c:e6:db:14:1a:b5:59:a5:
4d:c4:93:67:fa:d3:6d:42:1d:75:64:e0:22:48:74:
aa:5d:ea:b4:21:bf:48:4f:84:b5:5b:a5:75:bd:7b:
e7:27:13:cb:5f:62:70:a4:c1:14:95:af:42:0a:45:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:48:86:A2:25:16:B0:C1:2F:D2:93:B1:08:BF:35:DE:51:36:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.10.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5a:67:0d:8e:8f:00:2d:1c:d1:37:5c:2a:27:68:00:db:d3:
92:05:79:e8:a5:0a:a1:7d:0a:ec:11:0e:d5:ee:76:c7:df:86:
0b:4c:1d:44:fb:3f:91:95:62:35:d3:d6:ee:b8:bf:1f:99:55:
84:e3:4b:75:2f:35:65:11:6d:ee:ec:b1:39:ca:f9:25:17:d7:
ae:de:e7:2d:80:1e:4d:63:d6:ce:da:34:5c:40:33:f4:04:47:
0e:35:34:8b:17:c0:fb:f2:17:6f:ed:5c:0d:82:29:80:72:7e:
65:9c:84:b4:ea:16:23:72:36:f0:18:9a:07:0c:be:6f:98:4b:
9a:40:22:30:80:a9:5d:2e:36:67:ba:d4:47:0d:ea:8a:fb:60:
6e:a7:9b:1e:ba:01:e4:b1:37:0e:cb:39:46:13:db:a6:87:57:
f6:53:73:69:aa:9c:e1:28:ae:8a:d5:c3:e1:a7:ad:7d:37:b0:
9d:8b:ec:ee:74:b8:2b:b5:3f:d7:af:e2:d6:1b:29:bb:7f:ef:
8e:c4:53:35:32:9f:20:8d:7a:60:83:83:62:b0:0a:95:48:5c:
aa:35:3a:2a:aa:6e:26:63:0f:68:c9:63:32:ba:74:73:59:bc:
be:cb:4c:fb:4e:7b:d9:1a:05:d0:54:09:8c:60:0d:d5:ed:6d:
ce:71:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:38 2025 by rpki-client