Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20323136313531.roa
File: 3135352e3133332e31312e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: XqymUcnzKLRqfOKtRIZ+oOKl+UlhmwESibjJfiFUjbI=
Subject key identifier: 11:C0:9B:FA:AC:C3:F4:08:A3:DD:3F:E2:12:0A:16:F0:12:71:98:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57E14848A535CD98D8420162A624B59C35252B25
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20323136313531.roa
Signing time: Tue 07 Jan 2025 13:01:38 +0000
ROA not before: Tue 07 Jan 2025 12:56:38 +0000
ROA not after: Tue 06 Jan 2026 13:01:38 +0000
asID: 216151
IP address blocks: 155.133.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e1:48:48:a5:35:cd:98:d8:42:01:62:a6:24:b5:9c:35:25:2b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 7 12:56:38 2025 GMT
Not After : Jan 6 13:01:38 2026 GMT
Subject: CN=11C09BFAACC3F408A3DD3FE2120A16F0127198EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:59:9f:b9:3d:e6:d9:29:7d:7d:2d:c3:9d:f1:
f2:72:29:3f:10:c4:c1:19:e2:00:a7:42:22:89:4d:
e9:7d:9d:a1:0d:1d:52:08:a4:21:ee:9f:35:4e:51:
96:0f:81:da:e7:80:81:d1:79:38:29:1f:7b:8c:82:
25:c3:d3:c4:ee:21:5e:f7:19:5f:e6:73:88:95:61:
ad:ec:fd:c4:f2:44:8e:ec:91:3f:fe:e7:e2:0c:69:
97:01:3f:f6:4f:8e:a9:ad:25:7f:d5:0f:2f:52:24:
0a:21:fa:f8:bb:75:49:e8:9d:29:93:3b:39:a1:94:
73:9d:8a:95:2e:56:c8:36:be:5d:d9:24:23:c5:22:
8d:ac:a5:eb:06:c2:f9:a4:41:ee:54:14:84:3a:96:
3f:7b:52:c6:45:16:1e:e6:e2:ae:51:00:69:ea:30:
d6:cf:8c:af:71:2e:88:64:f4:30:7f:da:81:83:20:
38:a2:7b:90:40:79:c6:43:e7:68:d6:5a:ca:17:94:
c7:f4:8a:b2:18:ab:0f:18:6e:f9:e0:51:fb:ca:33:
fa:03:72:13:4d:cd:7d:dc:1c:b5:31:44:44:4d:e5:
1f:59:51:3d:c1:10:c2:8b:22:0a:16:13:43:d0:f5:
80:a8:a9:be:2e:bc:19:df:5b:36:97:ff:ff:fd:d5:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:9B:FA:AC:C3:F4:08:A3:DD:3F:E2:12:0A:16:F0:12:71:98:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.11.0/24
Signature Algorithm: sha256WithRSAEncryption
94:89:5d:a4:5e:d1:79:74:ff:e4:5c:2e:f9:53:70:1b:42:e7:
7f:bc:c9:75:c4:92:e1:db:d2:35:0e:c9:87:eb:7d:c7:34:fe:
13:85:0f:ad:87:86:60:0d:22:73:be:c9:2e:6c:e8:91:a0:5f:
8a:49:54:94:dd:1f:b0:2f:8f:1a:c9:7e:8c:88:5c:bd:5d:b9:
e3:67:20:7c:54:43:a4:1a:0f:e9:04:20:dd:4a:2c:b8:50:ff:
16:2b:ad:4f:b9:f5:2d:64:76:ee:8c:5e:80:48:bd:22:5e:a3:
e1:d8:49:e9:ca:59:4b:e1:7e:88:85:ad:91:92:08:ee:9f:86:
88:3e:30:8f:bd:2c:42:71:f2:a7:f0:2f:f7:e9:13:90:21:7c:
32:3f:f5:a2:c3:ca:09:42:7d:59:a7:c6:a9:fb:ef:67:49:95:
a9:4d:29:df:f4:96:b2:8b:98:84:8c:5e:8a:ac:44:f3:67:86:
ee:d4:db:e7:87:fd:1c:ba:40:65:8b:36:16:3e:56:2b:4f:49:
70:b6:17:f1:e3:0e:44:8b:85:86:5c:7a:9d:ed:23:b9:6b:c1:
0e:f1:33:e3:f2:a8:63:8d:3a:65:1a:c9:1d:4a:f4:ce:a5:5d:
ac:9a:28:31:39:b1:a2:67:76:4f:79:23:36:e8:da:cf:c3:ed:
a5:61:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:25 2025 by rpki-client